Privacy & Personal Data Protection Policy (GDPR-compliant)
(in accordance with Regulation (EU) 2016/679 – GDPR)
Data Controller
Company name: SystemThinking, spol. s r.o.
Registered address: Gronárska 8, 841 10 Bratislava – Devín
Company ID (IČO): 50415174
Legal representative: Ing. Roman Kazička, CSc.
Phone: +421 918 901 732
Email:
(hereinafter referred to as the “Controller”)
What is Personal Data?
Personal data refers to any information relating to an identified or identifiable natural person. An identifiable person is one who can be directly or indirectly identified by means of an identifier (such as name, ID number, location data, online identifier) or through characteristics linked to physical, genetic, mental, economic, cultural, or social identity.
What is Processing of Personal Data?
Processing includes any operation performed on personal data – such as collection, recording, organization, structuring, storage, alteration, retrieval, use, transfer, restriction, erasure – whether automated or manual.
The controller is not required to appoint a Data Protection Officer.
Sources and Categories of Personal Data
We obtain personal data:
-
Directly from you – e.g. during ordering or communication;
-
By tracking your behavior – e.g. browsing history, location data, wearable device data;
-
From third parties – such as public registries, business partners, marketing agencies, social networks, payment providers, or government authorities.
Legal Basis for Processing
We process your personal data based on:
-
Consent – for direct marketing (Article 6(1)(a) GDPR);
-
Contractual necessity – to fulfill agreements with you (Article 6(1)(b));
-
Legal obligation – compliance with applicable law (Article 6(1)(c)).
Purpose of Processing
We process personal data to:
-
Fulfill orders, process payments, provide services, and manage complaints;
-
Communicate with customers via social media (Facebook, Instagram);
-
Improve user experience and analyze website traffic (see Cookie Policy);
-
Ensure transparency and data accuracy (correct or delete invalid data when identified).
We do not perform automated decision-making or profiling as defined in Article 22 of the GDPR.
Social Media
-
Data published on our profiles (likes, comments, photos) is processed solely via the respective platforms.
-
Joint controllers: We may act as joint controllers with social media providers (Article 26(4) GDPR).
-
Please review the privacy policies of:
Data Retention
We retain personal data only for the duration required to fulfill legal or contractual obligations. After that, data is securely deleted in accordance with Slovak law no. 395/2002 on Archives and Registries.
Recipients of Personal Data
Recipients may include:
-
Third parties assisting with service delivery and payment processing;
-
Public authorities (where required by law).
We do not transfer personal data outside the EU or to third countries.
Data Security
We implement appropriate technical, organizational, and personnel measures to protect personal data. Only authorized persons have access to personal data.
Your Rights (under GDPR)
You have the right to:
-
Access your personal data (Article 15)
-
Rectification (Article 16)
-
Erasure – the “right to be forgotten” (Article 17)
-
Restriction of processing (Article 18)
-
Data portability (Article 20)
-
Object to processing (Article 21)
-
Withdraw consent at any time (Article 7)
-
File a complaint with the Data Protection Authority (Article 77)
How to Exercise Your Rights
You can contact us by:
-
Email:
This email address is being protected from spambots. You need JavaScript enabled to view it. ,This email address is being protected from spambots. You need JavaScript enabled to view it. -
Phone: +421 918 901 732
-
Mail: Gronárska 8, 841 10 Bratislava – Devín, Slovakia
You can also file a complaint to the Slovak Data Protection Authority:
Address: Nám. 1. mája 18, 811 06 Bratislava
Phone: +421 2 3231 3214
Email:
Validity
This Privacy Policy becomes effective upon its publication on our website.
Cookie Policy
Article I – USE OF COOKIES
-
This website uses cookies that distinguish you (the “user”) from other users. This enables us to improve our website and provide a better browsing experience.
-
This Cookie Policy explains:
-
how we process data collected via cookies and similar technologies;
-
the purposes for which we use these cookies.
-
For more information about how we process personal data collected through our website, please refer to our Terms of Use.
Article II – WHAT ARE COOKIES
Cookies are small files downloaded to your device (computer, tablet, mobile phone, etc.) that allow a website to recognize your device. They do not usually contain personally identifiable information but are used to identify a browser on a particular device.
We also use the term “cookies” to refer to other technologies that collect information similarly (e.g., pixels, beacons).
Cookies may recognize you:
-
via session cookies, which are temporary and deleted when you close your browser;
-
via persistent cookies, which remain on your device for future visits.
We use both:
-
First-party cookies – set by our website;
-
Third-party cookies – placed by services like Google Analytics.
Please note: third parties cannot access data from our cookies, nor can we access third-party cookies.
Google Consent Mode V2 (since March 6, 2024)
Version 1.0 of Google Consent Mode allowed websites to respect user preferences regarding:
-
ad_storage (ad personalization),
-
analytics_storage (analytics tracking).
If the user declines consent, data collection is disabled accordingly.
Article III – SCOPE & PURPOSE OF COOKIES
Our websites https://systemthinking.sk , https://systemthinking.xyz uses the following types of cookies:
-
Strictly Necessary Cookies: Essential for the website to function correctly. These are stored automatically and cannot be disabled. They do not identify users personally.
-
Functional Cookies: Improve usability and store your preferences.
-
Performance/Marketing Cookies: Set by advertising partners to build a profile of your interests and show relevant ads. These require consent.
Article IV – COOKIE SETTINGS
-
Only essential cookies are stored upon your first visit. Others are only stored after you accept or configure your preferences.
-
The cookie banner notifies you about our use of cookies.
-
By clicking the consent button, you accept our use of cookies as described.
-
If you consent, you allow us and third parties to process personal data via cookies as described in our Terms of Use.
-
You may withdraw consent at any time via the cookie icon on our website.
-
Withdrawal also applies to any personal data processed using these cookies.
Article V – USE OF INFORMATION
We may process your personal data collected via cookies under the following legal bases:
-
Contractual obligation – to provide services;
-
Legal obligation – such as recognizing browser settings;
-
Legitimate interest – to operate our website;
-
Consent – for analytics, functionality, and marketing.
Examples of use:
-
Visitor analysis and marketing insights,
-
Detecting fraudulent activity,
-
Performance optimization,
-
Interest-based advertising.
Article VI – CONTROL & DELETION
-
Use the cookie icon to update preferences.
-
Cookies may remain stored. You can delete them via your browser settings.
-
Settings apply per browser and device.
-
Visit browser help or www.allaboutcookies.org for more.
-
To opt-out of Google Analytics: http://tools.google.com/dlpage/gaoptout
-
Disabling all cookies may affect the site’s functionality.
Article VII – FIRST-PARTY & THIRD-PARTY COOKIES
Click “Cookie Details” in the banner to view specific cookies and their purpose.
Third-party cookies we use include:
-
Essential – for basic site operation;
-
Performance – analytics tools (e.g., Google Analytics);
-
Functional – for preferences and site features.
Article VIII – EMAIL TRACKING
Some emails may include tracking pixels or tracked links to check if they were opened or interacted with.
-
To avoid this, disable images in emails or request plain-text format.
-
You can unsubscribe via the email address listed in our Terms of Use.
Article IX – CHANGES & CONTACT
-
This policy may change. Updates will be posted on our website or emailed.
-
Changes take effect 7 days after publication or email, whichever comes first.
-
Questions? Contact us using the information in our Terms of Use.