Legal

Privacy policy

This policy explains what personal data ECORTIQ s.r.o. collects, why we process it, and the rights you have over it. ECORTIQ s.r.o. is the data controller for the processing described here. Last updated in 2026.

Little data, kept short

We collect what you send us through the contact form plus basic, aggregate analytics. Nothing more.

No selling, no ad tracking

We do not sell personal data and we run no advertising or cross-site tracking cookies on this site.

GDPR rights apply

You can ask for access, correction, or deletion, and complain to the Slovak supervisory authority.

At a glance

ControllerECORTIQ s.r.o.
RegisteredSlovakia (EU)
StudioMlynske nivy 5, Bratislava
Contacthello@ecortiq.com
FrameworkEU GDPR and Slovak Act 18/2018
Updated2026

Section 1

Who we are and how to contact us

This site is operated by ECORTIQ s.r.o., a systems engineering studio registered in Slovakia. Our studio is at Mlynske nivy 5, Bratislava, Slovakia. For any question about this policy, or to make a data protection request, email us at hello@ecortiq.com or write to us at the studio address above.

We have not appointed a statutory Data Protection Officer, because we are not required to under Article 37 of the GDPR. Your request still reaches a person on our team who is accountable for how we handle personal data, and we treat these requests seriously.


Section 2

What data we collect

We keep the amount of personal data we hold deliberately small. In practice it falls into two groups.

  • Details you send through the contact formYour name, work email, and optionally a company name, project type, and budget range, together with the message you write. These are the details needed to answer your enquiry.
  • Basic analytics about the visitAggregate, privacy-friendly measures such as which pages were viewed and roughly where in the world the visit came from. We do not build advertising profiles and we do not follow you across other sites.

We do not ask for and do not want special category data (for example health, political, or biometric data). Please do not include it in a contact message.


Section 3

Why we process it and the legal basis

Under the GDPR we must have a lawful basis for each purpose. The table below sets out what we do with your data and the basis we rely on.

Purpose Data used Legal basis (GDPR Article 6)
Reply to your enquiry Contact form details Steps taken at your request before a contract, Article 6(1)(b)
Run and improve the site Aggregate analytics Our legitimate interest in a working site, Article 6(1)(f)
Keep records and meet obligations Correspondence, contract data Legal obligation and legitimate interest, Article 6(1)(c) and (f)

Where we rely on legitimate interest, we have weighed that interest against your rights and freedoms. You can object to that processing at any time using the contact details above.


Section 4

How long we keep it

We hold personal data only as long as there is a clear reason to. When the reason ends, we delete it or make it anonymous.

Contact enquiriesUp to 24 months after last contact
Client contract recordsAs required by Slovak law after the engagement
Aggregate analyticsRetained in aggregate, not tied to you

If an enquiry becomes an engagement, the related records move into our normal client records and are kept for the period Slovak accounting and tax law requires.


Section 5

Who we share it with

We do not sell personal data, and we do not trade or rent it to anyone. We share data only with a small set of service providers who help us run the studio, and only for the purpose they were engaged for. These providers act as processors on our written instructions.

  • Hosting and infrastructureThe providers that serve this site and store our email and records.
  • AnalyticsThe service that produces the aggregate visit measures described above.
  • Professional advisersAccountants or lawyers, where a legal or contractual matter requires it.

We may also disclose data where the law compels us to, for example in response to a valid order from a competent authority. We tell you about such a request unless we are prohibited from doing so.


Section 6

International transfers

We prefer to keep processing inside the European Economic Area. Where a provider processes data outside the EEA, we make sure an approved safeguard is in place before the transfer, such as an adequacy decision from the European Commission or the Standard Contractual Clauses, together with any extra measures the transfer needs.

If you would like to know where a particular piece of data is processed, ask us and we will tell you what applies to your case.


Section 7

Your rights and how to exercise them

Under EU law you have a set of rights over your personal data. You can exercise any of them by emailing hello@ecortiq.com. We respond within one month, and we do not charge for a normal request.

You can ask for a copy of the personal data we hold about you, and for the data you gave us in a common, machine-readable format so you can move it elsewhere.

You can have inaccurate data corrected, and you can ask us to delete data where we no longer have a valid reason to keep it.

You can ask us to pause processing while a dispute is resolved, and you can object to processing we base on legitimate interest.

Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect processing we carried out before you withdrew it.

To protect your data, we may need to confirm your identity before we act on a request. We will only ask for what we need to be reasonably sure it is you.


Section 8

Cookies

This site uses no advertising cookies and no cross-site tracking cookies. We do not run third-party ad networks, and we do not build a profile of you for marketing.

We use only what is needed for the site to work and, where present, privacy-friendly analytics that measure visits in aggregate. Where any cookie is not strictly necessary, we will ask for your agreement before it is set. You can also clear or block cookies in your browser at any time.

No ad cookies No cross-site tracking No data sale Aggregate analytics only

Section 9

How to reach the supervisory authority

If you are not satisfied with how we have handled your data, you can complain to the Slovak supervisory authority, the Office for Personal Data Protection of the Slovak Republic (Urad na ochranu osobnych udajov Slovenskej republiky). It supervises data protection under the GDPR and the Slovak Act No. 18/2018 on personal data protection.

We would still appreciate the chance to put things right first, so please consider contacting us at hello@ecortiq.com before you file a complaint. You retain the right to complain to the authority whether or not you contact us.


Section 10

Changes to this policy

We update this policy when our practices change or the law requires it. The date at the top of the page shows when it was last revised. When a change is significant, we make the update clear rather than quietly editing the text.

Current version, last updated in 2026

Make a data request

Exercise a right or ask a question

Email us and a person on our team, not an automated queue, will handle it. We reply within one month, usually sooner.