Last update: 03/15/2026
INTRODUCTION
We respect your privacy and promise to protect your personal data. This Privacy Policy explains how we collect, use, store, and protect your data according to: — The General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — Czech Republic Act No. 110/2019 Coll. on personal data protection — Slovak Republic Act No. 18/2018 Coll. on personal data protection — ePrivacy Directive 2002/58/EC (regarding cookies)
PERSONAL DATA CONTROLLER
The personal data controller (správce / prevádzkovateľ) is the person who decides why and how personal data is processed.
Website operator (OSVČ - Czech self-employed status): Name: Skoblej Vladyslav IČO: 23409797 DIČ: 0009231497 Address: Uralská 689/7, 160 00 Praha 6 – Bubeneč, Česká republika E-mail: support@kompas-slovakia.com
A Data Protection Officer (DPO) has not been appointed because the scope and nature of personal data processing do not require one, according to Article 37 of GDPR.
WHAT DATA WE COLLECT
3.1 Data you give us directly
If you choose to contact us or subscribe to our newsletter, we may collect: — First and last name (if you provide it willingly) — E-mail address (if you provide it willingly) — Phone number (if you provide it willingly) — Postal address (if you provide it willingly) — Other information you willingly provide in a contact form
3.2 Data collected automatically
When you visit the website, certain data is collected automatically using cookies and analytics tools: — IP address — Type and version of web browser — Operating system — Referrer page — Time and duration of visit — Pages viewed — Interactions on the site (via analytics tools) — Geographic location (based on IP address)
PURPOSES OF DATA PROCESSING
Your data is used for these purposes: — Providing and improving website content — Analyzing user behavior and traffic (Google Analytics 4, Vercel Analytics) — Behavioral marketing and retargeting (Meta Pixel) — Communicating with you if you subscribe to our newsletter — Answering your questions and messages — Ensuring website security and preventing misuse — Complying with legal requirements
LEGAL BASIS FOR PROCESSING
a) Your consent (GDPR Art. 6(1)(a)) — For cookies and tracking technologies — For newsletter subscription — For behavioral marketing (Meta Pixel)
b) Legitimate interests (GDPR Art. 6(1)(f)) — For analyzing traffic and improving the website — For website security
c) Performance of a contract (GDPR Art. 6(1)(b)) — If you have an account or use our services
d) Legal obligation (GDPR Art. 6(1)(c)) — To follow laws and regulations
THIRD PARTIES AND THEIR ACCESS TO YOUR DATA
Your data may be shared with the following third parties for processing:
6.1 Google Analytics 4 Service: Analysis of traffic and user behavior Provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland Processing: Google collects data about user behavior. GA4 uses an event-based model and does not store full IP addresses. Legal basis for transfer to the USA: EU-US Data Privacy Framework (adequacy decision of July 10, 2023) Privacy Policy: https://policies.google.com/privacy Settings: https://myaccount.google.com/
6.2 Meta Pixel (Facebook Pixel) Service: Behavioral tracking and retargeting Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 AF30, Ireland Processing: Meta Pixel tracks your interactions on the site for retargeting and ad optimization. Legal basis for transfer to the USA: EU-US Data Privacy Framework Privacy Policy: https://www.facebook.com/privacy/explanation Opt-out: https://www.facebook.com/settings?tab=ads Off-Facebook Activity: https://www.facebook.com/off_facebook_activity/
6.3 Vercel Analytics Service: Website performance data and analytics Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA Processing: Vercel collects website performance and analytics data. Legal basis for transfer to the USA: Standard Contractual Clauses (SCC) Privacy Policy: https://vercel.com/legal/privacy-policy
6.4 Hosting Your data may be stored by our hosting provider (Vercel), which provides the technical infrastructure for the website.
COOKIES AND TRACKING TECHNOLOGIES
7.1 What are cookies? Cookies are small text files stored on your device. They are used to remember information about your visit and preferences.
7.2 Types of cookies we use
A) Necessary cookies (required, no consent needed) These cookies are essential for the website to function and cannot be turned off: — Session ID — to keep your session active — Security tokens — to protect against CSRF attacks — Cookie settings — to save your consent choice
B) Analytics cookies (require consent) We use Google Analytics 4 and Vercel Analytics: — _ga — main Google Analytics identifier (expires: 2 years) — _ga* — GA4 session identifier — This data helps us understand how users move around the site and which content is most popular
C) Marketing cookies (require consent) Meta Pixel and similar technologies: — _fbp — Meta Pixel cookie (expires: 90 days) — Allows us to show you relevant ads on social media — Helps measure the effectiveness of advertising campaigns
7.3 Cookie banner and consent mechanism When you first visit the site, you will see a cookie banner with options to: — "Accept all" — enable all cookie types — "Reject all" — use only necessary cookies — "Manage settings" — choose specific cookie categories You can change your settings at any time.
7.4 Managing cookies in your browser You can also manage cookies through your web browser settings. Please note that blocking cookies may affect the website's functionality.
DATA RETENTION PERIODS
— Analytics data: up to 14 months (default GA4 setting) — Data from forms: 3 years or until consent is withdrawn — Meta Pixel data: according to Meta's policy (usually 180 days) — Newsletter data: until you unsubscribe — Log files: usually 90 days — Contact form messages: 3 years
YOUR RIGHTS UNDER GDPR
9.1 Right of access (GDPR Art. 15) You have the right to access your personal data and information about how it is processed.
9.2 Right to rectification (GDPR Art. 16) If your data is incorrect or incomplete, you have the right to have it corrected or completed.
9.3 Right to erasure (GDPR Art. 17 — "Right to be forgotten") You have the right to request the deletion of your personal data if: — The data is no longer needed for the purposes it was collected for — You withdraw your consent — You object to the processing — The data was processed unlawfully
9.4 Right to restrict processing (GDPR Art. 18) You can request that the processing of your data be restricted under certain conditions.
9.5 Right to data portability (GDPR Art. 20) You have the right to receive your data in a common, machine-readable format (CSV, JSON, etc.).
9.6 Right to object (GDPR Art. 21) You have the right to object to the processing of your data for: — Marketing purposes — Retargeting (Meta Pixel) — Profiling
9.7 Right to withdraw consent You have the right to withdraw your consent for data processing at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.
9.8 How to exercise your rights To exercise your rights, please contact the website operator: E-mail: support@kompas-slovakia.com Address: Uralská 689/7, 160 00 Praha 6 – Bubeneč, Česká republika
Your request will be processed without undue delay, within 30 days at the latest.
DATA SECURITY
The security of your data is our priority. We use the following protective measures: — HTTPS encryption for all connections (TLS 1.2+) — Secure servers on the Vercel platform — Regular updates and maintenance — Limited data access only for authorized personnel — Firewall and security protocols
INTERNATIONAL DATA TRANSFERS
Your data may be transferred outside the European Economic Area (EEA), specifically to the USA: — Google (USA) — Google Analytics 4 — Meta (USA) — Meta Pixel — Vercel (USA) — Hosting
For transfers to the USA, we rely on: — EU-US Data Privacy Framework — an adequacy decision by the European Commission dated July 10, 2023 (for Google and Meta, who are certified participants) — Standard Contractual Clauses (SCC) — for providers not covered by the DPF
CHILDREN'S PRIVACY
Our website is not intended for individuals under 16 years of age. If we become aware that we have collected data from someone under 16 without the consent of a legal guardian, we will delete that data immediately.
DATA RECIPIENTS
Your data may be received by: — Google Ireland Limited — Meta Platforms Ireland Limited — Vercel Inc. — Hosting and technical support providers — Public authorities (if required by law)
CONTACT AND COMPLAINTS
You have the right to file a complaint with a supervisory authority for personal data protection. Depending on your location, you can contact:
Czech Republic: Úřad pro ochranu osobních údajů (ÚOOU - Office for Personal Data Protection) Pplk. Sochora 27, 170 00 Praha 7, Česká republika Tel.: +420 234 665 111 E-mail: posta@uoou.cz Web: https://www.uoou.cz
Slovak Republic: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic) Hraničná 12, 820 07 Bratislava 27, Slovenská republika Tel.: +421 2 3231 3214 E-mail: statny.dozor@pdp.gov.sk Web: https://dataprotection.gov.sk
According to GDPR, you have the right to lodge a complaint with a supervisory authority in the country of your habitual residence, place of work, or place of alleged infringement.
POLICY CHANGES
This Privacy Policy may be changed. The latest version is always available on the website. In case of significant changes, we will inform you by e-mail or by an announcement on the website.
GDPR COMPLIANCE
This site meets the following GDPR requirements: — Clear information about data processing (this Policy) — Explicit consent for marketing and analytics (cookie banner) — Right to object and delete data — Mechanisms for exercising rights (access, rectification, erasure) — Data security and protection — Information about third parties (Google, Meta, Vercel) — Data retention periods — International data transfers with appropriate safeguards — Information about supervisory authorities in the Czech Republic and Slovakia