PRIVACY NOTICE
PRIVACY NOTICE
Effective from 10 November 2026
This notice explains how Shternberg s. r. o. (“Shternberg”) handles personal data when you visit shternberg.sk, use its contact form or write to Shternberg by e-mail.
1. Controller
The controller of your personal data is Shternberg s. r. o., Michalská 9, 811 01 Bratislava, Slovak Republic, IČO 56183003, registered in the Commercial Register of Mestský súd Bratislava III, section Sro, insert no. 177576/B.
E-mail: privacy@shternberg.sk
Shternberg has not appointed a data protection officer, as the GDPR does not require one for its activities. Please send any questions about your data directly to privacy@shternberg.sk.
2. Personal data Shternberg processes
Contact form. Your name, e-mail address and the content of your message. No phone number or company name is required.
E-mail. If you write to Shternberg directly, your e-mail address, name, the content of your message and any attachments.
Communication that follows. Notes from calls or meetings and correspondence about a possible project, such as your role, company and the process you want to automate.
Website visits. Shternberg uses privacy-friendly analytics that work without cookies and show only aggregated statistics, such as page views, referring sites and country. No visitor profiles are created and IP addresses are not stored. The website host keeps short technical logs (for example IP address, browser type and time of access) to run the site securely.
Shternberg does not ask for special categories of personal data, such as health data. Please do not include them in your message. The website and services are not intended for people under 16.
3. Purposes and legal bases
Providing your data is voluntary, but without contact details Shternberg cannot reply to you.
Replying to an enquiry, discussing a process, preparing a proposal: steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR.
Delivering an agreed project: performance of a contract, Art. 6(1)(b) GDPR.
Replying to other messages (general questions, invitations): legitimate interest in answering communication received, Art. 6(1)(f) GDPR.
Operating and securing the website and the contact form, including spam protection: legitimate interest in a secure website, Art. 6(1)(f) GDPR.
Aggregated website statistics without cookies: legitimate interest in understanding how the website is used, Art. 6(1)(f) GDPR.
Keeping accounting and tax records when a contract is concluded: legal obligation under Act No. 431/2002 Coll. on Accounting and tax law, Art. 6(1) point c GDPR.
Establishing, exercising or defending legal claims: legitimate interest, Art. 6(1)(f) GDPR.
Where processing is based on legitimate interest, you have the right to object to it (section 7).
Shternberg uses an AI tool to help prepare draft replies to enquiries. A person reviews and approves every reply before it is sent. No decision with legal or similarly significant effects is made about you by automated means.
4. Cookies and analytics
Shternberg.sk uses only cookies and similar technologies that are strictly necessary for the website and the contact form to work. It uses no advertising, remarketing or tracking cookies, so no cookie banner is shown.
Website statistics come from Plausible Analytics, which does not use cookies, does not store IP addresses and keeps visitor data in the EU.
If Shternberg adds a tool that needs your consent, such as embedded videos, this notice will be updated and you will be asked for consent before that tool runs.
5. Who receives your data
Shternberg does not sell your data. It shares it only with providers that help run the website, communication and project work, and only to the extent they need. These providers process data on Shternberg’s behalf under data processing terms.
Websupport s. r. o. (domain, hosting, e-mail): Slovakia; data stored in the EU.
Framer B.V. (website hosting and contact form): Netherlands; transfers outside the EEA under the EU-US Data Privacy Framework or standard contractual clauses.
n8n GmbH (processing contact form submissions): Germany; data hosted in the EU.
Notion Labs, Inc. (record of enquiries): USA; transfers under the EU-US Data Privacy Framework and standard contractual clauses.
OpenAI Ireland Ltd (AI tool for drafting replies, approved by a person before sending): Ireland; transfers outside the EEA under standard contractual clauses.
Plausible Insights OÜ (cookieless website statistics): Estonia; data stored in the EU.
Shternberg may also disclose data to public authorities where the law requires it. If external collaborators join a project, they receive only the data needed for it and are bound by confidentiality.
6. How long data is kept
After these periods the data is deleted or anonymised.
Enquiries, form messages and e-mail communication: 3 years from the last communication.
Data related to a concluded contract: for the duration of the contract and the statutory limitation period after it ends.
Accounting documents, including invoices: 10 years following the year they relate to, as required by the Slovak Accounting Act.
Technical website logs: for a short period set by the hosting provider.
Aggregated website statistics: contain no personal data.
7. Your rights
You have the right to:
access your data and receive a copy of it;
have inaccurate or incomplete data corrected;
have your data erased when it is no longer needed or you have withdrawn consent;
restrict processing, for example while the accuracy of the data is being checked;
data portability for data you provided on the basis of consent or a contract;
object to processing based on legitimate interest;
withdraw consent at any time, without affecting processing carried out before the withdrawal.
To exercise your rights, write to privacy@shternberg.sk or to the registered address. Shternberg replies without undue delay and within one month at the latest.
If you believe your data is processed unlawfully, you can file a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
8. Security
Shternberg protects personal data with appropriate technical and organisational measures: encrypted connections (HTTPS), password-protected accounts with two-factor authentication, and access limited to the people who need it.
9. Changes and contact
Shternberg updates this notice when the way it handles data or the law changes. The current version is always published on shternberg.sk with its effective date.
Contact: Shternberg s. r. o., Michalská 9, 811 01 Bratislava, privacy@shternberg.sk
This notice explains how Shternberg s. r. o. (“Shternberg”) handles personal data when you visit shternberg.sk, use its contact form or write to Shternberg by e-mail.
1. Controller
The controller of your personal data is Shternberg s. r. o., Michalská 9, 811 01 Bratislava, Slovak Republic, IČO 56183003, registered in the Commercial Register of Mestský súd Bratislava III, section Sro, insert no. 177576/B.
E-mail: privacy@shternberg.sk
Shternberg has not appointed a data protection officer, as the GDPR does not require one for its activities. Please send any questions about your data directly to privacy@shternberg.sk.
2. Personal data Shternberg processes
Contact form. Your name, e-mail address and the content of your message. No phone number or company name is required.
E-mail. If you write to Shternberg directly, your e-mail address, name, the content of your message and any attachments.
Communication that follows. Notes from calls or meetings and correspondence about a possible project, such as your role, company and the process you want to automate.
Website visits. Shternberg uses privacy-friendly analytics that work without cookies and show only aggregated statistics, such as page views, referring sites and country. No visitor profiles are created and IP addresses are not stored. The website host keeps short technical logs (for example IP address, browser type and time of access) to run the site securely.
Shternberg does not ask for special categories of personal data, such as health data. Please do not include them in your message. The website and services are not intended for people under 16.
3. Purposes and legal bases
Providing your data is voluntary, but without contact details Shternberg cannot reply to you.
Replying to an enquiry, discussing a process, preparing a proposal: steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR.
Delivering an agreed project: performance of a contract, Art. 6(1)(b) GDPR.
Replying to other messages (general questions, invitations): legitimate interest in answering communication received, Art. 6(1)(f) GDPR.
Operating and securing the website and the contact form, including spam protection: legitimate interest in a secure website, Art. 6(1)(f) GDPR.
Aggregated website statistics without cookies: legitimate interest in understanding how the website is used, Art. 6(1)(f) GDPR.
Keeping accounting and tax records when a contract is concluded: legal obligation under Act No. 431/2002 Coll. on Accounting and tax law, Art. 6(1)(c) GDPR.
Establishing, exercising or defending legal claims: legitimate interest, Art. 6(1)(f) GDPR.
Where processing is based on legitimate interest, you have the right to object to it (section 7).
Shternberg uses an AI tool to help prepare draft replies to enquiries. A person reviews and approves every reply before it is sent. No decision with legal or similarly significant effects is made about you by automated means.
4. Cookies and analytics
Shternberg.sk uses only cookies and similar technologies that are strictly necessary for the website and the contact form to work. It uses no advertising, remarketing or tracking cookies, so no cookie banner is shown.
Website statistics come from Plausible Analytics, which does not use cookies, does not store IP addresses and keeps visitor data in the EU.
If Shternberg adds a tool that needs your consent, such as embedded videos, this notice will be updated and you will be asked for consent before that tool runs.
5. Who receives your data
Shternberg does not sell your data. It shares it only with providers that help run the website, communication and project work, and only to the extent they need. These providers process data on Shternberg’s behalf under data processing terms.
Websupport s. r. o. (domain, hosting, e-mail): Slovakia; data stored in the EU.
Framer B.V. (website hosting and contact form): Netherlands; transfers outside the EEA under the EU-US Data Privacy Framework or standard contractual clauses.
n8n GmbH (processing contact form submissions): Germany; data hosted in the EU.
Notion Labs, Inc. (record of enquiries): USA; transfers under the EU-US Data Privacy Framework and standard contractual clauses.
OpenAI Ireland Ltd (AI tool for drafting replies, approved by a person before sending): Ireland; transfers outside the EEA under standard contractual clauses.
Plausible Insights OÜ (cookieless website statistics): Estonia; data stored in the EU.
Shternberg may also disclose data to public authorities where the law requires it. If external collaborators join a project, they receive only the data needed for it and are bound by confidentiality.
6. How long data is kept
After these periods the data is deleted or anonymised.
Enquiries, form messages and e-mail communication: 3 years from the last communication.
Data related to a concluded contract: for the duration of the contract and the statutory limitation period after it ends.
Accounting documents, including invoices: 10 years following the year they relate to, as required by the Slovak Accounting Act.
Technical website logs: for a short period set by the hosting provider.
Aggregated website statistics: contain no personal data.
7. Your rights
You have the right to:
access your data and receive a copy of it;
have inaccurate or incomplete data corrected;
have your data erased when it is no longer needed or you have withdrawn consent;
restrict processing, for example while the accuracy of the data is being checked;
data portability for data you provided on the basis of consent or a contract;
object to processing based on legitimate interest;
withdraw consent at any time, without affecting processing carried out before the withdrawal.
To exercise your rights, write to privacy@shternberg.sk or to the registered address. Shternberg replies without undue delay and within one month at the latest.
If you believe your data is processed unlawfully, you can file a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
8. Security
Shternberg protects personal data with appropriate technical and organisational measures: encrypted connections (HTTPS), password-protected accounts with two-factor authentication, and access limited to the people who need it.
9. Changes and contact
Shternberg updates this notice when the way it handles data or the law changes. The current version is always published on shternberg.sk with its effective date.
Contact: Shternberg s. r. o., Michalská 9, 811 01 Bratislava, privacy@shternberg.sk