Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

If you have any questions about this Privacy Policy or the processing of your data, please contact us at the email above.

2. What Data We Collect

We collect personal data only when you voluntarily provide it to us:

Contact Form

When you submit our contact form, we collect your full name, email address, phone number (optional), and message content.

Newsletter

When you subscribe to our newsletter, we collect your email address.

Automatically Collected Data

With your consent, we may collect anonymized usage data through Google Analytics, including pages visited, time spent on site, browser type, and device information. We also use Cloudflare Turnstile for bot protection, which may process technical data such as your IP address and browser characteristics.

3. Why We Process Your Data

We process your personal data for the following purposes:

• To respond to your inquiries submitted through the contact form
• To send you newsletters and updates you have subscribed to
• To protect our website from spam and abuse (Cloudflare Turnstile)
• To understand how visitors use our website and improve our services (Google Analytics, only with your consent)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR) - when you subscribe to the newsletter or accept analytics cookies
• Contract and pre-contractual measures (Art. 6(1)(b) GDPR) - when you contact us with an inquiry about our services through the contact form
• Legal obligation (Art. 6(1)(c) GDPR) - to fulfill accounting, tax, and archival obligations under applicable laws
• Legitimate interest (Art. 6(1)(f) GDPR) - to protect our website from bot attacks and spam using Cloudflare Turnstile

5. Who Has Access to Your Data

Your personal data is accessible only to the arbeetrate team. We do not sell, trade, or share your data with third parties for marketing purposes. However, we use the following service providers who may process data on our behalf:

• Hosting provider - for website infrastructure and data storage
• Email service provider - for sending newsletters and contact form notifications
• Cloudflare, Inc. (USA) - for bot protection (Turnstile) and website security
• Google LLC (USA) - for analytics (Google Analytics) and tag management (Google Tag Manager), only when you consent to analytics cookies

All service providers are bound by data processing agreements and process data only on our instructions.

6. International Data Transfers

Some of our service providers are established in the United States of America, which means your personal data may be transferred outside the European Economic Area (EEA).

These transfers are carried out on the basis of appropriate safeguards in accordance with the GDPR:

• Google LLC - transfer based on Standard Contractual Clauses (SCCs) adopted by the European Commission and a signed Data Processing Agreement
• Cloudflare, Inc. - transfer based on Standard Contractual Clauses (SCCs) and supplementary technical measures

The Standard Contractual Clauses were adopted by European Commission Implementing Decision (EU) 2021/914 of 4 June 2021.

7. Security of Personal Data

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (HTTPS/TLS), regular software updates, secured server access, and restricting access to personal data only to persons who need it to perform their duties.

8. Data Retention

We retain your personal data only as long as necessary for the purposes described above:

• Contact form data - retained for up to 2 years from submission, then deleted
• Newsletter subscription data - retained until you unsubscribe
• Analytics data - anonymized and retained according to Google Analytics default retention settings (14 months)
• Cloudflare Turnstile data - processed temporarily during verification and not stored long-term
• Accounting and tax documents - retained for 10 years in accordance with applicable legal requirements

9. Your Rights

Under the GDPR and Act No. 18/2018 Coll., you have the following rights regarding your personal data:

• Right of access - request a copy of the personal data we hold about you
• Right to rectification - request correction of inaccurate or incomplete data
• Right to erasure - request deletion of your personal data when it is no longer necessary for the purpose for which it was collected or when you withdraw consent
• Right to restriction - request that we limit the processing of your data, for example if you contest its accuracy
• Right to data portability - receive your data in a structured, commonly used, and machine-readable format, where processing is based on consent or contract
• Right to object - object to the processing of your data based on legitimate interest or for direct marketing purposes
• Right to withdraw consent - withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal

To exercise any of these rights, please contact us at privacy@arbeetrate.com. We will respond to your request within 30 days of receipt. In justified cases, this period may be extended by a further two months, of which we will inform you.

You also have the right to lodge a complaint with the supervisory authority - the Office for Personal Data Protection of the Slovak Republic, Hranicna 12, 820 07 Bratislava 27, website: https://dataprotection.gov.sk/uoou/

10. Obligation to Provide Personal Data

Providing personal data through the contact form is voluntary. However, without providing your name and email address, we will not be able to respond to your message. Providing your email address for the newsletter is voluntary - without it, we cannot send you updates. In the case of fulfilling legal obligations (accounting, taxes), providing data is a legal requirement.

11. Automated Decision-Making and Profiling

The controller does not carry out automated decision-making, including profiling, within the meaning of Art. 22(1) and (4) GDPR that would produce legal effects or similarly significantly affect you.

12. Cloudflare Turnstile

We use Cloudflare Turnstile as an invisible CAPTCHA to protect our forms from automated spam and bot submissions. Turnstile may process your IP address, browser type, and interaction data to verify that you are a human visitor. This data is processed by Cloudflare under their privacy policy. The use of Turnstile is based on our legitimate interest in protecting our website from abuse.

13. Google Analytics & Google Tag Manager

We use Google Analytics and Google Tag Manager to analyze website usage and improve our services. These tools are activated only after you provide explicit consent through our cookie consent banner. When active, Google Analytics collects anonymized data about your browsing behavior, including pages visited, session duration, and traffic sources. Google may process this data on servers outside the European Economic Area. We have configured Google Analytics to anonymize IP addresses and have signed a Data Processing Agreement with Google. You can withdraw your consent at any time through the cookie settings accessible in our website footer.

14. Cookies

For detailed information about the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.