1. Who we are

The controller responsible for processing your personal data on this website is:

We have not appointed a data protection officer, as we are not required to do so. You can contact us about any data protection matter at the email address above.

2. Visiting the website

When you open our website, the server of our hosting provider automatically records technical data that your browser sends: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system.

Purpose: to deliver the website, keep it secure and detect misuse. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR). Retention: server logs are kept for [NUMBER] days and then deleted, unless needed to investigate a security incident.

3. Contacting us

If you write to us by email, we process the data you provide, typically your name, email address, organisation and the content of your message.

Purpose: to answer your enquiry and, where relevant, to prepare an offer. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR). Retention: as long as needed to handle your enquiry, and no longer than [NUMBER] months after our last contact unless a contract follows.

Please do not send sensitive or confidential documents in a first, unsolicited message.

4. Clients and partners

If you become our client or project partner, we process the personal data needed to provide our services, manage the contract, invoice and meet our legal obligations, including accounting and, where applicable, professional and anti-money-laundering obligations.

Legal basis: performance of a contract (Article 6(1)(b) GDPR) and compliance with legal obligations (Article 6(1)(c) GDPR). Retention: for the duration of the contract and then for the periods required by law, in particular accounting and tax rules. More detailed information may be provided in your engagement terms.

5. Comments

If you comment on an article, we store the name, email address and website you enter, the content of the comment, your IP address and your browser’s user agent string. Comments are moderated before they are published.

Purpose: to publish and moderate comments and prevent spam. Legal basis: our legitimate interest in running a discussion and protecting the website (Article 6(1)(f) GDPR). Retention: as long as the comment remains on the website; rejected comments and spam are deleted.

An anonymised string created from your email address (a hash) may be sent to the Gravatar service operated by Automattic Inc. to check whether you use a profile picture. Your name, website and comment are visible to the public once the comment is approved.

6. Cookies

This website uses only cookies that are needed for it to work. We do not use analytics or advertising cookies.

• Comment cookies: if you choose to save your name, email and website when commenting, they are stored in cookies on your device for one year so you do not have to enter them again.
• Login cookies: used only for site administrators who sign in to the website.

You can delete or block cookies in your browser settings at any time.

7. Third-party services

Fonts

All fonts used on this website are stored on our own server. No data is sent to Google or other font providers when you view our pages.

Embedded content

Articles may include embedded content from other websites, such as videos or documents. Embedded content behaves as if you had visited the other website, which may collect data about you under its own privacy policy.

Links to other websites

Our pages link to external resources, for example EUR-Lex or European Commission websites. We are not responsible for how those websites process personal data.

8. Recipients and transfers

We share personal data only where needed for the purposes above, in particular with:

• our web hosting provider, WebHouse ([WEBHOUSE LEGAL NAME, ADDRESS]), which processes data on our behalf;
• our email service provider [EMAIL PROVIDER];
• our accountants and professional advisers, where required;
• public authorities, where the law requires it.

Where data is transferred outside the European Economic Area, for example to Automattic in the United States, the transfer relies on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for certified companies, or on standard contractual clauses.

We do not sell personal data and do not use it for automated decision-making or profiling.

9. Your rights

Under the GDPR you have the right to:

• access your personal data (Article 15);
• have inaccurate data corrected (Article 16);
• have your data erased (Article 17);
• restrict processing (Article 18);
• receive your data in a portable format (Article 20);
• object to processing based on our legitimate interests (Article 21);
• withdraw consent at any time, where processing is based on consent, without affecting earlier processing.

To exercise your rights, write to [YOUR EMAIL]. We will reply within one month.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State where you live or work, or where an alleged infringement took place. Our lead authority is [SUPERVISORY AUTHORITY, e.g. Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk].

10. Changes to this notice

We may update this notice when our website or the law changes. The current version is always available on this page, with the date of the last update shown at the top.