Privacy policy
Information pursuant to Article 13 of the GDPR and Slovak Act No. 18/2018 Coll. on personal data protection.
Last updated: 25 October 2026
Controller
The controller of personal data is Sibo Consulting s. r. o., registered office Staré Grunty 52/A, 841 04 Bratislava, Slovakia, Company ID 50 959 646, Tax ID 2120546505, VAT ID SK2120546505, registered in the Commercial Register of the Municipal Court Bratislava III, Section Sro, Insert No. 120857/B. Contact: e-mail info (at) siboconsulting (dot) com or the contact form on this website.
What data we process and why
Contact form and e-mail: name, e-mail address, optionally company name and the content of your message. The purpose is handling your request and subsequent communication. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, for other enquiries, our legitimate interest in replying to messages you send us (Art. 6(1)(f) GDPR). We therefore do not need your consent to send the form.
Protecting the form against abuse: to limit the number of submissions from one connection we store only a one-way keyed fingerprint of the IP address instead of the address itself, to count submissions within the preceding 24 hours (legitimate interest, Art. 6(1)(f) GDPR). The IP address is also included in the e-mail the form delivers to us.
Server logs: IP address, time and requested page are retained briefly by the hosting provider for security and operational reasons (legitimate interest, Art. 6(1)(f) GDPR).
Cookies
On the Contact page we use a PHP session cookie, without which the form is not protected against forged requests, and a Google reCAPTCHA cookie used to distinguish humans from bots. Other pages of the website set no cookies. We use no analytics, marketing or advertising cookies and do not track your behaviour.
Retention
Contact form messages and e-mails are kept for as long as necessary to handle the request, at most 24 months unless a contractual relationship arises. IP fingerprints used to protect the form are used to count submissions within the preceding 24 hours. Records older than 24 hours are removed when the next form submission is processed. If no further submission arrives, they may remain stored for longer. Server logs are typically kept by the hosting provider for no more than 30 days.
Recipients and transfers outside the EU
We do not share data with third parties for marketing purposes. Our processor is the web hosting and e-mail provider (WebSupport, s.r.o., Slovakia).
On the Contact page we use Google reCAPTCHA provided by Google Ireland Ltd. Google may also process data in the USA through Google LLC. Transfers to the USA rely on the European Commission adequacy decision (EU-US Data Privacy Framework), under which Google LLC is certified, and on standard contractual clauses.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest. You may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk). Send requests by e-mail to info (at) siboconsulting (dot) com. You do not need to use the contact form for this.
External services
Fonts, scripts and libraries are hosted on our own hosting. The only external service is Google reCAPTCHA on the Contact page, which protects the form against spam. When the Contact page loads, your IP address and interaction data are transmitted to Google. The legal basis is our legitimate interest in preventing abuse of the form (Art. 6(1)(f) GDPR). No other page of the website loads external services.
Let's talk about your project.
A free introductory consultation. On business days we usually reply within 24 hours with a proposed next step.