Information on the processing of personal data

This is a courtesy translation of the Slovak privacy notice. In case of any discrepancy the Slovak version at /ochrana-sukromia is authoritative.

Who this notice concerns

In our work we come into contact with personal data mainly of our clients and of the persons acting for them, whether members of statutory and supervisory bodies, authorized employees or external representatives. We also process data of our clients' business partners, the opposite parties in their disputes and persons representing those entities, as well as data of our own suppliers and service partners.

If you attended any of the events where we speak or which we organize (a webinar, lecture, workshop), we also keep some data about you. If you belong to any of these groups, this notice is addressed to you.

Who is responsible for the processing

The controller of personal data within the meaning of the GDPR is:

The INLOGIO.AI brand and the website www.inlogio.ai are operated by the company above.

You can send us questions about personal data anytime at grow@inlogio.ai, through the contact form on the website, or by post to the registered address.

Purposes of processing and their legal bases

Every processing operation we carry out has its specific purpose and we only undertake it with data we genuinely need for it. Below we go through the individual purposes, the legal grounds they rest on and the period for which the data is kept.

Cooperation with clients

Providing our services, the design and deployment of AI solutions, automations, agents and internal applications, cannot do without the contact data of persons on the client's side. For clients who are natural persons we process their data directly.

For a client who is a natural person the legal basis is the conclusion and performance of a contract, including steps taken prior to entering into the contract at your request (Art. 6(1)(b) GDPR). If you act for a corporate client, we rely on our legitimate interest in the proper performance of the contract with that client (Art. 6(1)(f) GDPR). We must also keep part of the data because the law requires it (Art. 6(1)(c) GDPR).

A client who is a natural person must provide us with their data, otherwise we cannot manage the contract or its performance. If you act for a client, no regulation obliges you to provide the data, but without it we could not properly manage the cooperation with your client.

You may object at any time to processing based on our legitimate interest for reasons arising from your particular situation. How to do that is described in the section on your rights.

Retention period: during contract negotiations and for the whole duration of the contract; data kept for legal obligations then for the period determined by the relevant regulation.

Note: If a client entrusts us with third party data within a project (e.g. data of their customers or employees), we process such data as a processor, exclusively on the instructions of the client and to the extent agreed in the contract.

Our suppliers and other partners

To run the agency we use the services of various suppliers, from software licenses and cloud solutions to leases or other contracts. In these relationships we process the data of the contractual partner who is a natural person, or of persons acting for a legal entity, including ordinary business communication.

The legal basis is, for a partner who is a natural person, the conclusion and performance of a contract (Art. 6(1)(b) GDPR), and for persons acting for legal entities our legitimate interest in the performance of the contract with the given partner (Art. 6(1)(f) GDPR).

Retention period: during contract negotiations and for the whole duration of the contract.

As with clients: a natural person's data are necessary for concluding and performing the contract, while data of persons acting for a legal entity are processed in the legitimate interest of the existing cooperation.

Contact form, bookings and pre-cooperation inquiries

Did you write to us through the website form, book a consultation in the online calendar, or reach out by e-mail or phone? We need to handle your message, and for that also to work with the data you provide in it.

The legal basis is steps prior to concluding a contract at the request of the data subject, answering questions about our services, their conditions or cooperation options, and the related communication (Art. 6(1)(b) GDPR). If someone else acts for a potential client, we rely on the legitimate interest in preparing a future contractual relationship (Art. 6(1)(f) GDPR).

Retention period: until your inquiry is handled. If the cooperation ultimately does not happen, we keep the communication for at most 6 more months after handling it, in case you wish to return to it.

These data are necessary for negotiating, concluding and performing a future contractual relationship.

Newsletter

We send interested parties e-mail news from the world of AI and process automation. You can subscribe directly on the website; we sometimes also attach a subscription link to e-mails we send you on another occasion, for example with a presentation from an event you attended.

If you are our client or attended our event, the newsletter arrives regularly until you opt out, either right at the start of our cooperation or anytime later.

The legal basis is consent to receiving the newsletter (Art. 6(1)(a) GDPR); for clients and event attendees our legitimate interest in maintaining relationships, communication and awareness of news (Art. 6(1)(f) GDPR in connection with § 116(15) of Act no. 452/2021 Coll. on electronic communications).

You can unsubscribe with one click on the link in every e-mail, or simply write to us and we will remove you immediately. Both consent and subscription are entirely voluntary and refusing or withdrawing them will not harm you in any way.

The detailed conditions of newsletter processing can be found in the document IP Newsletter: information on the processing of personal data.

Retention period: for processing based on consent, until its withdrawal; for legitimate interest for as long as it lasts. We regularly reassess it and end the processing once it loses relevance, and in any case no later than your unsubscribe.

Legal obligations

As a business we are subject to a whole range of obligations, from the Commercial Code, accounting and tax regulations, document retention duties, rules against laundering the proceeds of crime, to personal data protection itself, including handling data subjects' requests.

The legal basis is the performance of these obligations (Art. 6(1)(c) GDPR) and we keep the data for the period determined by the relevant regulation. Without it we could not fulfil our legal duties.

Exercise and defence of rights

We try to make every cooperation run smoothly, though misunderstandings occasionally happen and then we try to resolve them amicably. In disputes, proving proper performance or proceedings before public authorities, or in mediation and out-of-court proceedings, we may therefore use your data to exercise or defend our rights and claims, against clients, suppliers and other entities.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

Retention period: for the relevant limitation or preclusion period, or for as long as someone may bring proceedings against us or we may be required to prove performance, for example 5 years from handling a data subject's request.

Events and feedback

Education is part of what we do, so we organize or co-organize webinars, lectures, workshops and other events where we share our experience with AI and automation. To register you and let you in we need your identification and contact data. After the event we are happy to send you the presentation and other materials you might find interesting.

We also like to reach out after an event with a short satisfaction questionnaire, about its course, content and benefit for you. Filling it in is entirely up to you; the results help us prepare future events better.

The legal basis for registration, attendance and sending materials is the event participation contract (Art. 6(1)(b) GDPR). If a company, for example your employer, registers you and concludes the contract, we rely for your data on the legitimate interest in performing the contract with it (Art. 6(1)(f) GDPR). We send the satisfaction questionnaire in the legitimate interest of surveying satisfaction and improving events as market research, including processing its results (Art. 6(1)(f) GDPR).

Retention period: for the duration of the contract, or for as long as the relevant legitimate interest lasts. We regularly reassess it and stop the processing once it is fulfilled or after your objection.

If you conclude the participation contract yourself, your data are necessary for it; if a company registers you, we rely, as stated above, on our legitimate interest. Neither the questionnaire nor filling it in is a condition of any contract or obligation.

Presentation on social networks

We share news about our work mainly on LinkedIn. If you react to posts on our profile, we work with the data you share there yourself, primarily so we can talk to you.

The legal basis is our legitimate interest in presenting our work and building relationships with the public and potential clients (Art. 6(1)(f) GDPR).

Retention period: at most 5 years from the end of the calendar year in which we started the processing, sooner if you or the network's operator delete the given comment or interaction. We regularly reassess this interest.

Cookies

Our website stores technical (necessary) cookies without which it would not work; their storage does not require consent (§ 109(8) of Act no. 452/2021 Coll.). We store other types of cookies only after you give consent in the cookie bar. Consent is voluntary and refusing it will not harm you; you can withdraw it anytime in the settings, while processing that happened before withdrawal remains lawful.

The legal basis is consent under Art. 6(1)(a) GDPR. We keep necessary cookies for 24 hours from storage on your device, functional and marketing cookies for 13 months from storage. Details on individual cookies are shown directly when consent is granted.

Where we get your data from

Mostly directly from you. If you act for someone else, an employer or a client, we receive it from them. We supplement it from public sources such as the commercial or trade register or your LinkedIn profile, or by other lawful means. Data of participants of events where we speak is sometimes provided by the organizer, so we can send you materials for the lecture and related communication. Part of the data is created by your own device when visiting the website or by the site itself (cookies).

For our own purposes described in this notice we work mainly with ordinary identification and contact data. Data a client entrusts to us within a project (for example about their customers or employees) we process as a processor, according to their instructions and to the extent agreed in the contract.

Who we share data with

To the necessary extent we share it mainly with our processors, partners who process it in our name and on our instructions. These are for example providers of IT and cloud services, administrators of our website, providers of e-mail and marketing tools (including newsletter distribution), operators of analytics tools, or our external accountant.

Further with third parties acting for us in their own name and on their own responsibility; these may be delivery services, auditors, tax advisors, banks or insurance companies. If the law requires it or we need it to defend and exercise rights, we provide data to state authorities and public institutions.

Everyone we share data with, especially processors, is vetted before selection to guarantee adequate security and lawfulness of the processing.

How long we keep data

Always only as long as the given purpose requires. Specific deadlines are given with the individual purposes above. We monitor compliance continuously: once data has served its purpose and the law does not require further storage, we delete it even sooner than the originally planned period.

Security and further information

We only ask for and process data that is necessary for the given purpose and protect it with appropriate organizational, personnel and technical measures. Physically it is stored on servers and devices in the European Union.

We do not use data for automated decision making or profiling and we do not transfer it to third countries outside the EU/EEA, except in situations where one of our suppliers does so (for example the operator of a social network you use to interact with us); we are not responsible for such transfers.

Your rights

As a data subject, the person whose data is concerned, you have these rights towards us:

1. Withdraw consent

   Consent you have given us at any time can be taken back at any time. It has no effect on processing that took place before the withdrawal.

2. Access to data (Art. 15 GDPR)

   On request we will confirm whether we process your data and issue it to you together with information about purposes, recipients, retention periods and other particulars under Art. 15 GDPR.

3. Rectification of data (Art. 16 GDPR)

   If we keep incorrect or incomplete data about you, we will correct or complete it without undue delay.

4. Data portability (Art. 20 GDPR)

   Data you have provided to us on the basis of consent or a contract and which we process by automated means will, on request, be issued to you in a structured, commonly used and machine-readable format, or forwarded to another controller where technically feasible. Exercising this right must not adversely affect the rights and freedoms of others.

5. Erasure of data (Art. 17 GDPR)

   You may request erasure in particular when the data is no longer necessary for the purpose for which it was obtained; when you have withdrawn consent and no other legal basis exists; when you object to processing based on legitimate interest and your reasons prevail; when the data was processed unlawfully; or when erasure is required by law. We assess every request and, if it is justified and none of the GDPR exceptions apply, delete the data without undue delay.

6. Restriction of processing (Art. 18 GDPR)

   In cases the GDPR allows, you may ask us to process your data only in a limited way, for example while we verify its accuracy. Before lifting a restriction we will inform you in advance.

7. Objection (Art. 21 GDPR)

   You may object at any time to processing that relies on our legitimate interest, for reasons arising from your particular situation. We may continue it only if we demonstrate overriding legitimate grounds, or for the establishment, exercise or defence of legal claims. We handle objections to direct marketing, meaning the newsletter, immediately.

8. Complaint to a supervisory authority

   If you feel we handle your data unlawfully, you can complain to the Slovak Data Protection Authority (Budova Park One, Námestie 1. mája 18, 811 06 Bratislava); details are on its website. You can also file a complaint with the relevant authority in the EU member state where you reside, work, or where the alleged infringement occurred.

How to contact us

For anything regarding personal data, a question or the exercise of a right, just write to grow@inlogio.ai or by post to the registered address given above.

We update this notice from time to time; the current wording is always published at www.inlogio.ai.