Privacy Policy
Last updated: 14 September 2026
1. Who we are (the controller)
The controller of your personal data is Binovatix s. r. o., with its registered office at Šustekova 3697/49, 851 04 Bratislava-Petržalka, Slovakia, Company No. 55675298, registered in the Commercial Register of the Bratislava III City Court, section Sro, insert No. 171916/B. Contact for data protection matters: privacy@virtualcolleague.eu.
No Data Protection Officer is appointed — we do not meet the conditions for mandatory designation under Art. 37 GDPR. Your queries are handled directly by the managing director at the contact above.
2. What data we process, for what purpose and on what legal basis
| Purpose | Categories of data | Legal basis | Retention period |
|---|---|---|---|
| Evaluating your request from the contact/enquiry form and contacting you about the Virtual Colleague service | first name, email, field/profession, traffic source (UTM), IP address and time of submission | handling your request and pre-contractual steps — Art. 6(1)(b) GDPR | for the time needed to handle the enquiry, max. 24 months from submission |
| Sending occasional Virtual Colleague news and tips (marketing) | first name, email | consent — Art. 6(1)(a) GDPR (optional checkbox on the form) | until consent is withdrawn, max. 24 months |
| Arranging and holding an introductory call (booking) | name, email, appointment time | pre-contractual steps — Art. 6(1)(b) GDPR | for the duration of communication, max. 24 months |
| Operating and securing the website, defending legal claims | server and email logs (access/error, SMTP), mailbox contents, IP address | legitimate interest — Art. 6(1)(f) GDPR | max. 12 months |
| Measuring traffic (Google Analytics 4) | pseudonymised identifiers, device and on-site behaviour data | consent — Art. 6(1)(a) GDPR (cookie banner) | per GA4 settings, max. 14 months |
Providing your data is voluntary. However, without your name and email we cannot respond to your enquiry.
3. Recipients (processors)
We do not share or sell data for third-party marketing. We only use trusted providers who process data on our behalf under an Art. 28 GDPR agreement:
- Websupport, s. r. o. (SK) — web hosting and sending emails from the form;
- Google Ireland Limited (IE) — email mailbox (Google Workspace), Google Analytics 4, web fonts;
- Calendly, LLC (USA) — booking of the introductory call.
4. Transfers to third countries
Some providers (Google, Calendly) may process data in the USA. Such transfers are safeguarded by the European Commission adequacy decision — the EU-U.S. Data Privacy Framework (of 10 July 2023), or by Standard Contractual Clauses (SCC) under Art. 46 GDPR.
5. Cookies and analytics
- Essential cookies — required for the website to function; always set (the site does not work without them).
- Analytics cookies (Google Analytics 4) — set only with your consent via the cookie banner. They are blocked by default (Google Consent Mode:
analytics_storage = denied). You can withdraw consent at any time via the Cookie settings link in the footer; if you decline or withdraw consent, analytics cookies (_ga,_gid) are actively deleted.
After you grant analytics consent, we also measure on-site interactions — e.g. form steps and bookings of introductory calls (including the chosen enquiry type/profession). We do not send your name, email or free-text form input to Google Analytics 4.
6. Your rights
As a data subject you have the right:
- of access to your data (Art. 15);
- to rectification of inaccurate data (Art. 16);
- to erasure ("right to be forgotten", Art. 17);
- to restriction of processing (Art. 18);
- to data portability (Art. 20);
- to object to processing based on legitimate interest (Art. 21);
- to withdraw consent at any time (Art. 7(3)) — withdrawal does not affect the lawfulness of processing before withdrawal;
- to lodge a complaint with the supervisory authority (Art. 77).
Exercise your rights by email at privacy@virtualcolleague.eu. We will respond usually within a few business days, and within one month at the latest.
We do not carry out automated decision-making or profiling with legal effects under Art. 22 GDPR.
7. Supervisory authority
Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovakia, email statny.dozor@pdp.gov.sk, web dataprotection.gov.sk.
The current version of this policy is always available on this page.