DATA CONTROLLER

MM-TRANS
Staré Záhrady 28, 821 05 Bratislava, Slovak Republic
ID No.: 40980227 · Tax ID: 1071298030
Website: www.xk-pro.com

1. INTRODUCTION

Your privacy matters to us. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have regarding your data, in accordance with Regulation (EU) 2016/679 (GDPR).

2. DATA WE COLLECT

When registering and using the XK-PRO platform, we collect the following personal data:

· Email address — for account creation and communication
· Password — stored in encrypted form (scrypt)
· Registration date — for administrative purposes
· Payment data — processed exclusively by Stripe Inc. (not stored on our servers)

3. PURPOSE OF PROCESSING

We process your personal data for the following purposes:

· Providing access to the XK-PRO platform
· Subscription management and billing
· Sending newsletters (with consent only)
· Platform security and protection
· Compliance with legal obligations

4. LEGAL BASIS

Processing of your personal data is based on:

· Performance of contract — providing the subscription service (Art. 6(1)(b) GDPR)
· Consent — sending newsletters (Art. 6(1)(a) GDPR)
· Legitimate interest — platform security and protection (Art. 6(1)(f) GDPR)

5. DATA RETENTION

We retain your personal data for the duration of your subscription and for 3 years thereafter for accounting and tax purposes. After this period, data is securely deleted.

6. DATA SHARING

We do not sell your data to third parties. We share it only with essential service providers:

· Stripe Inc. — payment processing (USA, EU-US Data Privacy Framework)
· Railway Corp. — platform hosting (USA)
· SendGrid / Mailchimp — newsletter delivery (with consent only)

7. YOUR RIGHTS

Under GDPR, you have the following rights:

· Right of access — you may request a copy of your data
· Right to rectification — you may correct inaccurate data
· Right to erasure — you may request deletion of your data
· Right to portability — you may receive your data in a structured format
· Right to object — you may object to processing
· Right to withdraw consent — you may withdraw newsletter consent at any time

8. COOKIES

The XK-PRO platform uses only essential session cookies required for login functionality. We do not use advertising or third-party analytics cookies.

9. CONTACT & COMPLAINTS

To exercise your rights or for any questions, contact us at our registered address above. You also have the right to lodge a complaint with the Slovak Data Protection Authority (www.dataprotection.gov.sk).

10. UPDATES

This Privacy Policy is effective as of April 3, 2026. We reserve the right to update it. You will be notified of any changes by email.