PRIVACY POLICY

Company TeskaLabs Ltd, registered office at 124 City Road, London, England, EC1V 2NX through its branch office TESKALABS LTD, odštěpný závod, registered office at V olšinách 2300/75, Strašnice, 100 00 Praha 10, Czech Republic (“TeskaLabs”), as a personal data controller, hereby informs about the processing of personal data carried out in connection with the provision of its products and services, operation of the website at www.teskaskalabs.com (“Website”) and other activities described below, as well as about the rights available to data subjects in connection with this processing.

For any questions regarding privacy and to exercise your rights in relation to personal data processing, please contact: info@teskalabs.com.

 

1. / TeskaLabs’ role in the processing of personal data

In the cases described in this document, TeskaLabs acts as a data controller in the processing of personal data.

In certain cases, TeskaLabs also acts as a data processor, particularly in relation to personal data that clients of TeskaLabs (“Clients”) upload to and may process within certain TeskaLabs products. In these cases, TeskaLabs processes the relevant personal data for Clients and in accordance with their instructions. TeskaLabs’ obligations as a data processor are governed by a data processing agreement which forms part of the contract concluded between the Client and the TeskaLabs regarding the use of the products (“Contract”).

 

2. / Purposes, legal grounds, categories of personal data processed and duration of processing

2.1. / Conclusion and performance of the Contract

TeskaLabs provides services to its Clients on the grounds of the Contract. For the purposes of negotiating and concluding the Contract and its subsequent performance, TeskaLabs processes the following personal data:

• identification and contact data of the people acting on behalf of the Client with TeskaLabs (employees, executives or other representatives of the Client, who themselves are not a party to the Contract, however they communicate and act on behalf of the Client), information about their relationship to the Client and information from communication with them,
• in case the Client is a natural person - Client’s identification data (title, name, surname, registration number, tax ID number, address of registered office), Client’s contact information (e-mail address, delivery address, phone number), information included in the Contract, about its performance and termination, information from communication with TeskaLabs, billing information and login credentials for the Client’s account.

Without the above data, the Contract cannot be concluded and performed.

Legal grounds for processing the above data:

• in case of a Client – natural person: performance of the Contract and taking steps at the request of the Client prior to entering into the Contract,
• in case of the people acting on behalf of the Client: legitimate interests pursued by TeskaLabs (to be able to enter into Contracts with Clients, communicate and perform TeskaLabs’ obligations towards the Clients).

For this purpose, the personal data is processed for the duration of the negotiation, conclusion and performance of the Contract.

 

 

2.2. / Fulfilment of accounting and tax obligations and obligations arising from other legislation

TeskaLabs is required to process personal data in cases where this is imposed by law, to the extent required by such legislation. This includes, among other things, the following legal obligations.

In order to fulfil obligations arising from legislation in the field of accounting and tax, TeskaLabs is required to process the following personal data:

• personal data contained in Client’s billing details, in issued invoices, and other data required by applicable legislation.

TeskaLabs also processes personal data where this is necessary to fulfil obligations arising from legislation governing the provision of some products (such as Logman.io), in particular under Regulation (EU) 2022/2065, the Digital Services Act (“DSA”), pursuant to which TeskaLabs must receive and handle complaints regarding illegal content. In this context, TeskaLabs may process personal data required under the DSA for the handling of complaints, especially:

• identification and contact details of the complainant,
• data concerning the reported content and related circumstances relevant to the handling of the complaint, and related correspondence with the complainant.

Legal bases for the processing of the above data:

• fulfilment of TeskaLabs’ legal obligations arising from applicable legislation.

For this purpose, personal data is processed for the period stipulated by the applicable legislation. Specifically, in the following cases:

• For accounting and tax obligations, this is generally 5 years from the end of each accounting period, and in the case of documents relevant to VAT, 10 years from the end of the tax period in which the relevant supply took place.
• In connection with the handling of notices and complaints and the reasoning of decisions under the DSA, the relevant records are typically retained for the period necessary to resolve the given complaint.

 

2.3. / Business leads

TeskaLabs keeps records of business leads (potential Clients, partners etc.). For this purpose, TeskaLabs may process especially the following personal data:

• identification and contact data of potential Clients or partners, relevant contact persons of the potential Clients and partners,
• information about previous interactions with these business leads.

Legal grounds for processing the above data:

• legitimate interests pursued by TeskaLabs (TeskaLabs’ business development).

For this purpose, the personal data is processed generally for 1 year from the last interaction with the lead.

 

 

2.4. / Communication with public, web contact form

To process questions, requests, queries or other communication from public made via TeskaLabs’ publicly available contact details, social media profiles and web contact forms available on the Website, TeskaLabs processes the following personal data of people who decide to contact us:

• identification and contact details provided, content of the communication.

Legal grounds for processing the above data:

• taking steps at the request of the data subject prior to entering into a contract,
• legitimate interests pursued by TeskaLabs (to be able to process the questions, requests and queries).

For this purpose, the personal data is processed for the time necessary to process the question, request or query.

 

 

2.5. / Protection of rights and claims

In order to be able to defend TeskaLabs’ rights and claims in any legal disputes or legal proceedings (in particular to prove, if necessary, that TeskaLabs has acted in accordance with its contractual and legal obligations), TeskaLabs processes personal data, which includes especially:

• identification and contact data of the Clients, people acting on behalf of the Clients and other people who contacted TeskaLabs via publicly available contacts,
• information about the conclusion and performance of a Contract concluded with TeskaLabs including information about violations and related communication,
• other records of TeskaLabs’ compliance with its contractual and legal obligations.

Legal grounds for processing the above data:

• legitimate interests pursued by TeskaLabs (protection of TeskaLabs’ rights and claims, defence against claims of others).

For this purpose, the personal data is processed generally for 4 years, or for the duration of the respective contractual relationship and 4 years after its termination. If relevant proceedings are initiated within this period, TeskaLabs will process the relevant personal data longer, for the whole duration of the relevant proceedings.

 

3. / Regarding the data processing period

The personal data processing period depends on the purpose for which the data is being processed. The processing periods for individual processing purposes are set out above in this document. If certain personal data is being processed simultaneously for multiple different purposes, TeskaLabs will continue to process it until the last of those processing purposes expires (typically, even after the conclusion of the Contract, TeskaLabs may continue to process personal data for the purposes of defending and enforcing its rights).

 

4. / From whom do we obtain a to whom do we disclose your personal data?

We obtain personal data primarily from data subjects or as generated based on the activity of data subjects on the Website (cookies) or in TeskaLabs’ products. You are required to provide only current and accurate data and to inform us as soon as possible in the event of any changes.

Some personal data may be provided to us by the Client (in particular, personal data of persons representing the Client) or, if necessary (where required to fulfil some of the above-mentioned purposes), we may obtain it from public sources (e.g. public registers, websites, LinkedIn, or others).

Personal data is accessible to authorised employees or other collaborators of TeskaLabs. TeskaLabs manages access to personal data in accordance with the “need-to-know” principle; all authorised employees and collaborators process personal data solely to the extent necessary to fulfil the purposes described above and are bound by a duty of confidentiality regarding personal data as well as security measures, the disclosure of which could compromise the security of personal data.

For the processing of your personal data, TeskaLabs uses the following processors:

• Microsoft Ireland Operations Limited, 70 Sir John Rogerson´s Quay, Dublin, D02 R296, Ireland; the provider of office software suite Microsoft 365+; personal data is transferred outside the EU (to the USA) based on EU Commission’s adequacy decision (Microsoft Corporation is an active participant in the EU-USA Data Privacy Framework);
• Pipedrive OÜ, Mustamae tee 3a, Tallinn, 10615 Estonia; the provider of CRM system; personal data is transferred outside the EU based on Standard Contractual Clauses and to the USA based on EU Commission’s adequacy decision (Pipedrive Inc. is an active participant in the EU-USA Data Privacy Framework);

Since TeskaLabs is registered in the UK, personal data may be processed by TeskaLabs outside the EU/EEA.

Further information regarding transfers of personal data outside the EU/EEA by TeskaLabs is provided for each individual processor as listed above. Personal data may also be transferred to third countries (outside the EU/EEA) by our processors. TeskaLabs ensures that all processors, when transferring personal data to a third country, are contractually obliged to comply with the requirements of EU legislation governing the transfer of personal data outside the EU/EEA (in particular, that there is a legal basis for such a transfer, typically a European Commission adequacy decision for the given country, or alternatively the execution of standard contractual clauses approved by the EU Commission), and that appropriate additional measures are put in place to protect personal data and the rights of data subjects following the transfer.

TeskaLabs may also provide personal data to other independent data controllers, typically providers of delivery and postal services, tax, legal or other advisors, auditors, or payment service providers. TeskaLabs may also provide personal data to state and other public authorities for the purposes of exercising their statutory duties and powers, where required by law or by an enforceable decision of a public authority. These entities process personal data as independent controllers, and further information regarding their processing of personal data is provided in their own information documents for data subjects.

 

5. What rights do you have in relation to personal data processing?

If you wish to exercise any of the rights, please contact TeskaLabs via the e-mail provided above in this document.

Right of access: You have a right to obtain confirmation as to whether TeskaLabs processes your personal data, and if so, you have the right to access that data, including the right to obtain a copy of the data. Further, you may request information about the details of the data processing, especially about:

• the purposes of processing,
• personal data or, where applicable, categories of personal data subject to processing, including any available information about their source,
• the nature of the automated decision-making, including profiling and information relating to the procedure used, as well as the relevance and expected consequences of such processing for the data subject, if such processing takes place,
• recipients of your personal data and, where appropriate, categories of these recipients,
• the planned period during which the personal data will be stored or, if it cannot be determined, the criteria used to determine that period,
• all available information about the source of personal data unless the data is collected from you,
• information whether the personal data are transferred to a third country and if so, also information about appropriate safeguards relating to the transfer.

 

Your other rights:

• to ask us for an explanation regarding the processing;
• to request rectification, i.e. correction of inaccurate or incomplete personal data;
• right to erasure (to be forgotten) – in certain cases, you may request us to delete your personal information (for example, if the data is no longer necessary for the purposes for which it was collected);
• right to restriction of processing - you have the right to ask us to limit how we can use your personal data (for example if your data is inaccurate or the processing is unlawful);
• right to data portability – to request personal data relating to you in a structured, commonly used, and machine-readable format and transfer this data to another controller without hindering it in any way;
• to object to the processing of your personal data in case the data is processed (i) to perform a task carried out in public interest or in the exercise of official authority vested in the controller, (ii) for legitimate interests pursued by the controller or by a third party, or (iii) for purposes of direct marketing;
• to withdraw consent to processing – if your personal data is processed on the grounds of your consent, you can withdraw your consent to the data processing at any time freely and free of charge;
• to submit a question or complaint to the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), website: www.uoou.cz.

 

This Privacy Policy was last updated 28.08.2026.