Legal
Privacy Policy
Last updated: 10 May 2026
VisionEdge s. r. o. respects the privacy of website visitors, clients, business partners and all persons whose personal data we process. This document explains what personal data we process, for what purposes, on what legal basis, how long we retain it, who we may share it with, and what rights you have under the GDPR.
These policies apply in particular to:
- use of the website visionedge.sk,
- submitting the contact form,
- email, telephone and business communication,
- preparation of proposals and pre-contractual communication,
- provision of services to clients,
- newsletter and marketing communication, if you consent,
- technical operation, security and analytics of the website.
These policies are prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (hereinafter “GDPR”), and Act No. 18/2018 Coll. on the Protection of Personal Data.
1. Controller of Personal Data
The controller of personal data is:
VisionEdge s. r. o.
29. augusta 1503/1A
958 01 Partizánske
Slovak Republic (EU)
Company ID: 51962161
Tax ID: 2120848521
Email: hello@visionedge.sk
Web: visionedge.sk
VisionEdge s. r. o. determines the purposes and means of processing personal data and therefore acts as the controller of personal data.
The company has not designated a Data Protection Officer, as the current scope of processing does not automatically require one. For questions regarding personal data protection, please contact us at: hello@visionedge.sk
2. Basic Principles of Processing
We process personal data only in a lawful, transparent and proportionate manner. In processing, we adhere in particular to the following principles:
- we process only data we need for a specific purpose,
- we do not use personal data for purposes incompatible with the original purpose,
- we do not sell personal data to third parties,
- we use analytics cookies only after consent is given,
- we send marketing communications only on the basis of consent or another legal ground,
- we protect personal data with appropriate technical and organisational measures,
- we retain data only for the necessary period,
- when using processors, we ensure contractual and security safeguards for processing.
3. What Personal Data We Process
We process in particular personal data that you provide directly, that arises from use of the website, or that is necessary for business communication and the provision of services.
3.1 Data from the Contact Form
When you submit the contact form, we may process in particular:
- first and last name,
- company or organisation name,
- email address,
- selected area of interest,
- description of the request, process, problem or project,
- list of tools you currently use, if provided,
- indicative budget,
- preferred contact or delivery date,
- message content,
- technical data related to form submission.
3.2 Data from Business Communication
If you communicate with us as a client, potential client, company representative, supplier or business partner, we may process:
- first and last name,
- job title or position,
- company or organisation name,
- email address,
- phone number,
- content of business, project or technical communication,
- data needed for preparing a price quote,
- data contained in orders, contracts, invoices or project documentation,
- communication history.
3.3 Client Data and Project Data
When providing services in the area of AI automation, custom software, enterprise systems, web solutions or related digital services, we may also process data necessary for the implementation of a specific project.
This may include in particular:
- contact details of the client's representatives,
- data about the client's processes, systems and internal workflows,
- technical data required for designing or implementing a solution,
- access or integration credentials, where necessary for service delivery,
- data contained in materials provided by the client.
If a client provides us with personal data of their own customers, employees or other individuals as part of a project, VisionEdge s. r. o. may act as a data processor. In such cases, the scope, purpose, security measures and responsibilities of the parties will be governed by a separate agreement, data processing agreement or project documentation.
3.4 Technical Data from Website Use
When visiting the website, we may process technical data, in particular:
- IP address,
- date and time of visit,
- device type,
- browser type and version,
- operating system,
- pages visited,
- referral source,
- technical error data,
- server logs,
- data required for security, diagnostics and website operation.
This data is processed primarily through server logs, security tools, hosting infrastructure and, in the case of analytics, only after consent to analytics cookies is given.
3.5 Google Analytics Data
If you consent to analytics cookies, we may process data about website usage through Google Analytics, in particular:
- information about pages visited,
- time and duration of visit,
- referral source,
- device type,
- browser type,
- operating system,
- approximate geographic location,
- data about interaction with the website,
- identifiers stored in cookies or similar technologies.
Google Analytics is activated on the website only after consent to analytics cookies is given.
3.6 Newsletter and Marketing Data
We currently do not send any newsletter or other marketing communication. The following describes what data we would process if we launch this service in the future, and always only on the basis of your explicit consent.
If you subscribe to our newsletter or give us consent for marketing communication, we may process:
- name,
- email address,
- company name,
- preferences or area of interest,
- consent record,
- date and time of subscription,
- date and time of unsubscription,
- basic delivery, open or click statistics, where the tool used permits and where used in accordance with applicable law.
If a separate external tool is used for the newsletter in the future, information about that provider will be added to these policies or in a separate data processing notice.
3.7 Sensitive Data
We do not knowingly request special categories of personal data, such as health data, political opinions, religion, sexual life, biometric data or other sensitive data.
If you send us such data without our request, we will process it only to the extent necessary to handle the communication, protect legal claims or fulfil a legal obligation, or we will securely delete it if there is no legal basis for its processing.
4. Purposes of Processing and Legal Bases
We process your personal data for specific purposes and always on the basis of an applicable legal ground under the GDPR.
| Purpose of processing | Categories of data | Legal basis |
|---|---|---|
| Responding to a contact form inquiry | name, email, phone, company, message content, request | pre-contractual measures under Art. 6(1)(b) GDPR or legitimate interest under Art. 6(1)(f) GDPR |
| Preparing a price quote | contact data, project description, budget, timeline, technical requirements | pre-contractual measures under Art. 6(1)(b) GDPR |
| Delivering form messages via Resend | contact data, message content, technical submission data | pre-contractual measures or legitimate interest in proper delivery of communication |
| Business communication with company representatives | name, position, company, email, phone, communication history | legitimate interest under Art. 6(1)(f) GDPR |
| Providing services to a client | identification, contact, project, technical and billing data | performance of contract under Art. 6(1)(b) GDPR or legitimate interest in communication with legal entity representatives |
| Project implementation and technical support | project data, technical data, integration data, communication | performance of contract or legitimate interest in proper service delivery |
| Accounting and tax record-keeping | billing, contractual and accounting data | legal obligation under Art. 6(1)(c) GDPR |
| Website operation via hosting provider | IP address, server logs, technical data | legitimate interest under Art. 6(1)(f) GDPR |
| Website security and abuse prevention | IP address, logs, technical data, security records | legitimate interest under Art. 6(1)(f) GDPR |
| Google Analytics | analytics cookies, visit, device and behaviour data | consent under Art. 6(1)(a) GDPR |
| Newsletter and marketing communication | name, email, company, preferences, consent history | consent under Art. 6(1)(a) GDPR or other applicable legal ground |
| Protection of legal claims | contractual, business and project communication, billing data | legitimate interest under Art. 6(1)(f) GDPR |
5. Contact Form
If you submit the contact form, we use the data primarily to:
- handle your request,
- contact you back,
- understand your problem, process or project,
- prepare a proposed solution,
- prepare an indicative or binding price quote,
- arrange a consultation or next steps.
Submitting the form is voluntary. However, without providing basic contact details, we may not be able to respond to your request.
Form messages are technically delivered via Resend to the email address: hello@visionedge.sk
Resend may process technical data required for email delivery, such as sender address, recipient address, subject, message content, time of sending, message identifier and delivery logs.
6. Email and Telephone Communication
If you contact us by email or telephone, we process the data you provide during the communication.
We use this data primarily to:
- handle your request,
- conduct business communication,
- prepare a proposal,
- conclude or perform a contract,
- provide technical support,
- handle complaints or requests,
- protect legal claims.
We may retain communication for a reasonable period after it ends, particularly where it is needed to evidence agreements, protect legal claims or fulfil legal obligations.
7. Clients, Business Partners and Project Data
If you become our client, business partner or supplier, we process personal data necessary for:
- preparing and concluding a contract,
- project implementation,
- service delivery,
- communication during cooperation,
- technical support,
- invoicing,
- accounting and tax obligations,
- handling complaints or requests,
- protecting legal claims.
Within projects, technical, operational or integration data may also be processed. If a specific project requires connection to third-party tools, cloud services, AI models, API interfaces or external systems, the scope of processing, responsibilities of the parties, security measures and any data transfers will be governed by the relevant contract, project documentation or data processing agreement.
8. Processors and Recipients of Personal Data
When processing personal data, we may use trusted service providers who provide us with technical, hosting, communication, analytics, administrative, accounting or professional support.
We share personal data with third parties only to the extent necessary for the relevant purpose, on the basis of a contract, law or our legitimate interest.
Recipients or processors may include in particular:
| Provider or category | Purpose | Note |
|---|---|---|
| EXO TECHNOLOGIES spol. s r.o. / EXOHOSTING | website hosting, technical infrastructure, domain operation, server logs | provider of web hosting and related technical services |
| Google Ireland Limited / Google LLC – Google Analytics | website traffic measurement, analytics and usage statistics | used only after consent to analytics cookies is given |
| Resend / Plus Five Five, Inc. | technical delivery of emails from contact forms and system messages | form messages are delivered to hello@visionedge.sk |
| email inbox provider | receiving and managing email communication | business, client and internal communication |
| accounting and tax advisors | accounting, invoicing, tax and statutory obligations | only to the extent required by law |
| legal, technical or business advisors | protection of legal claims, professional support, dispute resolution | only to the necessary extent |
| technical and software service providers | system operations, implementations, integrations, security and support | depending on the specific project or contract |
| public authorities | fulfilling legal obligations | only where required by law |
We enter into contractual or other legal mechanisms required by the GDPR with processors who process personal data on our behalf.
9. Transfer of Personal Data Outside the EU/EEA
We aim to process personal data primarily within the European Union or the European Economic Area.
However, some technical service providers may be located or have sub-processors outside the EU/EEA, particularly in the United States. This may apply to providers such as Google Analytics or Resend.
Where personal data is transferred outside the EU/EEA, we ensure that such transfers take place only on the basis of an appropriate legal mechanism under the GDPR, in particular:
- an adequacy decision by the European Commission,
- standard contractual clauses,
- certification under the EU-U.S. Data Privacy Framework,
- a data processing agreement,
- or another lawful mechanism under the GDPR.
For specific projects that may involve additional cloud services, AI tools or external APIs, any transfers outside the EU/EEA will be addressed separately in the contract, project documentation or data processing agreement.
10. Retention of Personal Data
We retain personal data only for the period necessary to achieve a specific purpose, or for the period required by applicable law.
| Category of data | Retention period |
|---|---|
| contact form inquiries | up to 3 years from the last communication, if no contractual relationship arises |
| form messages delivered via Resend | for the period necessary for delivery and handling of the request; thereafter in accordance with the rules for business communication |
| pre-contractual communication | up to 3 years from the last communication, if no contractual relationship arises |
| business and project communication | for the duration of the cooperation and thereafter for the period necessary to protect legal claims |
| contractual documents | for the duration of the contract and thereafter generally 4 years after its termination, unless law or a dispute requires a longer period |
| billing and accounting data | in accordance with applicable accounting and tax regulations, generally 10 years |
| server logs | for a period appropriate for security, diagnostics and website operation |
| security records | for the period necessary to resolve a security incident or protect legal claims |
| Google Analytics data | in accordance with Google Analytics retention settings, up to 14 months unless a shorter period is required |
| newsletter consents | for the duration of the consent and a reasonable period after its withdrawal to demonstrate the lawfulness of processing |
| marketing communication | until consent is withdrawn, unsubscription occurs or the relevant marketing activity ends |
| data processed on the basis of consent | until consent is withdrawn, unless another legal basis for further processing exists |
After the retention period expires, we will delete, anonymise or securely archive personal data, unless further retention is required by law.
11. Security of Personal Data
We implement appropriate technical and organisational measures to protect personal data, proportionate to the nature, scope and risk of the processing.
These measures include in particular:
- restricting access to data to authorised persons only,
- use of secure access methods,
- appropriate password and access rights management,
- technical security of the website,
- protection against unauthorised access,
- use of trusted service providers,
- data minimisation,
- regular updates to technical solutions,
- access controls where appropriate,
- contractual safeguards with processors,
- handling of security incidents in accordance with the GDPR.
Despite the measures taken, it is not possible to guarantee absolute security of data transmission over the internet. We take reasonable steps to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
12. Google Analytics and Analytics Cookies
We use Google Analytics on our website to measure traffic, evaluate website usage and improve content, functionality and user experience.
We use Google Analytics only to the extent consistent with the consent given by the user.
Analytics cookies are disabled by default. Google Analytics may only load after the user has given consent to analytics cookies.
If you do not give consent, Google Analytics will not be activated for analytics purposes.
You may change or withdraw your consent at any time through the cookie settings available on the website.
When using Google Analytics, we do not enable analytics processing for advertising profiling, remarketing or personalised advertising, unless expressly stated and unless the user gives separate consent.
13. Cookies
Our website uses cookies and similar technologies. For detailed information, please see our Cookie Policy.
We use in particular the following categories of cookies:
13.1 Essential Cookies
Essential cookies are required for the basic operation of the website, security, storage of cookie preferences and technical website operation.
These cookies cannot be disabled, as the website may not function properly without them.
13.2 Analytics Cookies
We use analytics cookies to measure traffic and evaluate website usage.
We use analytics cookies only on the basis of your consent. They are disabled by default and are activated only after being permitted.
You may change or withdraw your consent to analytics cookies at any time through the cookie settings.
We do not use advertising pixels or third-party social tracking tools, unless expressly stated in our Cookie Policy or cookie settings.
14. Newsletter and Marketing Communication
We currently do not technically send any newsletter, and no marketing communication is active. The rules below will apply only after this service is launched, and always after obtaining your explicit consent.
In the future, we may send you a newsletter or other marketing communications regarding our services, news, professional content, case studies, event invitations or business offers.
We send marketing communications only if:
- you have given us explicit consent, or
- another legal ground exists in accordance with applicable law.
For newsletter purposes, we may process in particular:
- name,
- email address,
- company name,
- preferences or area of interest,
- consent record,
- date and time of subscription,
- date and time of unsubscription,
- basic delivery, open or click statistics, where available and used in accordance with applicable law.
You may withdraw your consent to receive the newsletter at any time by clicking the unsubscribe link in a marketing email or by sending a request to: hello@visionedge.sk
Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
If the newsletter is not yet technically launched, personal data for this purpose will only be processed after its activation and after obtaining the relevant user consent.
15. Automated Decision-Making and Profiling
We do not carry out automated individual decision-making that would have legal effects or a similarly significant impact on data subjects.
We do not use personal data for invasive profiling.
Analytics data from the website is used only for general traffic evaluation and website improvement, and only to the extent permitted by your consent.
16. Rights of Data Subjects
As a data subject, you have in particular the following rights under the GDPR:
16.1 Right of Access
You have the right to know whether we process personal data about you, and if so, to obtain access to such data and information about its processing.
16.2 Right to Rectification
You have the right to request correction of inaccurate personal data or completion of incomplete personal data.
16.3 Right to Erasure
You have the right to request erasure of personal data, in particular where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, where you object to processing, or where the data is processed unlawfully.
The right to erasure may not be available where further processing is required by law or is necessary for the establishment, exercise or defence of legal claims.
16.4 Right to Restriction of Processing
You have the right to request restriction of processing in cases prescribed by the GDPR, for example where you contest the accuracy of the data or the lawfulness of processing.
16.5 Right to Data Portability
Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used and machine-readable format.
16.6 Right to Object
You have the right to object to the processing of personal data based on our legitimate interest.
In such cases, we will no longer process the data unless we demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims.
16.7 Right to Withdraw Consent
Where we process data on the basis of your consent, you may withdraw it at any time.
Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
16.8 Right to Lodge a Complaint
If you believe that the processing of your personal data is contrary to the GDPR or Act No. 18/2018 Coll. on the Protection of Personal Data, you have the right to contact the supervisory authority:
Office for Personal Data Protection of the Slovak Republic
Park One Building
Námestie 1. mája 18
811 06 Bratislava
Slovak Republic
Email: statny.dozor@pdp.gov.sk
Web: dataprotection.gov.sk
17. How to Exercise Your Rights
You may exercise your rights by email at: hello@visionedge.sk
We recommend including the subject line: GDPR Request.
We will respond to your request without undue delay, and at the latest within one month of receipt.
In justified cases, in particular where a request is complex or where we receive a higher number of requests, we may extend this period by a further two months. We will inform you of any extension and the reasons for it.
If we have reasonable doubts about your identity, we may ask you for additional information necessary to verify it.
We may refuse or address a request in an appropriate manner where it is manifestly unfounded, disproportionate, repetitive or where fulfilling it is prevented by a legal obligation.
18. Children's Personal Data
Our services are not intended for children and we do not knowingly process personal data of persons under 16 years of age without the consent of a legal guardian.
If we become aware that we have processed such data without an appropriate legal basis, we will take reasonable steps to delete it.
19. Changes to These Policies
We may update these policies from time to time, in particular due to changes in legislation, technologies used, service providers, the scope of our services or methods of processing personal data.
The current version of the policies is always available on this website.
In the event of a significant change, we may also inform users in another appropriate manner.
20. Contact
If you have questions about personal data protection or wish to exercise your rights, please contact us:
VisionEdge s. r. o.
29. augusta 1503/1A
958 01 Partizánske
Slovak Republic (EU)
Email: hello@visionedge.sk
Web: visionedge.sk