Skip to content
Verifento
Legal documents

GDPR – Your Rights and Data Protection

Contents

Last updated: March 9, 2026

1. How Verifento Processes Data

Verifento is an all-in-one solution for rental companies, lending businesses, and B2B enterprises. The platform combines shared verification of customers and business partners within a network of companies, rental and contract management, invoicing, and company website creation with an integrated booking system. The system is designed with the principle of privacy by design – data minimization and maximum privacy protection.

Key principle: Verifento never stores names, addresses, or customer contact details in readable form. It works exclusively with cryptographic hashes (HMAC-SHA256), from which it is impossible to recover the original data.
  • Legitimate interest (Art. 6(1)(f) GDPR) – protection of lessors' property against fraud and sharing information about high-risk customers. This interest outweighs the interests of data subjects, as the system does not process personal data in readable form.
  • Performance of a contract (Art. 6(1)(b) GDPR) – data of registered companies (Verifento clients)

3. The Traffic Light System Is Not Automated Decision-Making

In accordance with Art. 22 GDPR, the Verifento traffic light system (grey / green / blue / orange / red) is a decision-support tool – it provides an informational signal to the lessor. The final rental decision is always made by a human operator. The system does not make any automated decisions with legal effects.

4. Cascading Transparency

Every Verifento client is obligated to inform their customers that data may be verified through the platform. Sample GDPR clauses for clients are available in the dashboard (Legal Documents section).

5. Your Rights as a Data Subject

For registered companies (clients):

  • Right to access your company account data
  • Right to rectification of inaccurate data
  • Right to erasure of your account (except audit logs and reported incidents)
  • Right to data portability in a machine-readable format
  • Right to object to processing

For end customers (verified individuals):

  • Right to know whether data about you is recorded in the system
  • Right to object to processing based on legitimate interest
  • Right to file a complaint with the Office for Personal Data Protection of the Slovak Republic

6. Subject Access Request (SAR)

How to submit a subject access request:

The fastest way to submit a request is through the GDPR request form. You will receive a request number that lets you check the status of your request at any time. We will verify your identity separately. If you prefer email, proceed as follows:

Send an email to privacy@verifento.com with the subject line "SAR – Subject Access Request" and include:

  • Your full name
  • Phone number or email that may have been used during verification
  • Copy of identity document (to verify your identity)

We will respond to your request within 30 days. Since the system does not store contact details in readable form, we will need to create a hash from the data you provide and compare it against the database.

7. Right to Object

If you are an end customer and wish to object to the processing of your data in the Verifento system, first contact the company that verified your data (you can find the information in their Terms of Service or Privacy Policy). If you do not know which company it was, contact us directly.

8. Supervisory Authority

You have the right to file a complaint with:
Office for Personal Data Protection of the Slovak Republic
Hranicna 12, 820 07 Bratislava
dataprotection.gov.sk

9. Contact

Luxria s.r.o.
Email: privacy@verifento.com
Address: Rakytovská cesta 6952/36, 974 05 Banská Bystrica