Privacy Policy for the ScopeCheck Service
Controller: VisionEdge s. r. o., 29. augusta 1503/1A, 958 01 Partizánske, Slovak Republic Company ID (IČO): 51962161, Tax ID (DIČ): 2120848521 (not a VAT payer) Registration: Commercial Register of the District Court Trenčín, Section Sro, Insert No. 37109/R Data protection contact: info@visionedge.sk
Version: 1.0 · Effective date: 21 June 2026
1. Introduction
This policy explains how VisionEdge s. r. o. ("we") process personal data in connection with ScopeCheck — a one-time audit of a client brief before software development (scopecheck.visionedge.sk). Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll.
2. Our role in processing
2.1 Controller: With respect to order data, contact and billing data, and operation of the Service, we are the controller. This is governed by this policy.
2.2 Processor: With respect to the content of the uploaded brief (where it contains personal data, e.g. names and contacts of persons connected with the customer's project), we are a processor — the controller is the Customer. This is governed by the Data Processing Agreement (DPA).
3. What data we process and for what purpose
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Contact and order data (email, Order ID) | handling the order and delivering the Report | Art. 6(1)(b) — performance of a contract |
| Content of the uploaded brief | performing the audit | Art. 6(1)(b) and consent granted |
| Billing data | billing and bookkeeping | Art. 6(1)(c) — legal obligation |
| Technical and operational data (logs) | security and operation | Art. 6(1)(f) — legitimate interest |
When ordering, you grant consent to processing the document for the purpose of the audit and confirm that the document contains no sensitive data (special categories under Art. 9 GDPR).
4. Document deletion and retention period
4.1 The uploaded brief is processed solely for the purpose of the audit and is deleted 24 hours after the Report is delivered. If an order is refunded, the files are deleted.
4.2 We retain order data and billing documents for the period required by law (accounting documents usually for 10 years). We retain the Report and order metadata only to the extent necessary for the performance of the contract, evidentiary purposes and accounting.
4.3 We retain logs usually for 12 months.
5. Recipients and processors
| Processor | Purpose | Location |
|---|---|---|
| Hosting provider | hosting of the application and temporary storage of the brief | [fill in — EU] |
| Payment provider | processing the payment (EUR 49) | [fill in] |
| Email provider | sending the confirmation and the Report | [fill in] |
The audit is performed by the Provider's consultant; the brief is not provided to any external AI provider or for training third-party models.
Operational note: I have deliberately not named the specific providers (hosting, payment, email) — before publishing, fill them in according to reality, including the region and any SCC.
6. Transfers to third countries
If any provider processes data outside the EEA, we will safeguard the transfer with appropriate safeguards under the GDPR (in particular standard contractual clauses, SCC).
7. Rights of data subjects
You have the right to access, rectification, erasure, restriction of processing, portability, to object to processing based on a legitimate interest, and to withdraw consent. Exercise them at info@visionedge.sk. If your data is contained in a brief uploaded by the Customer (the controller), exercise them with that Customer. You have the right to lodge a complaint with the supervisory authority:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27
https://dataprotection.gov.sk
8. Cookies
We use only strictly necessary cookies. Details are set out in the separate Cookie Policy.
9. Security of processing
We apply appropriate measures: encrypted transmission (HTTPS/TLS), access management (including the administration interface for consultants), confidentiality, time-limited storage of the brief (deletion within 24 hours of delivery), and monitoring.
10. Changes to this policy
We may update this policy when the Service, processors or legislation change. The current version is always available on the Service's website.
11. Contact
VisionEdge s. r. o., 29. augusta 1503/1A, 958 01 Partizánske, info@visionedge.sk, https://visionedge.sk