Last Update: 1st September 2026
This Privacy Notice is issued by Sygic a. s., with its registered seat at TwinCity, C, Mlynské Nivy 16, 821 08 Bratislava, Slovakia, company ID No. (IČO): 35 892 030 (further on “Sygic”, “we”, “us” or “our”), a member of the Eurowag Group. This Privacy Notice provides an overview about how we process personal data about users of our mobile applications, software, websites or generally our products and services we provide to you.
Where appropriate and as further described in this Privacy Notice, personal data may be processed within the Eurowag Group for the purposes of providing, supporting and improving the Services, while ensuring compliance with applicable data protection laws and group-wide privacy standards.

Our privacy commitment

We take the protection of personal data seriously. As a company established in the European Union and a member of the Eurowag Group, we process personal data in accordance with EU general data protection regulation (the General Data Protection Regulation or “GDPR”) and other applicable data protection laws. We provide our Services either directly to individual users or to our business customers, in which case we may process personal data relating to their employees, contractors, or authorised users. For the purposes of this Privacy Notice, any identified or identifiable natural person whose personal data we process in connection with the Services is referred to as a data subject.

Contact us

If you have any questions about how we process your personal data or wish to exercise your data protection rights, you may contact us by email at privacy@sygic.com or by post using our registered office address stated above. Privacy-related enquiries are handled by our Data Protection Officer (“DPO”), who serves as the contact point for data subjects and supervisory authorities on all matters relating to the processing of personal data.

Why do we process your personal data?

We process personal data where necessary to provide the Services, fulfil our contractual and legal obligations, and pursue our legitimate business interests. The specific purposes for which we process personal data are set out below:

What do these purposes mean?

Provision of the Services

When you download, access, purchase, subscribe to, or otherwise use any Sygic application, software, product, or service, whether through Google Play, the Apple App Store, the Sygic E-Shop, or any other distribution channel, you enter into a contractual relationship with us governed by the applicable End-User-Licence-Agreement (“EULA”). In order to perform our contractual obligations and provide the Services you have requested, we must process certain personal data. Such processing is necessary for the performance of a contract and therefore does not require your consent.

This includes, in particular:
• providing and maintaining the core and additional functionalities of the Services;
• creating, managing and securing user accounts and authentication credentials;
• processing registrations, orders, subscriptions and purchases;
• administering contractual and pre-contractual customer relationships;
• delivering customer support and handling enquiries, complaints, and requests;
• communicating service-related, technical, operational and security information;
• personalising and improving the user experience; and
• ensuring the availability, security, integrity and proper functioning of the Services.

Provision of the Services covers all the below listed applications.

Development, improvement & testing

As a software developer, we have a legitimate interest in maintaining, securing, testing, and improving our Services. This includes:
• fixing bugs and resolving technical issues;
• developing new features, updates, and enhancements;
• analysing service performance and usage trends;
• improving the accuracy and quality of our products;
• collecting customer feedback and conducting user surveys; and
• testing and quality assurance activities using anonymised or pseudonymised data where appropriate.

Direct marketing communications (newsletter & push notifications)

We send marketing communications only where you have given your consent or where permitted by applicable law, for example in connection with similar products or services you already use. You may opt out of marketing communications at any time and object to the processing of your personal data for direct marketing purposes.

Marketing analytics

We conduct marketing analytics separately from direct marketing communications. Where personal data is used, we do so on the basis of our legitimate interest in understanding user needs, improving our Services, and measuring the effectiveness of our marketing activities.

This may include:
• analysing user behaviour and usage trends;
• measuring and optimising marketing campaigns;
• delivering and evaluating targeted advertising, where permitted by law;
• linking information across devices associated with the same user; and
• segmenting users to provide more relevant communications and offers.

You may object to the processing of your personal data for these purposes at any time.

Statistics

We maintain aggregated and anonymised statistics for analytics, reporting, and service improvement purposes. These statistics do not identify individual users and are not considered personal data, even where they are derived from the analysis or aggregation of personal data. Examples include information on the number of users, feature usage, and overall service performance.

Maintaining social media profiles

We maintain official social media profiles to engage with our users and promote our brands and services. When you interact with our profiles, for example by following, commenting, messaging, or sharing content, we may process the personal data you choose to provide. This processing is based on our legitimate interest in communicating with users and increasing brand awareness.
Please note that social media platform providers process personal data independently under their own privacy policies, including for their own purposes and, where applicable, international data transfers. We have only limited control over such processing and encourage you to review the privacy notices of the relevant platforms. Currently, our presence may include platforms such as LinkedIn, Facebook, Instagram, X, YouTube, GitHub, and other social media services.

Consumer contests

We may organise competitions, prize draws, and other promotional activities. If you participate, we will process your personal data as necessary to administer the activity, verify eligibility, and award prizes. Where required by law, we will obtain your consent.

Billing, Tax & Accounting

When you purchase paid features, subscriptions, or services, we process your personal data as necessary to comply with applicable tax, accounting, and legal obligations. This may include your personal data on invoices and related records, which we retain for the periods required by applicable law.

Security of personal data

We process personal data as necessary to ensure the security, integrity, and reliability of our Services and information systems. This includes activities such as access control, encryption, logging, backups, incident detection and response, security investigations, and compliance with our legal security obligations.

Handling user requests

We process personal data as necessary to comply with our legal obligations, including responding to requests and exercising rights under applicable data protection laws, such as the GDPR. For example, we may process your personal data when handling requests for access, rectification, erasure, or other data subject rights.

Legal enforcement (establishment, exercise or defense of legal claims)

We may process personal data where necessary to establish, exercise, or defend legal claims, obtain legal advice, enforce our rights, comply with legal requirements, or cooperate with competent authorities. This processing is based on our legitimate interests or legal obligations and will only be carried out where relevant to the particular circumstances.

Whistleblowing

We process personal data as necessary to comply with applicable whistleblowing laws (Act no. 54/2019 Coll. on the protection of whistleblowers of anti-social activities) and to investigate, document, and manage reports of suspected misconduct or legal violations. This may involve the processing of personal data relating to whistleblowers, employees, and other individuals concerned by a report.

Archiving purposes and administration of the registries

We retain personal data for the periods required by applicable legal, regulatory, and record-management obligations (Act no. 395/2002 Coll., on archives and registries), including under archive and document retention laws and our internal retention schedules. After the applicable retention period expires, personal data is securely deleted or anonymised unless further retention is required by law.

How do we collect your personal data?

We generally collect personal data directly from you when you use our Services, such as when you create an account, make a purchase, subscribe to a service, contact us, or otherwise interact with our applications and websites. We may also collect personal data automatically where necessary to provide the Services, for example location or device data used for navigation and related functionalities.
Providing personal data is generally voluntary, although certain data may be required to enter into or perform a contract, provide requested Services, comply with legal obligations, or pursue our legitimate interests. If you choose not to provide certain personal data, some Services or features may not be available to you.

Who are recipients of your personal data?

We restrict access to personal data to authorised personnel who require it for their work and to carefully selected service providers acting on our behalf. Recipients may include companies within the Eurowag Group, hosting and cloud service providers, analytics and marketing partners, social media platforms, payment providers, and business partners involved in delivering requested Services. Where required, these parties process personal data under appropriate contractual and GDPR-compliant safeguards.

List of partners

What countries do we transfer your personal data to?

We seek to keep personal data within the EU/EEA whenever possible. However, some of our service providers, group companies, business partners, or technology platforms may be located in, or process data from, countries outside the EU/EEA.
Where personal data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include an adequacy decision issued by the European Commission, Standard Contractual Clauses (SCC), supplementary technical and organisational measures, or another valid transfer mechanism under the GDPR.
For transfers to the United States, based on EU-US Commission’s adequacy decision in compliance with Article 45 GDPR requirements we may rely on the EU-U.S. Data Privacy Framework where the recipient is certified , or otherwise implement SCCs and additional safeguards as required.

How long we store your personal data?

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and protect our legitimate interests. Personal data is regularly reviewed and deleted or anonymised when no longer needed. Retention periods for service provision, product improvement, analytics, statistics, and security-related processing generally depend on the duration of your use of the Services and the continued need for the relevant data.
In general, if you stop using our Services, we will cease processing personal data for purposes that depend on your active use of the Services. Personal data is deleted or anonymised when no longer necessary, subject to applicable retention requirements. Certain categories of data may be retained for specific periods, for example:
• product improvement and analytics data: up to 3 months;
• security and system logs: up to 1 year; and
• backup data maintained for security and business continuity purposes: up to 3 years.
For users with a lifetime licence, we retain the information necessary to verify and honour that licence for the duration of the licence term (period equivalent to “life-time” period which is 90 years from license purchase). If you request deletion of your licence-related personal data, we may no longer be able to verify your entitlement to the lifetime licence and access to related benefits may be affected. We therefore recommend retaining proof of purchase and any correspondence relating to your licence.

Personal data used for marketing communications is retained until you withdraw your consent or opt out or object against direct marketing.

Data processed for accounting, tax, and legal compliance purposes is generally retained for up to 10 years, or longer where required by applicable law.

Data shared through our social media profiles remains subject to the relevant platform's functionality, although we periodically delete private messages (once every 3 years) and other content where appropriate.

Personal data processed for competitions, prize draws, and similar promotional activities is typically retained for the duration of the activity and any related legal retention period.

We may retain personal data where necessary to handle requests, establish, exercise, or defend legal claims, or comply with legal obligations. Retention periods depend on the nature of the matter and applicable limitation periods or legal requirements (general limitation period under Slovak law is 3 years).

Personal data processed in connection with whistleblowing reports is retained for the period required by applicable whistleblowing laws (at least 3 years from its submission) and related record-keeping obligations.

We also retain certain records in accordance with our document retention and archiving requirements. Retention periods vary depending on the type of record and may range from a few years to several decades where required by law. By default, these storage periods are 2-10 years from the creation of the registry record, for some HR documents 50 years or 70 years from birth.

What rights do you have?

Under Article 21 GDPR, you have the right to object at any time to the processing of your personal data based on our legitimate interests, including any related profiling. You also have the absolute right to object to the processing of your personal data for direct marketing purposes, including profiling related to direct marketing. If you object to direct marketing, we will stop processing your personal data for those purposes.

You also have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence, place of work, or place of the alleged infringement, or with the supervisory authority responsible for our establishment (Office for Protection of Personal Data of the Slovak Republic, the "complaint" must be submitted in line with par. 100 of Slovak Act no. 18/2018 Coll, on the protection of personal data).

Under Article 15 GDPR, you have the right to obtain confirmation as to whether we process your personal data and, where we do, to access that data and receive information about the processing. This includes information about the purposes of processing, categories of personal data, recipients, retention periods, sources of the data, your data protection rights, and any automated decision-making or profiling that may affect you. You may also request a copy of the personal data we process about you.

Most of the information required under the right of access is already provided in this Privacy Notice. You also have the right to obtain a copy of your personal data and, where applicable, to receive personal data that you have provided to us in a structured, commonly used, and machine-readable format or to have it transferred to another controller. This right applies where the processing is based on your consent or is necessary for the performance of a contract and is carried out by automated means.

Where processing is based on your consent, you may withdraw that consent at any time. You can contact us using the details provided in this Privacy Notice or, in the case of marketing emails, use the unsubscribe link included in each communication. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

If you believe that the personal data we hold about you is inaccurate or incomplete, and you are unable to update it through our Services, you may request that we correct or complete your personal data by contacting us using the details provided in this Privacy Policy.

This supplementary statement for rectification can be send to Sygic at privacy@sygic.com

Note: When exercising your data protection rights, please provide as much detail as possible about your request. This helps us identify the relevant data and respond more efficiently. If a request is unclear or insufficiently specific, we may ask for additional information to process it correctly.

Cookies

We use cookies and similar technologies to operate, improve, and analyse our websites, applications, and Services, including for analytics and, where permitted, marketing purposes. You can manage your cookie preferences through our cookie settings tools and your browser settings, including by disabling non-essential cookies at any time.

Changes to this privacy policy

We may update this Privacy Notice from time to time to reflect changes in our Services, legal requirements, or data processing practices. The latest version will always be available on our website and will indicate its effective date. Where required by law or where changes are material, we will provide appropriate notice through our Services, website, or other communication channels.

Previous versions of the privacy policy:
• Version valid from 18 May 2018 (adjustment due to GDPR application);
• Version valid from 17 July 2020 (adjustment due to the abolishment of the US-EU Privacy Shield + link to the list of partners);
• Version valid from 22 August 2023 (adjustment due to the extension of Sygic Services);