Company Privacy Policy
ProductSync s.r.o., ID No.: 243 727 22, with registered office at Olešná 51, 338 24 Němčovice, represented by Petr Ferschmann, Managing Director, registered in the Commercial Register maintained by the Regional Court in Pilsen, File No. C 47916 (hereinafter referred to as “we” or “controller” for the sake of simplicity).
We do not take the protection of personal data lightly. In this policy, you will learn for what purpose, for what reason and how we process your Personal Data. You will also find information about your rights in relation to the protection of personal data.
If you have any further questions regarding the processing of your Personal Data, please contact us:
by e-mail privacy@productsync.com or
by post to the address of ProductSync’s registered office: Olešná 51, Němčovice, Postal Code 338 24.
We need some Personal Data to provide the ProductSync service (to fulfil the Contract), we process some Personal Data on the basis of our legitimate interest. For some Personal Data, we are required by law to process it (for example, to keep accounts). In some cases, we use Processors who may have access to your Personal Data. These include, for example, accounting companies, marketing specialists and cloud solution providers. Where necessary, we will ask you for your consent to process your personal data.
Data Protection Officer: We regularly consult on Personal Data processing processes with our data protection officer.
When is ProductSync a controller? In relation to Users of our website, we are the controller of Personal Data. You have entrusted us with some information about yourself (e.g. your name and email) so that we can, for example, register an account for you. An overview of the Personal Data processed, including the reasons for processing it, can be found below. If anything is unclear, please do not hesitate to contact us by email privacy@productsync.com.
When is ProductSync in the position of processor? We provide a Service, the purpose of which is to display data from public sources and specialized databases in target applications, connecting applications from the corporate environment User with target applications and the associated transfer and processing of data. In relation to customers of Users of our Service, we may be in the position of Personal Data Processor. If we process Personal Data of customers of Users of our Service, we do so on behalf of our customers only as a processor and in accordance with the instructions of our customers (Service Users). This relationship is governed by the Personal Data Processing Agreement (DPA), which is an annex to the ProductSync Terms of Service.
To make the text clearer, we will simplify your reading with a few terms that we use in this Privacy Policy:
GDPR Regulation (EU) 2016/679 of the European Parliament and of the Council;
Commercial communication usually an email or SMS message sent for the purpose of promoting our services;
Personal data any information about a User that can be used to directly or indirectly identify him or her;
Service a software service operated by the Provider for the purpose of providing services consisting in particular of the paid provision of intermediation of connections between User-selected Applications (or data transfer between them), as well as the display and transfer of data from public sources and specialized databases to target Applications;
Contract a contract for the provision of Services as set out in the ProductSync Terms of Service, which is concluded between us and a registered User, or it will be a contract under individually agreed terms that have been agreed;
User / you a natural person to whom the Personal Data relates, most often a customer (a person who has created a User Account with us and is provided with the Service) or a potential customer, or a user of our website who is only browsing it;
Processor we use other entities to, for example, ensure secure data storage or to send you a newsletter. During this cooperation, they may process Personal Data that you have provided to us;
Processing of Personal Data simply put, it is any handling of Personal Data - whether it is its storage, sharing, deletion, or modification;
Special categories of Personal Data data that we understand to be more sensitive. For example, they relate to your ethnic origin, your sexual orientation, whether you are in a trade union or your health and your beliefs. Genetic and biometric data are also considered to be a special category of data if they are processed for the purpose of uniquely identifying a natural person. We do not process these Personal Data.
1. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU AND HOW?
How do we process your personal data? We process your Personal Data only to the extent necessary to achieve the purpose for which the data was collected and we comply with security technical and organizational rules when processing it. The Personal Data processing process is automated, but we do not perform profiling. The Personal Data processing process is automated, but we do not perform profiling. The specific purposes of data processing and the categories of personal data that we process for each purpose are detailed in the following section.
→ Name and surname → Contact details (in particular e-mail, telephone number) → Login to the user account and behavior in the user account (in particular data filled in by the User in the user account, time of registration, date of last profile update)
→ Data in the query sent by the customer or another person → Billing information and bank details (data necessary for bookkeeping and making payments) → Information you provide to us in the course of communication with us (in particular your questions and answers to your questions, communication with you)
→ Comments you add to our posts on social networks (in particular Facebook, Twitter, LinkedIn, Youtube), as well as the name (nickname) of your profile on these social networks and information publicly available on your profiles → Cookies and IP address, activity data (including information about your device or operating system) → Data contained in the submitted CV
Special categories of Personal Data. We do not process any sensitive Personal Data about you.
A. USERS OF OUR WEBSITE
If you visit our website, we process your Personal Data for the purposes set out in this table.
If you are interested, you can subscribe to commercial communications or similar promotional material that we prepare for potential Service users on the website or via email. To subscribe to commercial communications, you must provide us with some of your personal data for processing with your consent.
Why? What data? How? How long?
Website visit. Ensuring the basic functions of our website, analytics, improving our services and marketing. We also process Personal Data to show you relevant content or our advertising on other websites. You can set your preferences in the cookie bar. The legal title for the processing of Personal Data is consent or our legitimate interest (necessary cookies). Information about when and how you visit and browse our website, which may include: IP address, date and time of access to our website, information about your internet browser, operating system or language settings, history of your behavior on the website, e.g. which links on our website you visit. However, information about your behavior on the website is anonymized for the sake of your maximum privacy. If you visit our website via a mobile phone, we may also process data about your phone. Cookies or other technologies to track User behavior. The length of processing varies depending on the type of cookie. Some process data only for the duration of the session (visit), some for a longer period. More information can be found in the Cookie Policy.
Sending a query. By submitting a query, you express your consent to the processing of Personal Data for the purpose of processing the query. Name, surname, telephone number, e-mail. In order to process the query, we process the Personal Data that is necessary to process it. Communication takes place by telephone, e-mail, or directly on our website Closed queries are regularly deleted, but no later than 3.5 years after the query is submitted.
Sending commercial communications (direct marketing). You have given your consent to receive newsletters. If you do not wish to receive the newsletter, you can unsubscribe in the footer of the email. Name, surname, telephone number and e-mail. We send a newsletter in which we inform about our services and news. The data is processed for a period of 2 years from the last active viewing of the newsletter, unless you unsubscribe earlier.
B. CUSTOMERS
If you create a user account with us, we will process your personal data to the extent necessary to provide you with all the functions of the Service in accordance with the ProductSync Terms of Service.
If you use our customer support services, we record communications from the communication channels you use, such as email and telephone calls, and we further process this Personal Data in order to provide you with the Service in particular.
If you are interested, you can subscribe to commercial communications or similar promotional material that we prepare for existing customers on the website or via email.
Why? What data? How? How long?
Website visit. Ensuring the basic functions of our website, analytics, improving our services and marketing. We also process Personal Data to show you relevant content or our advertising on other websites. You can set your preferences in the cookie bar. The legal title for the processing of Personal Data is consent or our legitimate interest (necessary cookies). Information about when and how you visit and browse our website, which may include: IP address, date and time of access to our website, information about your internet browser, operating system or language settings, history of your behavior on the website, e.g. which links on our website you visit. However, information about your behavior on the website is anonymized for the sake of your maximum privacy. If you visit our website via a mobile phone, we may also process data about your phone. Cookies or other technologies to track User behavior. The length of processing varies depending on the type of cookie. Some process data only for the duration of the session (visit), some for a longer period. More information can be found in the Cookie Policy.
Registration. In order to start using the Service, it is necessary to first conclude a Contract with us. By completing the registration, the Contract between us is concluded. When registering, you enter your E-mail or Google account and Microsoft account, and in your user account you fill in your name, surname and possibly other contact details and website URL. You also enter billing information and the information of another user. You provide us with this information when completing the questionnaire after filling in the registration form and creating a user account. This is the performance of the Contract. The data is processed for the duration of the Contract, or until it is transferred, and subsequently for a period of 4 years from the termination of the Contract. The transfer of personal data is governed by the Personal Data Processing Agreement.
User account. If you create a user account, we will process your Personal Data to the extent necessary to provide you with all the functions of the Service. Data filled in during registration, in particular your e-mail and other contact details (see above). The scope of Personal Data processing may vary depending on which Personal Data you fill in in your User Account and which functions of the Service you will use. You provide us with this information when creating a user account. This is the performance of the Contract. We process your data for this purpose for the duration of the user account.
Communication with customer support, requests and complaints. By submitting a query, you express your consent to the processing of Personal Data for the purpose of processing the query, or Personal Data is processed on the basis of a concluded Contract. Name, surname, telephone number, e-mail, invoice number and user account. In order to process the query, request or complaint, we process the Personal Data that is necessary to process it. Communication with customer support takes place by telephone, e-mail, or directly on our website. Closed queries and complaints are regularly deleted, but no later than 3.5 years from the query or resolution of the complaint.
Direct marketing, in particular sending commercial communications. We may send newsletters to our customers on the basis of legitimate interest in improving and promoting our services or to those who have given their consent to receive them. If you do not want to receive the newsletter you can unsubscribe in the footer of the email. Name, surname, telephone number and e-mail. We send a newsletter in which we inform about our services and news. The data is processed for a period of 2 years from the last active viewing of the newsletter, unless you unsubscribe earlier.
Accounting. We accept Remuneration from you for the provision of services and issue accounting and tax documents to you, which we then archive and further work with for the purposes of proper bookkeeping and fulfilling legal obligations. Data on the invoice - name, surname, e-mail address, billing address, or other identification of the User and details of the performance under the Contract. Data on the tax document: name, surname, e-mail address, billing address, or other identification of the User and details of the services provided. After filling in the payment information in the profile, we will save this data to create an invoice. We fulfill a legal obligation. We have a legal obligation to archive accounting documents and accounting records (invoices) for a period of 5 years starting at the end of the accounting period to which they relate. We also have an obligation to keep the invoice for a period of 3 years from the end of the tax period in which the tax liability related to the invoice arose. We also have an obligation to archive tax documents for a period of 10 years from the end of the tax period in which the performance took place.
Sending information related to the performance of the Contract. Name, surname, e-mail address, billing address, or other identification of the User and details of the performance under the Contract. We also process your personal data for the purpose of sending information relating to our contractual relationship. This may include changes to the Terms of Service or the price list. The data is processed for the duration of the contractual relationship.
Compliance with legal obligations. In certain cases, we must process your personal data in order to comply with obligations imposed by law. In particular, it may be the name, surname, e-mail address, billing information, or other identification User. In this case, we process your Personal Data in order to comply with applicable laws (fulfilment of a legal obligation). We process your Personal Data for the period specified by the relevant legal regulations.
C. JOB APPLICANTS.
Why? What data? How? How long?
Job offers. On our website, in the Job Positions section, you can find currently vacant jobs. This is the data you provide to us in your CV. Name and surname, address, date of birth, telephone number, e-mail address, or a link to a social network, information about previous employment, education, interests, skills, certifications. We will look at the documents you send us, which contain Personal Data, and contact you on the basis of them. We have a legitimate interest in retaining the Personal Data of job applicants for a period of 3 years. The reason is that we may later have an interesting job offer for you with us.
2. WHO ARE OUR PROCESSORS?
Processors. We only use verified Processors with whom we have a written contract and who provide us with at least the same guarantees as we provide to you. The data that Processors may process, including their purpose and legal title of processing, are listed above.
Website operation and security, blog
DigitalOcean, Hetzner
Provision of the Service, individual tailor-made extension services
DigitalOcean, Hetzner
Communication with customer support, processing of queries
Freshdesk
Handling complaints and claims
Freshdesk, ClickUp
Sending newsletter (direct marketing)
Ecomail
Promotional events (webinars) and social networks
Facebook, YouTube,
LinkedIN
Accounting
3kont,
ABRA Flexi
Regular website traffic analysis
internal Matomo system
Legal obligations. We may transfer Personal Data to third parties other than the above-mentioned Processors if required by law or in response to lawful requests from public authorities or at the request of a court in legal disputes.
3. WHAT MEASURES HAVE WE TAKEN TO PROTECT YOUR PERSONAL DATA?
The scope of processing within the provision of the Service can be influenced by our customers by their own settings in the User Account.
Technical and organizational measures.
Security is very important to us and therefore we are constantly working to ensure that your Personal Data is protected. When choosing measures, we take into account the scope of processing, the riskiness of processing or the state of our technology.
we regularly back up data;
we encrypt data using SSL/TLS (“secure sockets layer / transport layer security”) for all data transfers;
we use the secure HTTPS protocol;
our data on the servers is encrypted;
access passwords to information systems (where Personal Data will be processed) and access rights are controlled at the individual level.
Organizational measures.
We have adopted and undertake to comply with the following measures:
Our employees are bound by confidentiality;
Our employees are properly trained and also regularly trained on GDPR and familiarized with the rules of safe work on work equipment;
Access to all systems, including the information system, is personalized and covered by secure passwords;
We store passwords in the operating environment in a separate location (Safe store), to which logs are recorded so that we can control employee access to individual Personal Data of Users.
4. YOUR RIGHTS AND THE POSSIBILITY TO SUBMIT A REQUEST REGARDING THE PROTECTION OF PERSONAL DATA
In connection with the protection of personal data, you are guaranteed the rights described below, which you can exercise:
by e-mail privacy@productsync.com or
by post to the address of ProductSync’s registered office: Olešná 51, Němčovice, 338 24.
How quickly will we process your request? We will respond to you within one month at the latest. If providing
information would compromise the privacy of others, or if providing it would be disproportionate to the risks or costs of
providing it, we may not be able to comply with your request. In order to process your request as soon as possible, we may
we will need to verify your identity. In the event of a repeated request, the controller will be entitled to charge a reasonable fee for a copy of the Personal Data.
Right of access
We will confirm whether we process your Personal Data. You have the right to information about the purposes of processing, categories of personal data, recipients to whom it is disclosed, processing time. You have the right to know whether any right has already been exercised. The prerequisite is also that the rights and freedoms of other persons are not adversely affected, including a copy of personal data.
Right to rectification
You have the right to request the correction of inaccurate personal data. You can correct some data in your user profile.
Right to erasure
If there is no other reason to continue processing this data, we will delete or anonymize the data you request.
Right to restriction of processing
Please contact us if you believe that we are processing data incorrectly. Whether it concerns the reasons for processing or its scope.
Right to notification of rectification, erasure or restriction of processing
If you contact us with a request, we will inform you of the result. Sometimes it may happen that we will not be able to comply (e.g. the e-mail address from which you wrote to us no longer works).
Right to portability
Your Personal Data, which you have provided to us in a structured and machine-readable format, will be provided to another controller at your request.
Right to object
If we process your data on the basis of legitimate interest (e.g. sending a newsletter to Users). It is up to us to prove our legitimate interest. If your objection is justified, we will stop processing Personal Data.
Right to withdraw consent
If you have changed your mind, please let us know. Processing relating to marketing and commercial purposes can be revoked at any time.
Automated individual decision-making, including profiling
You don’t want to be decided about by a computer? We respect your right, therefore we do not perform profiling. We provide the Service, your Personal Data may be processed automatically.
5. CONCLUSION
This Privacy Policy may only be amended in writing. You will be informed of this through our website.
If you have any questions regarding our Privacy Policy, please contact us at privacy@productsync.com.
If you are dissatisfied, you can file a complaint or grievance with the Office for Personal Data Protection at any time, with its registered office at Pplk. Sochora 727/27, 170 00 Prague 7 - Holešovice (more at https://www.uoou.cz/)
This Privacy Policy is effective from March 1, 2026.