Personal data when ordering SlateCue
Version 1.3 for new contracts with Montowna s.r.o.
Data controller and contact
For new contracts with Montowna, the data controller is Montowna s.r.o., company registration number 07857551, VAT ID CZ07857551, Na padesátém 1736/4, 100 00 Prague 10, Czech Republic. For matters concerning personal data, please write to .
What data we process and why
We process the business customer’s identification and billing details, the name and role of the person acting on its behalf, email address, telephone number, the contents of the offer and order, the contract, consents and the signing audit trail. We need the data of a self-employed individual to take steps before entering into a contract and to perform that contract under Article 6(1)(b) of the GDPR. We process the contact details of representatives of a legal entity and records needed to protect contractual claims on the basis of legitimate interests under point (f). We also process billing and payment records to comply with legal obligations under point (c). Providing the necessary data is a contractual requirement; the order cannot be completed without it. The order does not include consent to marketing.
Payment details entered on Stripe’s page are processed by Stripe. SlateCue does not store your card number or security code. We retain transaction identifiers, the amount, currency, date and status of the payment and subscription. For bank transfers, we retain the payment reference (variable symbol) and the identification of the bank transaction actually received. Automatic payment matching is used to record payments; we do not assess creditworthiness or make any other similar decisions about customers.
Who has access to the data
We host the application and our own Documenso instance on a server at Hetzner in Germany. They store contracts, signing records and invoices. Using a self-hosted Documenso instance does not mean that documents are stored in Documenso’s cloud service.
We send offers, signing invitations, invoices and related emails through Proton AG, Switzerland. Payment services are provided by Stripe through the relevant European entities and other recipients listed in its contractual documentation. Necessary data may also be received by accounting or legal advisers bound by confidentiality obligations, and by public authorities where required by law.
Transfers outside the European Economic Area are governed by the relevant adequacy decisions or contractual safeguards under the GDPR. Details about the providers and their transfers are set out in the linked policies; you can ask the controller for information about the specific safeguards used.
How long we keep the data
We keep the concluded contract, consents and evidence of the signing process for the duration of the relationship and for up to a further 10 years to protect legal claims, unless an ongoing dispute or legal obligation requires longer retention. We keep accounting and tax records for the periods required by the applicable regulations; this does not mean that every type of record is subject to a statutory ten-year retention requirement. We keep unused offers and incomplete orders that have not resulted in a contract for no more than 12 months after their validity expires, unless they are needed to resolve a specific dispute.
Only authorised persons have access. The contractual and accounting archive is separate from the public website and is backed up. This ordering process does not transmit the contents of scripts, dialogue sheets or application projects.
Your rights
Within the limits of the GDPR, you have the right of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. Send requests to the controller’s contact address; we may ask for reasonable verification of your identity. You can lodge a complaint with the Czech Office for Personal Data Protection at uoou.gov.cz.
Essential browser storage
We keep private access to the offer and order in this tab’s sessionStorage so you can continue after returning from signing or payment. We do not use it for advertising or analytics. Do not share private links. Documenso and the administration area use their own essential login cookies.
Provider information
Hetzner: https://www.hetzner.com/legal/privacy-policy/
Proton: https://proton.me/legal/privacy
Stripe: https://stripe.com/privacy and https://stripe.com/en-cz/legal/ssa
Previous contracts
This notice applies to new contracts with Montowna s.r.o. Earlier contracts with Philip Arthur Kiulpekidis remain with the original controller; original privacy notice (Czech).