Ochrana osobnych udajov

The Slovak version is legally binding. This English translation is provided for convenience. As the operator of www.flexitystudio.sk we have adopted appropriate technical, organisational and personal safeguards so your personal data is maximally protected and processed in line with EU Regulation 2016/679 (GDPR) and Act No. 18/2018 Coll. on personal data protection.

The data controller is Flexity s. r. o., Company ID: 35 731 389, registered at Ľuda Zúbka 2, 841 01 Bratislava — Dúbravka, Commercial Register of District Court Bratislava I, Section: Sro, Insert No. 15884/B (the 'Company'). For any question about processing your personal data — including exercising your rights as a data subject — please email info@flexity.sk or write to the registered address.

We only process data necessary for pre-contractual relations/contracts and, where applicable, marketing purposes. Identification and contact data: name, surname, billing address, delivery address, email, phone number Transaction data: bank details — account number (IBAN)

We process your data following the data minimisation principle — only the necessary amount. Most processing is justified by order processing, invoicing and complaint handling. With your consent we also process data for marketing — newsletters and promotional campaigns. Legal basis: GDPR and § 13 of the Personal Data Protection Act.

You have the right to access, correct, delete, restrict, port and object to processing of your data, and to file a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava 27).

We use cookies — small text files that cannot be attributed to a specific person. Types: technical, last click, session, ever (up to 60 months) and conversion cookies. Analytics and marketing scripts are loaded through Google Tag Manager and fire only after you consent in the cookie banner. Without consent we measure only what the site needs to work. We use Google Analytics 4 for traffic statistics and Google Ads to measure advertising performance — advertising cookies are therefore not fully anonymised. Meta Pixel and Meta Conversions API. To measure advertising on Facebook and Instagram we pass Meta the fact that a purchase or booking took place. Some of these events are sent directly by our server (Conversions API), not only by your browser. To match an event to the ad account we may pass your e-mail address as an irreversible hash (SHA-256) — never in readable form. Processing also takes place outside the European Union (USA). Browser-side cookies and measurement are controlled by the cookie banner. Events sent by our server are tied to a completed booking or payment and the banner does not affect them — if you do not want that processing either, write to info@flexity.sk and object.

In the e-mails we send you — booking confirmations, reminders, informational and marketing messages — we measure whether the e-mail was opened and whether you clicked a link in it. How it works. The message contains a transparent one-pixel image; when your mail client downloads it, we learn that the message was opened, when, and roughly from what device. Links in the message go through a redirect server that forwards you to the destination page immediately and records which link you clicked. This does not track the content of the message or your behaviour on the site. Why we do it. So we stop sending to people who are not interested, and send less and more relevant mail. The legal basis is legitimate interest (Art. 6(1)(f) GDPR) — our interest in proportionate, non-intrusive communication. How to avoid it. Most mail clients can turn off automatic image loading — the open is then not recorded. You can unsubscribe from marketing e-mails at any time using the link in the footer. You may object to this measurement at any time at info@flexity.sk; we will keep sending booking confirmations and other service messages, but without measurement. Open and click data is kept for 18 months from sending. The measurement is technically provided by Amazon Web Services (AWS SES), including processing outside the European Union (USA).

On our contact page we offer an optional voice AI assistant for answering common questions about our services. You start the assistant yourself and confirm consent before the conversation begins; if you prefer not to use it, contact us by email or phone. When you use the assistant, an audio recording of your voice and a transcript of the conversation are processed. This data is processed on our behalf by ElevenLabs (ElevenLabs, Inc., elevenlabs.io) acting as a processor, for the purpose of customer support; processing may take place outside the European Union (USA). To request deletion of a recording or to exercise your other rights, contact info@flexity.sk.

We keep your data for the duration of the contract. After termination we keep data for the period required by law — notably Act No. 431/2002 Coll. on Accounting — for 10 years.

We share data with third parties where required by law or with your consent. Processors handling personal data on our behalf: - Flexio — booking and client system at `book.flexitystudio.sk`: name, e-mail, phone, bookings, credits and payments - Amazon Web Services (AWS SES) — e-mail delivery (confirmations, reminders, newsletter) and measurement of opens and clicks; processing also outside the EU (USA) - Google Ireland Ltd. — Google Analytics 4, Google Ads and Google Tag Manager - Meta Platforms Ireland Ltd. — ad measurement via Meta Pixel and Conversions API including the hashed e-mail address; processing also outside the EU (USA) - ElevenLabs, Inc. — voice AI assistant on the contact page; processing also outside the EU (USA) Transfers to processors outside the European Union take place under standard contractual clauses approved by the European Commission.

Exercise your rights via info@flexity.sk or in writing at the Company address. We'll reply as soon as possible, no later than one month after receiving the request. The period may be extended by two more months if necessary.