EN

Privacy policy

This site has three forms: for forming a company, for taking over a company and for buying a ready-made company. Below is exactly what happens with your data.

Who processes the data

TAXAS účtovníctvo s. r. o., Ulica Jozefa Adamca 9983/24, 917 01 Trnava, Company ID 56 517 793

Contact: info@firmanaklik.sk, +421 909 166 177

What data and why

In all three forms we collect your name and e-mail address, optionally a phone number and optionally the text of your message. The other questions are optional and differ by form. When forming a company we ask what you are interested in (the guide or assistance), the name of the future company, how many of you will own it and whether the signing certificates on your ID card are activated. When taking over a company we ask which company you want to hand over (company ID or name), whether it has ever traded and whether it has unpaid liabilities. For a ready-made company we ask which company you are interested in and how soon you need it.

We obtain none of it other than by you typing or selecting it. The only thing preselected is the company choice for a ready-made company. If you clicked the button next to a specific company, that company is selected, otherwise the option „I am not sure yet, advise me“. We also attach the language of the page you sent the enquiry from, so that we know which language to reply in.

There are two purposes: to reply to your enquiry and to use the source of the visit described below to evaluate which campaign brought the enquiry. Handling the enquiry is based on Article 6(1)(b) of Regulation (EU) 2016/679: we process the data at your request before a contract is concluded. Evaluating campaigns is based on Article 6(1)(f) of Regulation (EU) 2016/679: it is our legitimate interest in knowing which advertising brings enquiries. You can object to this processing, see the section Your rights.

We do not ask for a personal ID number, date of birth or home address. They are not needed to answer the enquiry.

Where the data goes

The site and its forms run on the Vercel service, provided by Vercel Inc. (USA).

The contents of the form are sent by e-mail to our mailbox through the Resend service, which delivers the e-mail for us. Through the same service we also send you a confirmation that we have received your enquiry. The provider of Resend is Plus Five Five, Inc., San Francisco (USA). Our mailbox is operated by WebHouse, s.r.o., Paulínska 20, 917 01 Trnava, Company ID 36743852.

The enquiry is also recorded in our internal system for managing enquiries and orders. The system runs on the Vercel service (Vercel Inc.), the data is stored in a database of the Supabase service (Supabase Inc.) in a data centre in Frankfurt and only our staff have access to it. The e-mails you exchange with us are also displayed in this system.

We also record the same enquiry in a spreadsheet in Google Sheets so that we can process it and it does not get lost if the e-mail fails. The provider of that service is Google Ireland Limited.

When you check the name of your future company in the form, our server queries the Register of Legal Entities of the Statistical Office of the Slovak Republic. It sends only the name being checked, not your contact details or your IP address.

With the enquiry we also record which campaign or link brought you to the site, so that we know which campaign makes sense. The details are in the section Cookies and measurement.

After the form is sent, an internal notification also goes to us through the WhatsApp Business Cloud API so that we know about the enquiry immediately. The provider of that service is Meta Platforms Ireland Limited. The notification contains exactly this: the name of the service you are interested in (with the language code if the page was in a language other than Slovak), the time of sending, your name, your phone number and the enquiry number. Your e-mail address and the text of your message are not included. The notification goes to us, not to you, and is unrelated to the consent in the banner: it is not measurement, it is the processing of the enquiry itself.

In the internal system we are assisted by an artificial intelligence tool from Anthropic, PBC (USA). It suggests a reply or summarises the communication and processes the content of the enquiry and the e-mails in doing so. It decides nothing on its own and sends nothing, every reply is sent by a person.

Vercel, Supabase, Anthropic and Plus Five Five (Resend) have their registered offices in the USA, so the data may also be transferred outside the European Union. For Vercel, Anthropic and Resend the transfer is safeguarded by the standard contractual clauses approved by the European Commission. They are part of the data processing agreement included in the terms of these services. Google Ireland Limited (the Google Sheets spreadsheet) and Meta Platforms Ireland Limited (the WhatsApp notification) are based in Ireland, but under their own terms they may transfer data outside the European Union.

We do not pass the data from the form to any other third parties.

We keep an enquiry that did not lead to an order for 12 months from the last contact. After that we delete it from the e-mail mailbox, the spreadsheet and the internal system. If an enquiry leads to an order, we keep the data for as long as accounting and tax regulations require us to. If you want us to delete it, write to us and we will delete it.

Cookies and measurement

The site does not need measurement to work. Until you click to consent, no third-party script is loaded and nothing is stored on your device except the decision you made in the banner itself. We need to remember that so we do not ask every time you open the site.

With your consent we turn on measurement in two categories, which the banner asks about separately. Analytics means Google Analytics and serves to tell us which parts of the site people use. Marketing means the Google Ads tag, which measures whether a click on an advertisement was followed by an enquiry. The provider of both is Google Ireland Limited, which under its own terms may transfer data outside the European Union. Through the Google Ads tag Google also receives from the form the e-mail address, phone number and name you filled in. It receives them in hashed form, that is encrypted one way while still in your browser. Google uses them to match the conversion, that is the enquiry you sent, with your Google account, if you have one. This serves to measure the results of advertisements in Google Ads. Without consent to marketing the Google Ads tag does not load and Google receives none of this. Marketing also includes the Meta pixel for Facebook and Instagram. Through it Meta receives information about the pages of the site you visit and their content, for example headings and prices, about clicks on buttons and links, for example on the phone number, the e-mail address or a company in the offer, about starting to fill in the form and about sending it. From the form it also receives the e-mail address and phone number you filled in. It receives them in hashed form, that is encrypted one way while still in your browser. Meta uses them to match them with your Facebook or Instagram account, if you have one. All of this serves to measure the results of advertisements on Facebook and Instagram and to show advertisements to people who might be interested in them. The pixel is provided by Meta Platforms Ireland Limited, which under its own terms may also transfer data outside the European Union. Without consent to marketing the pixel does not load and Meta receives none of this. If you do not consent, none of these tools is started and the site works the same as before. You can withdraw consent to marketing at any time through the Privacy settings link in the footer.

When you send an enquiry, we record in it that it came from an advertisement or from another website, and we do so independently of your consent to measurement. Without consent to marketing, the source is taken only from the address of the page where you send the form: the campaign tags, that page and the website you came to it from. Nothing is stored on your device in the process. If you have consented to marketing, the browser remembers the source of the visit until you close the tab, so that it is not lost when you move to another page of the site. If you withdraw your consent to marketing, we delete the stored record. None of it is sent anywhere until you send the form. It is part of processing the enquiry itself, not tracking of your movement around the internet. With the enquiry it goes only to the spreadsheet and the internal system mentioned above.

The legal basis is your consent under Article 6(1)(a) of Regulation (EU) 2016/679. For storing data on your device it is required by Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications, in force since 1 February 2022. Consent is voluntary and you can withdraw it at any time, as easily as you gave it, through the Privacy settings link in the footer of any page. After withdrawal we delete the cookies these tools managed to store and reload the page without them.

Protection against misuse of the form

To stop automated scripts misusing the forms, we limit the number of form submissions from one connection as well as the number of name checks. To tell connections apart we use an irreversible fingerprint of the IP address, not the IP address itself. The fingerprint is kept only in the server's working memory and is not written anywhere. Only attempts from the last ten minutes count towards the limit, older ones are no longer used. We store the address itself nowhere.

Your rights

You have the right to know what data we hold about you, to ask for its correction or deletion, to object to processing and to lodge a complaint with the supervisory authority, which in Slovakia is the Office for Personal Data Protection of the Slovak Republic. Just write to us at info@firmanaklik.sk.