Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us using the details above.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

2.1 Data you provide to us directly

• Contact details: name, surname, email address, telephone number, company name, job title.
• Communication content: the content of messages you send us via our contact form, email, or other channels.
• Business information: details related to potential or existing client relationships, project briefs, and commercial correspondence.

2.2 Data collected automatically

• Technical data: IP address, browser type and version, operating system, device type, referring URLs, time zone, language settings.
• Usage data: pages visited, time spent on the Website, click paths, and other behavioural data collected via cookies and similar technologies.

2.3 Data from third parties

We may receive information about you from publicly accessible sources (such as LinkedIn, company websites, press databases) where this is relevant to our business activities and lawful under GDPR.

3. Purposes of Processing and Legal Bases

We process your personal data only where we have a valid legal basis under Article 6 of the GDPR:

3.1 To respond to your enquiries

When you contact us via email, contact form, or other channels, we process your data to reply to your request and provide the information you have asked for.

Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract) or Article 6(1)(f) GDPR (our legitimate interest in responding to enquiries).

3.2 To provide our services and manage client relationships

Where you are a client, supplier, or business partner, we process your data to negotiate, conclude, and perform contracts, manage projects, and maintain commercial relationships.

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

3.3 To operate, secure, and improve our Website

We process technical and usage data to ensure the Website functions properly, to detect and prevent security incidents, and to analyse and improve its performance.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in operating and securing our Website) and Article 6(1)(a) GDPR (consent for non-essential cookies).

3.4 For marketing communications

Where permitted, we may send you information about our services, news, and events. You may withdraw your consent or object to such communications at any time.

Legal basis: Article 6(1)(a) GDPR (consent) or Article 6(1)(f) GDPR (legitimate interest in direct marketing to existing business contacts).

3.5 To comply with legal obligations

We process certain data to comply with accounting, tax, and other obligations imposed by Slovak and EU law.

Legal basis: Article 6(1)(c) GDPR (legal obligation).

4. Cookies and Similar Technologies

Our Website uses cookies and similar technologies to ensure proper functioning, analyse traffic, and (where you have given consent) for marketing purposes. Cookies are small text files stored on your device.

We use the following categories of cookies:

• Strictly necessary cookies: required for the Website to function. These do not require consent.
• Analytics cookies: help us understand how visitors use the Website (e.g. Google Analytics). Set only with your consent.
• Marketing cookies: used to deliver relevant content and measure campaign effectiveness. Set only with your consent.

You can manage your cookie preferences at any time through our cookie banner or your browser settings. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.

5. Recipients of Personal Data

We may share your personal data with the following categories of recipients, where necessary and on a strict need-to-know basis:

• Service providers acting as processors: hosting providers, email and communication platforms (e.g. Google Workspace), website analytics tools, CRM systems, accounting and IT support.
• Professional advisors: lawyers, auditors, and tax consultants bound by confidentiality obligations.
• Public authorities: where required by law (e.g. tax authorities, courts).

All processors acting on our behalf are bound by a written data processing agreement in accordance with Article 28 GDPR.

6. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA), including in the United States (e.g. Google LLC for Google Workspace and Analytics services). Where personal data is transferred outside the EEA, we ensure an adequate level of protection through one or more of the following safeguards:

• An adequacy decision adopted by the European Commission;
• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Other appropriate safeguards under Chapter V of the GDPR.

You may request a copy of the safeguards in place by contacting us using the details in Section 1.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Enquiries and general correspondence: typically up to 2 years from the last contact, unless a business relationship develops.
• Client and contractual data: for the duration of the relationship and for up to 10 years thereafter, in line with Slovak accounting and commercial law.
• Marketing data: until you withdraw your consent or object to processing.
• Website analytics: in accordance with the retention period configured in the respective tool (typically 14-26 months).

After expiry of the relevant retention period, personal data is securely deleted or anonymised.

8. Your Rights Under the GDPR

Subject to the conditions set out in the GDPR, you have the following rights with respect to your personal data:

• Right of access (Article 15): to obtain confirmation of whether we process your personal data and, if so, to receive a copy.
• Right to rectification (Article 16): to have inaccurate or incomplete data corrected.
• Right to erasure / "right to be forgotten" (Article 17): to request deletion of your data in certain circumstances.
• Right to restriction of processing (Article 18): to limit how we use your data.
• Right to data portability (Article 20): to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Article 21): to object to processing based on legitimate interest or for direct marketing purposes.
• Right to withdraw consent (Article 7(3)): where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.
• Right not to be subject to automated decision-making (Article 22): we do not carry out automated decision-making with legal or similarly significant effects.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within one month of receiving your request, in accordance with Article 12 GDPR.

9. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in Slovakia is:

You may also lodge a complaint with the supervisory authority in the EU Member State of your habitual residence or place of work.

10. Security of Your Personal Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss, or destruction. These measures include access controls, encryption in transit, secure hosting, and staff confidentiality obligations. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our Website and services are directed at businesses and professional contacts and are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on this page with a revised "Effective date". Where the changes are material, we will provide additional notice (e.g. via email or a prominent notice on the Website).

13. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or our processing of your personal data, please contact us at: