Privacy policy.

Controller

Hlaváč Business, s.r.o., Company ID (IČO) 50 150 880, registered seat Bottova 8122/6, 811 09 Bratislava - Staré Mesto, registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, insert No. 142661/B ("we"). Office: Košická 3, 821 09 Bratislava. Contact: info@hlavac.business.

We have not appointed a data protection officer (DPO), as the GDPR does not require one for our processing. For any data protection matter, write to info@hlavac.business.

What data we process and why

• Inquiries and correspondence (email, phone): name, email address, phone number and the content of your message, so that we can reply and prepare an offer. Legal basis: steps prior to entering into a contract or performance of a contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR).
• Contracts and invoicing: identification and contact details. Legal basis: performance of a contract and our legal obligations, for example under the Slovak Accounting Act (Art. 6(1)(b) and (c) GDPR).
• Screening of clients against sanctions lists: identification data of the client, its owners and statutory representatives. Legal basis: legal obligations and our legitimate interest (Art. 6(1)(c) and (f) GDPR).
• Website analytics: Google Analytics 4 (measurement ID G-CX6GRF8FZN) with the cookies _ga and _ga_CX6GRF8FZN, kept for 2 years. Only with your consent (Art. 6(1)(a) GDPR). Without consent the analytics script is not loaded at all.
• Delivering the website: when you visit the site, your browser sends your IP address and technical request data to our hosting (Google Firebase Hosting). Legal basis: our legitimate interest in delivering a working and secure website (Art. 6(1)(f) GDPR). Fonts are served from our own server; the site makes no requests to third-party font services.

Cookies

The cookies and browser storage this site uses, and how to change your consent, are described in the cookie policy. You can withdraw your consent to analytics at any time in the cookie settings.

Cookie policy

Processors and recipients

We share personal data only with the processors we need to run our business, and with public authorities where the law requires it. Our processors are:

• Google Firebase Hosting - hosting of this website.
• Google Workspace - email (info@hlavac.business).
• Google Analytics 4 - website analytics, only with your consent.

Transfers outside the EU

Google may process data in the United States. Such transfers are based on the EU-U.S. Data Privacy Framework and on standard contractual clauses approved by the European Commission.

How long we keep data

• Inquiries and correspondence: for as long as needed to handle them, and at most 3 years, unless a contract follows.
• Contracts and accounting records: for the periods required by law, in particular 10 years under the Slovak Accounting Act.
• Analytics cookies: 2 years, or until you delete them or withdraw your consent.

Your rights

Under Articles 15 to 22 GDPR you have the right of access to your data, to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on legitimate interest. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you (Art. 22 GDPR).

Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing before the withdrawal. For analytics, use the cookie settings on the cookie policy page.

Send requests to info@hlavac.business. You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk.

Data we process for our clients

When we build and operate AI agents for clients, we process personal data on their behalf as a processor, under a data processing agreement pursuant to Art. 28 GDPR. In that case the client is the controller and its own privacy policy applies.