Privacy Policy

Introduction

trinitee, s.r.o. (“trinitee”, “we”, “us” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website trinitee.com (the “Site”) or otherwise interact with us. It also explains your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and how you can exercise those rights. We have written this policy in clear terms to help you understand our practices. If you have any questions about this Privacy Policy or our handling of personal data, please contact us at hello@trinitee.com.

By using our Site or providing us with your information, you agree that you have read and understood this Privacy Policy. This policy is incorporated into our Terms of Service and may be updated from time to time as described in the Updates section below.

Who We Are

trinitee, s.r.o. is a company registered in the Czech Republic (Na Pankráci 1618/30, Nusle, 140 00 Prague, Czech Republic). For the purposes of data protection law, trinitee is the “data controller” of your personal information collected via the Site. This means we determine how and why personal data is processed. You can contact us by email at hello@trinitee.com or by mail at the address above. We do not currently have a designated Data Protection Officer, but for any privacy-related inquiries you can use the contact information provided.

Information We Collect

Personal data means any information that relates to an identified or identifiable individual. We collect personal data that you voluntarily provide to us, data generated from your use of our Site, and some information from third parties as needed. The types of personal data we may collect include:

• Information You Provide Directly: When you fill out forms on our Site (such as our Contact Us form or job application forms), or contact us by email or phone, you may give us personal data. This includes your name, email address, phone number, company/organization, job title, location, and any other information you choose to provide. For example, if you apply for a career opportunity, you will provide your résumé/CV and possibly additional details about your employment history, education, and skills. Please ensure that any personal data you submit is accurate and that you have the right to provide it.
• Information Collected Automatically: When you visit our Site, we may automatically collect certain technical information about your device and usage of the Site. This can include your IP address, browser type, device type, operating system, referring website, pages viewed, and the dates/times of your visits. We collect some of this information using cookies and similar tracking technologies – please see our Cookie Policy for details. This information generally does not directly identify you, but it may be considered personal data in some jurisdictions. We use it to understand how visitors use our Site and to improve performance and user experience.
• Sensitive Personal Data: We do not actively seek to collect any sensitive personal data (such as information about health, race, ethnicity, political opinions, religious beliefs, etc.) through the Site. We ask that you do not provide this type of information. The exception is if you are applying for a job and choose to provide certain information (for example, a photo or membership in a protected class) – in such cases, we will handle it in accordance with applicable law and only for the purposes of evaluating your application. We do not collect or process sensitive personal data for marketing purposes. If we ever need to handle sensitive data, we will obtain your explicit consent when required by law.

How We Use Your Information

We use personal data for the following purposes, and we rely on certain legal bases under GDPR to do so:

• To Respond to Inquiries and Provide Services: If you contact us via a form (for example, to schedule a demo or request information about our services), we will use your contact details and any information in your message to respond and provide you with the requested information. If you apply for a job, we use the information to assess your qualifications, contact you about the recruitment process, and make hiring decisions. Legal basis: This processing is necessary to fulfill your request or take steps at your request prior to potentially entering into a contract. In some cases, we rely on your consent (for example, when you tick a box agreeing to our Privacy Policy on a form) to process your data for these purposes. We also have a legitimate interest in responding to prospective customer inquiries and in hiring talented personnel, which aligns with your expectation when you submit the form.
• Business Development and Client Support: We may use contact information you provide (such as email or phone number) to communicate with you about our services, to explore business opportunities, or to support you as a client. For example, if you represent a company interested in our ServiceNow solutions, we might follow up with you to discuss how we can help. Legal basis: Our legitimate interests in growing our business and maintaining client relationships. If local law requires consent for certain communications (e.g., email marketing to new prospects), we will obtain your consent beforehand.
• Recruitment and Talent Pool: For job applicants, we use your personal data to manage our recruitment process. This includes reviewing applications, contacting you for interviews, and making hiring decisions. If your application is unsuccessful, we may, with your permission, retain your information in our talent pool for a period of time in case of future opportunities. Legal basis: Our legitimate interest in recruiting qualified candidates and (with consent) maintaining candidate data for future recruitment. Where required by law, we will seek your consent to keep your data on file beyond the initial hiring process.
• Site Operation and Improvement: We process certain data automatically to operate, secure, and improve our Site. This includes using logs and analytics to troubleshoot issues, analyze trends, administer our website, and improve its content and layout. For example, we might analyze which pages are most visited or how users navigate the site in order to enhance the user experience. Legal basis: Our legitimate interests in ensuring the security and usability of our Site. Where cookies or similar technologies are not strictly necessary, we rely on consent (obtained via our cookie consent banner) to collect data for analytics – see our Cookie Policy for details.
• Legal Compliance and Protection: We may process personal data as required to comply with applicable laws and regulations (e.g., tax, accounting, employment laws) or to respond to lawful requests from authorities. We also process data as necessary to establish or defend legal claims and to protect the rights, property, or safety of trinitee, our employees, clients, or others. Legal basis: Compliance with a legal obligation (when applicable) or our legitimate interests in protecting our legal rights and preventing misuse of our services.

We will only use your personal information for the purposes above or for closely related purposes. If we need to use your data for a new purpose that is not compatible with the original purpose, we will notify you and, if required, obtain your consent.

How We Share Your Information

We value your privacy and do not sell or rent your personal information to third parties for their own marketing purposes. We share personal data only in the following circumstances:

• Within Our Organization and Affiliates: Your information may be shared with relevant personnel within trinitee, s.r.o. and our affiliated offices (for example, our teams in the Czech Republic, Slovakia, or Austria) who need access to fulfill the purposes described. All our staff are bound by confidentiality obligations.
• Service Providers (Processors): We use trusted third-party service providers to operate and support our business and the Site. This includes, for example, website hosting providers, cloud storage or IT support services, analytics providers, and recruitment management tools. These parties may process personal data on our behalf for the above-mentioned purposes. We contractually require service providers to only use personal data as necessary to provide services to us and to protect your information in accordance with applicable laws.
• Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be disclosed or transferred to a successor or affiliate of trinitee as part of that transaction. In such cases, we will ensure the confidentiality of any personal data and give affected users notice before personal information is transferred or becomes subject to a different privacy policy.
• Legal Requirements: We may disclose personal information to courts, law enforcement, government authorities, or other third parties when we believe disclosure is necessary to comply with a legal or regulatory obligation. We may also disclose data if necessary to enforce our Terms of Service or to establish, exercise, or defend legal claims, or to protect the rights, safety, or property of trinitee, our users, or others (for example, to detect and prevent fraud or security vulnerabilities).

In all cases, we only share the minimum amount of information necessary for the specific purpose and require recipients to handle the information securely. If we ever need to share your data for any other purpose, we will explain this to you at the time of obtaining the data or before the data is shared, and if required by law, we will obtain your consent.

International Data Transfers

trinitee is based in the European Union (EU). When you submit information to us, it will be stored on secure servers within the EU. However, some of our affiliated teams or service providers may be located in other countries, which could result in your personal data being transferred across international borders. For example, if you are located in the EU, and we have a support provider or cloud service in the United States or another region, your data might be processed or stored there.

Whenever we transfer personal data out of the EU/European Economic Area, we will ensure an adequate level of protection for the data. This may involve using contractual protections (such as the European Commission’s Standard Contractual Clauses) or transferring to organizations under an approved compliance mechanism (like the EU-U.S. Data Privacy Framework, if applicable) or other legal bases for transfer. We will take steps to ensure that your personal information continues to have robust protection consistent with EU standards, even when processed in a country that may have different privacy laws.

If you would like more information about international transfers of your personal data or the safeguards applied, please contact us using the details provided above.

Data Retention

We keep personal data only for as long as necessary to fulfill the purposes for which we collected it, unless a longer retention period is required or permitted by law. This means:

• If you contact us with an inquiry or request, we will retain your information for as long as needed to respond and follow up, and for a reasonable period thereafter in case you have additional questions or to maintain records of our communications.
• If you provide personal data as part of a business relationship or contract with trinitee (for example, you become a client), we will retain your data for the duration of the contract and thereafter as required by law or our legitimate interests (such as maintaining accurate financial records).
• Job applicant data is generally retained through the recruitment process. If you are hired, your information will be kept and managed under our internal employee privacy policies. If you are not hired, we will delete your application data within a certain period after the position is filled (typically within 6 months) unless you consent to a longer retention for future opportunities. We may also retain minimal contact information to avoid duplicate applications or to reach out with feedback, where appropriate.
• Information collected via cookies and similar technologies is retained as described in our Cookie Policy. For analytics data (e.g., Google Analytics), we typically retain aggregated website usage data for [X] months before deletion or anonymization. (See the Cookie Policy for specific cookie lifespans.)

In all cases, we securely delete or anonymize personal data when it is no longer needed for the purposes outlined. If we anonymize data (so it can no longer be associated with any individual), we may use that information indefinitely without further notice. We also periodically review the data in our possession and erase or anonymize data that is no longer required. Please note that we may retain information for a longer period if required to do so by law (for example, some transactional records must be kept for accounting/tax purposes for a number of years), or to protect our legal rights (for instance, information relevant to a dispute may be retained until the issue is resolved).

Your Rights Under GDPR (for EU/EEA individuals)

If you are in the European Union, European Economic Area, or another jurisdiction with similar data protection laws, you have the following rights regarding your personal data, subject to the conditions and exceptions set out in applicable law:

• Right of Access: You have the right to request confirmation of whether we are processing your personal data, and if so, to obtain a copy of the data we hold about you and information about how we use it. This includes the categories of data, the purposes of processing, the recipients (or categories of recipients) to whom the data has been disclosed, and the envisaged retention period, among other details.
• Right to Rectification: You have the right to ask that we correct or update any inaccurate or incomplete personal data we hold about you. We will promptly make the appropriate corrections upon verifying the request.
• Right to Erasure: You have the right to request that we delete your personal data in certain circumstances. This is also known as the “right to be forgotten.” You can exercise this right, for example, if the data is no longer needed for the purposes it was collected, you have withdrawn consent (where the processing was based on consent), or you object to processing and we have no overriding legitimate grounds to continue. Please note that absolute erasure may not be possible if we have a legal obligation to retain certain data, but we will inform you if this is the case.
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data under certain scenarios. For instance, if you contest the accuracy of the data, you can request restriction while we verify it, or if you object to our processing based on legitimate interests, you can request restriction pending our verification of overriding grounds.
• Right to Data Portability: You have the right, in certain cases, to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format, and to have that information transmitted to another controller where technically feasible. This right applies when processing is carried out by automated means and is based on your consent or the performance of a contract.
• Right to Object: You have the right to object to our processing of your personal data at any time when the processing is based on our legitimate interests (or those of a third party). If you file an objection, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless processing is needed for the establishment, exercise, or defense of legal claims. Importantly, you have an absolute right to object to processing of your personal data for direct marketing purposes at any time – if you object, we will stop using your data for marketing. This includes profiling related to direct marketing.
• Right to Withdraw Consent: In cases where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. For example, if you consented to receive a newsletter or to allow us to keep your CV on file, you can withdraw that consent and we will stop the related processing. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Not Be Subject to Automated Decisions: We do not currently use your personal data to make any decisions that have a legal or significant impact on you solely by automated means (without human involvement). If we ever do so, you would have the right not to be subject to such decisions without your consent, and to request human review of any significant automated decision.
• Right to Complaint: If you believe we have infringed your data protection rights, you have the right to lodge a complaint with a supervisory data protection authority, particularly in the EU member state where you reside, work, or where the alleged infringement occurred. For example, in the Czech Republic our activities are primarily supervised by the Office for Personal Data Protection (ÚOOÚ). We would, however, appreciate the chance to address your concerns directly before you approach a regulator – please consider contacting us first so we can try to resolve any issues.

You may exercise your rights at any time by contacting us at hello@trinitee.com. For security, we may need to verify your identity (for example, by asking you to provide information we have on file) before processing your request. We will respond to requests within one month, or inform you if we need more time. These rights are subject to certain legal limitations; if we cannot comply with your request in whole or in part, we will explain why.

Your Rights Under CCPA (for California Residents)

If you are a resident of California, you have specific privacy rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights (which apply to “personal information” as defined by California law) include:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you in the past 12 months, including the categories of personal information, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it. You also have the right to request the specific pieces of personal information we have about you. (Much of this information is provided in this Privacy Policy. You may also contact us for more detail or a personal report.)
• Right to Delete: You have the right to request that we delete personal information that we have collected from you, subject to certain exceptions. Once we receive and confirm a verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies (for example, if we need to retain information to complete a transaction or comply with a legal obligation).
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you. Upon verification of your identity and the accuracy of the new information, we will correct the information as requested.
• Right to Opt-Out of Sale/Sharing: You have the right to opt out of the “sale” or “sharing” of your personal information. Under CCPA, “sale” is broadly defined as disclosing or making available personal information to a third party for monetary or other valuable consideration, and “sharing” refers to providing personal information for cross-context behavioral advertising. However, trinitee does not sell personal information to third parties, and we do not share your personal information for targeted advertising purposes. Because we do not sell or share data in this way, we do not provide a “Do Not Sell or Share My Personal Information” link on our Site. If our practices change, we will update this policy and provide appropriate opt-out mechanisms.
• Right to Limit Use of Sensitive Personal Information: If we collect any sensitive personal information (such as government identifiers, account credentials, precise geolocation, racial or ethnic origin, etc.), California residents have the right to direct us to limit the use of that information to certain purposes (such as providing the requested services). We do not use or disclose sensitive personal information for any purpose that would trigger this right. Any sensitive data we might collect (for example, on a job application, you may provide some sensitive details) is used only for the limited purpose for which you provided it (e.g., hiring consideration) and not for secondary purposes like profiling or marketing.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means, for example, we will not deny you services, charge you a different price, or provide a lesser quality of service if you choose to exercise your privacy rights. (Please note that if the exercise of your rights limits our ability to process personal information – such as a request to delete your data – we may not be able to provide you with certain services that require that information.)

Exercising Your California Rights: If you are a California resident and wish to exercise any of the rights described above, you or your authorized agent can submit a request to us by emailing hello@trinitee.com with the subject line “CCPA Request” and detailing your specific request. You may also reach us by phone at +420 775 202 675 for CCPA requests. Before fulfilling your privacy request, we are required by law to verify your identity. We will ask you to provide information that matches our records (such as your name, email, and any relevant transaction or interaction details) to confirm your identity. We will only use the information you provide in a request to verify your identity or authority to make the request.

We aim to respond to verifiable requests within 45 days as required by CCPA. If we need more time (up to an additional 45 days), we will inform you of the reason and extension in writing. If we decline any part of your request, we will explain the reason.

Security Measures

We take appropriate security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. trinitee implements administrative, technical, and physical safeguards that are consistent with industry standards. These measures include, for example, access controls to limit who can access personal information, network security measures to guard against external threats, and encryption of data in transit (e.g., our website employs HTTPS TLS encryption for data you submit). We also maintain policies and procedures to handle any suspected data incidents.

However, please be aware that no method of transmitting information over the Internet or storing information is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security of information, especially for data transmitted via the Internet. You share and transmit data at your own risk. If you have reason to believe that your interaction with us or your data might no longer be secure (for example, if you suspect a security vulnerability on our Site), please notify us immediately.

Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to provide and improve our services, as described in our separate Cookie Policy. Cookies are small text files placed on your device that help the site function and provide information to us. For detailed information about the types of cookies we use, what data they collect, and your choices regarding cookies (including how to disable them), please read our Cookie Policy. By using our Site, you acknowledge the use of cookies as described in that policy.

You can control cookies through your browser settings and other tools. Note that blocking certain cookies (especially “strictly necessary” cookies) may impair some features of our Site. For non-essential cookies, we will obtain your consent via our cookie banner in jurisdictions where required.

Links to Other Websites

Our Site may contain links to third-party websites or services (for example, an embedded link to our company page on LinkedIn). If you click on a third-party link, you will be directed to that third party’s site, which is outside of our control. This Privacy Policy does not apply to third-party websites, and we are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites or services before providing any personal information to them.

Children’s Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you are under 16 (or a higher minimum age in your jurisdiction), please do not use our Site or send us any personal data. If we learn that we have inadvertently collected personal information from a child under 16, we will take steps to delete such information promptly. Parents or guardians who believe their child may have provided us with personal data can contact us at hello@trinitee.com and request that it be removed.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational or legitimate reasons. When we make changes, we will post the updated policy on this page and update the “Last Updated” date at the bottom. If changes are significant, we may also notify you by additional means (such as a notice on our homepage or via email, if appropriate). Please review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of our Site or services after any update to this Privacy Policy constitutes your acceptance of the changes. If you do not agree with our updated policies, you should stop using the Site and can request that we remove your personal information as outlined above.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

trinitee, s.r.o
Na Pankráci 1618/30
Nusle, 140 00 Praha 4
Czech Republic

Email: hello@trinitee.com
Telephone: +420 775 202 675

We will be happy to assist you and will respond as promptly as we can.

Last Updated: October 23, 2025