Data Protection Policy

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR)

We at Quority s.r.o. (provider of Quority services) value the privacy of individuals and process personal data in accordance with applicable data protection laws, in particular the GDPR.

This policy provides essential information about the processing of personal data in connection with our services.

This includes information provided pursuant to Articles 12 and 13 of the GDPR.

The Controller provides Clients with services consisting primarily in facilitating and managing advertising activities on selected advertising platforms (such as Meta, Google, TikTok and others), including the administration of advertising accounts and budgets, the management of orders, reporting, and related support services, in accordance with the relevant agreements and the Terms and Conditions for Advertising Asset Agreement. For these purposes, the Controller processes necessary personal data. 

Data controller 
The controller of personal data according to Article 4(7) of the GDPR is:
name: Quority s.r.o.
registered office: Dornych 486/47b, Trnitá (Brno-jih), 617 00 Brno
company ID: 090 50 434
(hereinafter referred to as the “Controller”)

Purposes and legal basis for the processing of personal data 

The Controller processes personal data of Clients (including their representatives and users of the Controller’s platform) and service providers.

Note: In relation to personal data processed within advertising accounts on platforms such as Meta, Google or TikTok, the Controller acts as a processor on behalf of the Client, who remains the data controller in relation to such data. The relevant platform providers (e.g. Meta, Google) act as independent controllers with regard to personal data processed for their own purposes.

Categories of Personal Data
The Controller processes the following categories of personal data:

• Identification data (name, surname)
• Contact details (e-mail, phone number)
• Job-related data (job title or position, company name)
• User account data (login details for access to advertising accounts)
• Billing information (address, VAT ID, invoicing details)
• Information related to advertising accounts and campaigns (such as account IDs, user activity logs or performance reports, where such information may contain personal data)
  
  Note: In the case of corporate Clients, certain data may not constitute personal data under the GDPR.

Recipients of Personal Data 

• The Controller may share personal data with:
• Contracted IT service providers (e.g. hosting, CRM systems)
• Advertising platform providers (Meta, Google, TikTok, etc.)
• External professional advisors (legal, accounting)
• Public authorities were required by law

Transfers to third countries: Some recipients (e.g., Meta, Google) are located outside the EEA. Appropriate safeguards are ensured, such as standard contractual clauses.
Cookies and similar technologies: Information on the use of cookies is available in the cookie banner displayed on the Controller’s website: https://quority.com/. 

Retention Period
The Controller retains personal data only for as long as necessary to fulfil the purposes described above:

• For the duration of the contractual relationship
• For statutory retention periods (e.g., accounting, tax records)
• For limitation periods for potential legal claims

Rights of data subjects
As a data subject, you have the following rights:

• the right to obtain from the controller concise, transparent and easily accessible information about the processing of personal data and other appropriate communications (Articles 12 and 13 of the GDPR),
• the right to obtain confirmation from the controller as to whether they process your personal data or to request access to such personal data (Article 15 of the GDPR),
• the right to have inaccurate personal data rectified or incomplete personal data completed (Article 16 of the GDPR),
• the right to erasure of personal data - the ‘right to be forgotten’ (Article 17 of the GDPR),
• the right to restriction of processing (Article 18 of the GDPR),
• the right to data portability, i.e. the right to transmit the data to another data controller (Article 20 of the GDPR),
• the right not to be subject to a decision based solely on automated processing, including profiling (Article 22 of the GDPR),
• the right to object to the processing of personal data (Article 21 of the GDPR),
• where processing is based on consent of the data subject, the right to withdraw consent at any time.

If you believe that the processing of your personal data has violated the GDPR, you have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, mailbox ID: qkbaa2n, e-mail: posta@uoou.cz.

If you have any questions or requests, please do not hesitate to contact us in writing at the address of the company’s registered office or at email address info@quority.com.