Privacy Policy

Effective Date: 27 July 2026

This Privacy Policy explains how CONSYSTEAM s.r.o., Doležalova 3424/15C, 821 04 Bratislava – Ružinov, Slovak Republic, Company ID (IČO): 56829914, Tax ID (DIČ): 2122463981, email: [email protected] (“CONSYSTEAM”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Slovak data-protection law, and other applicable laws.

---

1. Scope and Roles

This Policy applies when you use consysteam.com, contact us, engage our AI, automation, consulting, or related services, or otherwise interact with us.

CONSYSTEAM is the data controller for personal data collected through this website and in connection with its business relationships. When we process personal data supplied by a client for an agreed AI or automation project, we act as a data processor and the client remains the data controller. Where required, we enter into a GDPR-compliant Data Processing Agreement.

2. Data We Collect

We may collect and process the following categories of personal data:

• Identification and contact data: name, email address, and other contact details you provide.
• Technical and usage data: IP address, browser and device information, operating system, pages visited, and other website-usage data collected through cookies, analytics, or server logs.
• Project data: business documents, data, and project-related communications provided in connection with our services.
• Financial data: billing and payment details, processed through our payment providers.

We collect data directly from you, for example when you complete a contact form or engage our services, and automatically through cookies and similar technologies where applicable. We do not knowingly collect personal data from children under 16.

3. How We Use Your Data

We process personal data only for specified purposes and with a valid legal basis under GDPR. These purposes include:

Purpose	Legal basis
Responding to enquiries and assessing potential engagements	Legitimate interest and pre-contractual steps
Delivering agreed services and project communications	Performance of a contract
Issuing invoices and processing payments	Legal obligation and performance of a contract
Improving our website and services	Legitimate interest; consent where required for cookies
Sending marketing communications	Consent
Meeting legal obligations and preventing fraud or misuse	Legal obligation and legitimate interest

Client documents and data are used only to deliver the agreed project. We do not sell, rent, or trade personal data, and we do not use client data to train other clients’ systems or public AI models.

4. Sharing Your Data

We may share personal data with trusted service providers that support our operations, subject to appropriate contractual and data-protection obligations. These providers include:

• FormSubmit for processing contact-form submissions.
• Stripe, Inc. for payment processing.
• Google Analytics for website traffic measurement and aggregated statistical analysis.
• Hotjar Ltd. for behavioural analytics and website-usability analysis.
• Hosting, email-delivery, professional-adviser, and other service providers where needed to operate our business or deliver the agreed services.

The providers listed above support this website and our own business operations. Where we process client project data on a client’s behalf, the applicable sub-processors — which may include cloud hosting and AI model providers — are listed in the Data Processing Agreement for that engagement, and are subject to the notification and objection rights set out in it. We do not use client data to train any provider’s models.

We may also disclose data to public authorities where required by law or necessary to protect our legal rights. Where personal data is transferred outside the European Economic Area, we use appropriate safeguards, such as Standard Contractual Clauses, where required.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and secure the website, remember preferences, and analyse website use. These may include:

• Strictly necessary cookies required for website functionality and security.
• Functionality cookies that remember your preferences and settings.
• Analytics and tracking cookies used by Google Analytics and Hotjar to understand visitor behaviour and improve the website.

Where required by law, we obtain consent before placing non-essential cookies. You can manage or disable cookies through your browser settings or available cookie controls. Disabling some cookies may affect website functionality.

We store your cookie-preference choice for up to six months, after which we ask you to make a new choice. You can reopen the Cookie settings control at any time to withdraw or change consent.

6. Client Data and Confidentiality

Documents and data provided by clients for an AI or automation project are stored securely and accessible only to authorised personnel working on that project. They are not shared with other clients or used outside the agreed scope.

Clients retain ownership of their documents and data. We delete or return project data on completion in accordance with the applicable Service Agreement, unless retention is required by law.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy or to meet legal, regulatory, or contractual requirements. Unless a Service Agreement states otherwise:

• Contact-form and business-enquiry data is retained for up to two years from the last contact.
• Client project data is retained and deleted in accordance with the Data Processing Agreement for that engagement. Where no other instruction is given, it is deleted within 90 days of the end of the services.
• Marketing data is retained until you withdraw consent or opt out.
• Invoice and billing data is retained for ten years, as required by Slovak accounting law.
• Usage and analytics data is aggregated or anonymised where possible.

8. Your Rights

Under GDPR, you have the right to access, correct, delete, restrict, object to, and receive a portable copy of your personal data, where applicable. You may withdraw consent at any time where processing is based on consent; this does not affect the lawfulness of processing before withdrawal.

To exercise your rights, contact us at [email protected]. We will respond within one month, subject to any lawful extension. You may also lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR) at dataprotection.gov.sk.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These measures include encrypted data transmission, access controls, secure systems, regular security reviews, and confidentiality obligations for staff and contractors.

No internet transmission or electronic storage method is completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The Effective Date at the top of this page reflects the current version. For material changes, we may notify existing clients by email or publish a notice on this website.

11. Contact

For privacy-related questions or to exercise your rights, contact:

CONSYSTEAM s.r.o.
Doležalova 3424/15C, 821 04 Bratislava – Ružinov, Slovak Republic
Company ID (IČO): 56829914
Tax ID (DIČ): 2122463981
Email: [email protected]