Last updated: 03/15/2026
INTRODUCTION
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with: — The General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — Act No. 110/2019 Coll. of the Czech Republic on personal data protection — Act No. 18/2018 Coll. of the Slovak Republic on personal data protection — The ePrivacy Directive 2002/58/EC (regarding cookies)
PERSONAL DATA CONTROLLER
The personal data controller (správce / prevádzkovateľ) is the entity that determines the purposes and means of processing personal data.
Website Operator (OSVČ): Name: Skoblej Vladyslav IČO: 23409797 DIČ: 0009231497 Address: Uralská 689/7, 160 00 Praha 6 – Bubeneč, Česká republika E-mail: support@kompas-slovakia.com
A Data Protection Officer (DPO) has not been appointed, as the scope and nature of personal data processing do not require such an appointment under Article 37 of the GDPR.
WHAT DATA WE COLLECT
3.1 Data provided directly by you
If you choose to contact us or subscribe to our newsletter, we may collect: — First and last name (if voluntarily provided) — Email address (if voluntarily provided) — Phone number (if voluntarily provided) — Postal address (if voluntarily provided) — Other information you voluntarily provide in a contact form
3.2 Data collected automatically
When you visit the site, certain data is automatically collected using cookies and analytics tools: — IP address — Web browser type and version — Operating system — Referrer page — Time and duration of visit — Pages viewed — Interactions on the site (via analytics tools) — Geographic location (based on IP address)
PURPOSES OF DATA PROCESSING
Your data is used for the following purposes: — Providing and improving site content — Analyzing user behavior and traffic (Google Analytics 4, Vercel Analytics) — Behavioral marketing and retargeting (Meta Pixel) — Communicating with you if you subscribe to our newsletter — Responding to your questions and messages — Ensuring site security and preventing abuse — Complying with legal requirements
LEGAL BASIS FOR PROCESSING
a) Your consent (GDPR Art. 6(1)(a)) — For cookies and tracking technologies — For newsletter subscription — For behavioral marketing (Meta Pixel)
b) Legitimate interests (GDPR Art. 6(1)(f)) — For traffic analysis and site improvement — For site security
c) Performance of a contract (GDPR Art. 6(1)(b)) — If you have an account or use our services
d) Legal obligation (GDPR Art. 6(1)(c)) — To comply with laws and regulations
THIRD PARTIES AND THEIR ACCESS TO YOUR DATA
Your data may be shared with the following third parties for processing:
6.1 Google Analytics 4 Service: Analysis of traffic and user behavior Provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland Processing: Google collects data on user behavior. GA4 uses an event-based model and does not store full IP addresses. Legal basis for transfer to the US: EU-US Data Privacy Framework (adequacy decision of July 10, 2023) Privacy Policy: https://policies.google.com/privacy Settings: https://myaccount.google.com/
6.2 Meta Pixel (Facebook Pixel) Service: Behavioral tracking and retargeting Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 AF30, Ireland Processing: Meta Pixel tracks your interactions on the site for retargeting and ad optimization purposes. Legal basis for transfer to the US: EU-US Data Privacy Framework Privacy Policy: https://www.facebook.com/privacy/explanation Opt-out: https://www.facebook.com/settings?tab=ads Off-Facebook Activity: https://www.facebook.com/off_facebook_activity/
6.3 Vercel Analytics Service: Site performance data and analytics Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA Processing: Vercel collects site performance and analytics data. Legal basis for transfer to the US: Standard Contractual Clauses (SCC) Privacy Policy: https://vercel.com/legal/privacy-policy
6.4 Hosting Your data may be stored by our hosting provider (Vercel), which provides the technical infrastructure for the site.
COOKIES AND TRACKING TECHNOLOGIES
7.1 What are cookies? Cookies are small text files stored on your device. They are used to remember information about your visit and preferences.
7.2 Types of cookies we use
A) Necessary cookies (required, no consent needed) These cookies are essential for the site to function and cannot be switched off: — Session ID — to maintain your session — Security tokens — to protect against CSRF attacks — Cookie settings — to save your consent
B) Analytics cookies (require consent) We use Google Analytics 4 and Vercel Analytics: — _ga — the main Google Analytics identifier (expires: 2 years) — _ga* — GA4 session identifier — This data helps us understand how users navigate the site and which content is most popular
C) Marketing cookies (require consent) Meta Pixel and similar technologies: — _fbp — Meta Pixel cookie (expires: 90 days) — Allows us to show you relevant ads on social media — Helps measure the effectiveness of advertising campaigns
7.3 Cookie banner and consent mechanism When you first visit the site, you will see a cookie banner with options to: — "Accept all" — enable all cookie types — "Reject all" — use only necessary cookies — "Manage settings" — choose specific cookie categories You can change your settings at any time.
7.4 Managing cookies in your browser You can also manage cookies through your web browser settings. Please note that blocking cookies may affect the functionality of the site.
DATA RETENTION PERIODS
— Analytics data: up to 14 months (GA4 default setting) — Data from forms: 3 years or until consent is withdrawn — Meta Pixel data: according to Meta's policy (usually 180 days) — Newsletter: until you unsubscribe — Log files: typically 90 days — Contact form messages: 3 years
YOUR RIGHTS UNDER GDPR
9.1 Right of access (GDPR Art. 15) You have the right to access your personal data and information about its processing.
9.2 Right to rectification (GDPR Art. 16) If your data is incorrect or incomplete, you have the right to have it corrected or completed.
9.3 Right to erasure (GDPR Art. 17 – "Right to be forgotten") You have the right to request the deletion of your personal data if: — The data is no longer needed for the purposes of processing — You have withdrawn your consent — You object to the processing — The data has been unlawfully processed
9.4 Right to restrict processing (GDPR Art. 18) You can request the restriction of the processing of your data under certain conditions.
9.5 Right to data portability (GDPR Art. 20) You have the right to receive your data in a commonly used, machine-readable format (CSV, JSON, etc.).
9.6 Right to object (GDPR Art. 21) You have the right to object to the processing of your data for: — Marketing purposes — Retargeting (Meta Pixel) — Profiling
9.7 Right to withdraw consent You have the right to withdraw your consent for data processing at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
9.8 How to exercise your rights To exercise your rights, please contact the site operator: E-mail: support@kompas-slovakia.com Address: Uralská 689/7, 160 00 Praha 6 – Bubeneč, Česká republika
Your request will be processed without undue delay, no later than within 30 days.
DATA SECURITY
The security of your data is our priority. We use the following protective measures: — HTTPS encryption for all connections (TLS 1.2+) — Secure servers on the Vercel platform — Regular updates and maintenance — Limited data access only to authorized personnel — Firewall and security protocols
INTERNATIONAL DATA TRANSFERS
Your data may be transferred outside the European Economic Area (EEA), particularly to the USA: — Google (USA) — Google Analytics 4 — Meta (USA) — Meta Pixel — Vercel (USA) — Hosting
For transfers to the USA, we rely on: — EU-US Data Privacy Framework — an adequacy decision by the European Commission dated July 10, 2023 (for Google and Meta, who are certified participants) — Standard Contractual Clauses (SCC) — for providers not covered by the DPF
CHILDREN'S PRIVACY
Our site is not intended for individuals under 16 years of age. If we become aware that we have collected data from a person under 16 without the consent of a legal guardian, we will delete this data immediately.
DATA RECIPIENTS
Your data may be received by: — Google Ireland Limited — Meta Platforms Ireland Limited — Vercel Inc. — Hosting and technical support providers — Public authorities (if required by law)
CONTACT AND COMPLAINTS
You have the right to lodge a complaint with a supervisory authority for personal data protection. Depending on your location, you can contact:
Czech Republic: Úřad pro ochranu osobních údajů (ÚOOU) Pplk. Sochora 27, 170 00 Praha 7, Česká republika Tel.: +420 234 665 111 E-mail: posta@uoou.cz Web: https://www.uoou.cz
Slovak Republic: Úrad na ochranu osobných údajov Slovenskej republiky Hraničná 12, 820 07 Bratislava 27, Slovenská republika Tel.: +421 2 3231 3214 E-mail: statny.dozor@pdp.gov.sk Web: https://dataprotection.gov.sk
Under GDPR, you have the right to lodge a complaint with a supervisory authority in the country of your habitual residence, place of work, or place of alleged infringement.
POLICY CHANGES
This Privacy Policy may be changed. The latest version is always available on the website. In case of significant changes, we will inform you by e-mail or by an announcement on the website.
GDPR COMPLIANCE
This website meets the following GDPR requirements: — Clear information about data processing (this Policy) — Explicit consent for marketing and analytics (cookie banner) — Right to object and delete data — Mechanisms for exercising rights (access, rectification, erasure) — Data security and protection — Information about third parties (Google, Meta, Vercel) — Data retention periods — International data transfers with appropriate safeguards — Information about supervisory authorities in the Czech Republic and Slovakia