Privacy Policy

Name

TourCierge s. r. o.

Address

Karpatské námestie 10A, 831 06 Bratislava – mestská časť Rača, Slovenská republika

E-mail

help@testmyabilities.com

Registration number

IČO 57383898 · Obchodný register Mestského súdu Bratislava III, oddiel Sro, vložka č. 194953/B

Tax number

DIČ 2122693199

• There is no registration with a password. If you subscribe, we process your e-mail address and your subscription details.
• Payments are processed by Stripe; we do not see or store your card details.
• Images, text files and PDFs are processed by your browser; they never reach us.
• Word, Excel and PowerPoint files are on the server only for the duration of the conversion, and are deleted immediately afterwards.
• We do not use any analytics or advertising tracking code. We only use cookies for signing in and for payment.

If you subscribe, the data you enter on the payment page is processed by Stripe; what we receive is the data needed to keep a record of your subscription.

• Data processed: e-mail address, the customer and subscription IDs assigned by Stripe, the status and periods of the subscription, the amount and date of payments, the type of payment method (for example card, and its last 4 digits), and – if the payment page asks for them – the billing country and postal code.
• Purpose: creating and fulfilling the subscription, collecting fees, verifying access, invoicing and customer service.
• Legal basis: performance of a contract (Article 6(1)(b) GDPR); for the retention of accounting records, a legal obligation (Article 6(1)(c) GDPR).
• Duration: for as long as the subscription exists; after cancellation, we keep the accounting records for 10 years under section 35 of the Slovak Accounting Act (Act No. 431/2002 Coll.). We delete the other data at your request after the subscription ends.

Payments are processed by Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland), which is an independent controller with regard to payment data and fraud prevention. You can find information about its data processing at stripe.com/privacy.

On other devices, you can sign in with a single-use code sent to you by e-mail.

• Data processed: e-mail address, the encrypted (hashed) form of the sign-in code, its expiry time and the number of attempts.
• Purpose: signing in and protecting your account.
• Legal basis: performance of a contract (Article 6(1)(b) GDPR).
• Duration: the code is valid for 10 minutes, and we delete it immediately after use.

Sign-in e-mails are sent by Resend, Inc. (resend.com) as a data processor.

If you add a Word, Excel or PowerPoint file, the file is sent over an encrypted (HTTPS) connection to the server, where an office application converts it to PDF, and the PDF is then returned to your browser.

• Data processed: the name and content of the file, including any personal data the document may contain.
• Purpose: performing the conversion you requested.
• Legal basis: providing the service at your request (Article 6(1)(b) GDPR).
• Duration: only for the duration of the conversion, typically a few seconds. The file and the PDF are then deleted immediately; we do not store them, and no one looks at their contents.

When the site is served – as with any website – the hosting provider's servers record technical data.

• Data processed: IP address, time of the request, address of the requested page, browser type and version.
• Purpose: the secure and uninterrupted operation of the service, and the detection of errors and abuse.
• Legal basis: the operator's legitimate interest (Article 6(1)(f) GDPR).
• Duration: for a short time, in accordance with the hosting provider's data retention rules.

Images, text files and PDFs – including PDF passwords – are processed exclusively by your browser, on your own device. We have no access to this data, and we do not process it.

While the payment page is open, your browser stores the finished file on your own device (IndexedDB) for up to 60 minutes, so that it is not lost after a payment method that redirects you to another page (such as PayPal). This does not reach us either. If Word, Excel or PowerPoint files were among your inputs, the original files are kept there too, so that the full version can be made after payment (the server then converts them again, as described above).

We only use cookies that are necessary for the service to work; these do not require consent:

• pk_session: keeps you signed in (180 days);
• pk_signed_in: tells the site that you are signed in (180 days);
• pk_login: the sign-in code process (10 minutes);
• pk_lang: remembers the language you picked in the language switcher (1 year).

On the payment page, Stripe uses its own cookies to process the payment securely and to prevent fraud. We do not use analytics or advertising cookies. In your browser's local storage (localStorage) we only keep your chosen appearance (light or dark theme).

The site's hosting and the computing capacity needed to convert Office files are provided by the following data processor:

Name

Vercel Inc.

Address

440 N Barranca Ave #4133, Covina, CA 91723, USA

Website

vercel.com

Sign-in e-mails are sent by Resend, Inc. Vercel Inc. and Resend, Inc. are headquartered in the United States of America, so data may also be transferred outside the European Union. Such transfers take place with appropriate safeguards (the EU–US Data Privacy Framework and the standard contractual clauses adopted by the European Commission).

We do not share your data with any other third party, and we do not sell it.

All connections between the site and the server are encrypted (HTTPS). Sign-in cookies are signed and cannot be read by scripts. The service that converts Office files cannot be accessed directly from the internet; the files are not stored and are deleted immediately after processing.

Under the GDPR, you have the following rights:

• right to information and access (Article 15);
• right to rectification (Article 16);
• right to erasure (Article 17);
• right to restriction of processing (Article 18);
• right to data portability (Article 20);
• right to object to processing based on legitimate interest (Article 21).

You can send your request to help@testmyabilities.com; we will respond within one month at the latest. You can also change your e-mail address yourself on the My account page, on Stripe's interface.

If you feel that the processing of your personal data violates the law, you can lodge a complaint with the Slovak supervisory authority of the controller's registered office (Úrad na ochranu osobných údajov Slovenskej republiky; Hraničná 12, 820 07 Bratislava 27; website: dataprotection.gov.sk), or with the data protection authority of your place of residence or place of work – in Hungary, the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH; 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; e-mail: ugyfelszolgalat@naih.hu; website: naih.hu).

If your rights are violated, you can also go to court; you may also bring the action before the courts of the member state of your place of residence or place of stay.

We update this notice whenever the service changes; the effective date is shown at the top of the document. The terms of use of the service are set out in the Terms of Service.