Effective from: 1 October 2026 Version: 1.0
This Privacy Policy applies to the website expand2slovakia.eu (the „Website“) and to the services offered through it. Personal data are processed by the following two companies (each a „Controller“ and together the „Controllers“):
AM Finanz s.r.o.
(„AM Business“)
Registered office: Zámocká 3, 811 01 Bratislava – mestská časť Staré Mesto, Slovak Republic
Company ID (IČO): 50 222 104
Tax ID (DIČ): 2120216626
VAT ID (IČ DPH): SK2120216626
Commercial register: Mestský súd Bratislava III, Section Sro, Insert No. 184430/B
Data protection contact: andras@am-business.eu
Accounting Slovakia spol. s r.o.
(„Accounting Slovakia“)
Registered office: Tallerova 4, 811 02 Bratislava – mestská časť Staré Mesto, Slovak Republic
Tax number: SK2120870015
Contact: info@accountingslovakia.sk
Through the Website, AM Finanz s.r.o. offers marketing, branding, web and digital services under the AM Business brand, and Accounting Slovakia spol. s r.o. offers accounting, company formation and related advisory services under the Accounting Slovakia brand. Each Controller is responsible for the personal data it processes in connection with the services it provides.
Where the Controllers offer a combined package of services and share personal data with each other to deliver it, they do so only to the extent necessary for that purpose. Each Controller remains responsible for its own processing, and data subjects may exercise their rights against either Controller using the contact details above.
This Policy explains how the Controllers process the personal data of website visitors, people using contact forms, people requesting a quote or consultation, registered users, customers, contractual partners and newsletter subscribers.
Processing is governed in particular by:
The Controllers process personal data lawfully, fairly and transparently. They collect only the data needed for a specific purpose, do not use data for incompatible purposes and retain them only for as long as necessary.
Data processed by the Controllers are accessible only to employees involved in the relevant purposes, who are bound by confidentiality obligations. The Controllers take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
The Controllers do not require special categories of personal data, such as data concerning health, religious or political beliefs, biometric data or data concerning sex life. Please do not enter such data in free-text fields of contact forms or order notes.
Data processed: IP address, time of visit, page visited, file requested, browser and operating system type and settings (including language), device data, referring page, server logs, security events and technical identifiers.
Purpose: operating the Website, detecting errors, information security, preventing, investigating and proving attacks and misuse.
Legal basis: legitimate interest of the Controller in the secure and reliable operation of the Website (Art. 6(1)(f) GDPR); where processing is necessary to provide a requested service, Art. 6(1)(b) GDPR.
Retention: for the shortest period necessary for technical and security purposes, according to the logging settings of the hosting and security systems. In the case of a security incident, data may be retained until the investigation and any legal proceedings are concluded.
Data processed: name, e-mail address, telephone number, company name, content of the message or request, communication history and technical data related to submitting the form.
Purpose: answering enquiries, preparing quotes and contracts, customer support and communication. Data received through contact forms are used only to contact you as requested and not for marketing purposes.
Legal basis: taking steps at the request of the data subject prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR); for general enquiries, legitimate interest of the Controller in handling requests (Art. 6(1)(f) GDPR).
Retention:
Data may be processed through a WordPress-based contact system and hosting infrastructure. E-mail messages sent by AM Finanz s.r.o. are delivered through the FORPSI e-mail infrastructure.
Data processed: name, company name, job title, e-mail address, telephone number, quotes, contracts, order and invoicing data, communication, tasks, notes and the history of the customer relationship.
Purpose: managing customer relationships, tracking quotes and projects, internal task management, sales and customer processes and automated transfer of data between systems.
Legal basis: performance and preparation of a contract (Art. 6(1)(b) GDPR); legitimate interest in efficient customer relationship management (Art. 6(1)(f) GDPR).
Retention: for the duration of the customer relationship and afterwards until the relevant limitation period expires. Documents that must be retained longer by law are kept until the mandatory retention period ends.
Systems used:
Make and Google Sheets receive only the data defined in the relevant automation. The Controller aims to ensure that only necessary data are transferred through automations.
Data processed: name, e-mail address, time and source of subscription, IP address, consent records, data on newsletter opens and link clicks, and unsubscribe status.
Purpose: sending newsletters, professional content, offers, event invitations and marketing communication, and measuring campaign performance.
Legal basis: voluntary consent of the data subject (Art. 6(1)(a) GDPR).
Subscribing to the newsletter is not a condition of purchasing or using any other service.
Retention: until consent is withdrawn or the subscriber unsubscribes. After unsubscribing, the Controller may retain the information about the unsubscription and the minimum data necessary to prove consent until the period for bringing legal claims expires, so that the person is not added to marketing communication again. Data may also be deleted at any time at the request of the data subject.
Newsletters may be sent using one or both of the following services:
Consent may be withdrawn at any time using the unsubscribe link in every newsletter. Withdrawal does not affect the lawfulness of processing carried out before it.
Analytics, advertising and external media tools that are not strictly necessary are activated only after the visitor gives consent through the consent management interface (CookieYes).
Data processed: online identifiers, cookie identifiers, approximate location derived from the IP address, device and browser data, pages visited, events and website usage data.
Purpose: visitor statistics, analysis of website usage and improving the Website.
Legal basis: consent (Art. 6(1)(a) GDPR).
Google Analytics cookies are described at https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage. You can permanently disable Google Analytics by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout.
Google Tag Manager provides technical management of the measurement and marketing tags used on the Website. Tags for Google Analytics, Google Ads, Meta and other tags managed through it are activated only after the relevant consent category has been permitted.
Purpose: measuring which purchases, contacts or other conversions resulted from Google ads, and building advertising audiences.
Legal basis: consent (Art. 6(1)(a) GDPR).
Data processed: IP address, cookie and device identifiers, pages visited, shopping cart and purchase events, referring page, browser data and other information belonging to configured events.
Purpose: measuring and optimising ads displayed on Meta platforms, remarketing and building audiences.
Legal basis: consent (Art. 6(1)(a) GDPR).
In connection with collecting event data and transmitting it to Meta, the Controller and Meta Platforms Ireland Limited may in certain cases act as joint controllers. Meta is responsible for further processing carried out by Meta.
Data processed: technical and usage data, page views, clicks, scrolling, navigation, session data and device and browser information.
Purpose: understanding how the Website is used, detecting errors and usability problems and improving the Website.
Legal basis: consent (Art. 6(1)(a) GDPR).
Content of fields containing passwords, payment data and other sensitive data is masked in Clarity.
When a YouTube video is played, Google may process technical data, IP address, cookie identifiers, video playback data and device data.
Purpose: displaying video content.
Legal basis: consent (Art. 6(1)(a) GDPR).
YouTube content is blocked, or displayed in a placeholder mode, until consent is given.
The Website may use cookies, pixels, local storage and similar technologies. Cookies are small files that are temporarily stored on your device when you visit a website. They provide additional functionality and help measure how the Website is used, but cannot on their own identify the visitor.
Accepting non-essential cookies is not mandatory. You can change your browser settings to reject all cookies or to be notified when a cookie is sent. If you refuse cookies, you may not be able to use all interactive features of the Website.
These are needed to operate the Website, the WooCommerce shopping cart and checkout, the user account, security functions and the CookieYes consent settings. Without them, basic functions of the Website may not work properly.
These relate to Google Analytics and Microsoft Clarity and are used only after consent is given.
These relate to Google Ads conversion measurement and Meta Pixel and are used only after consent is given.
These may relate to the display of YouTube videos and content from other external services. They are activated only after consent is given.
Cookie consent is managed by CookieYes Limited. CookieYes may process the selected consent category, time of choice, technical identifiers and data needed to prove consent.
You can change or withdraw your consent at any time through the CookieYes settings. The exact name, provider, purpose and validity period of each cookie are listed in the regularly updated Cookie Declaration available on the Website.
The Controllers may use the following providers or recipients, to the extent necessary:
Processors may process personal data only on the instructions of the Controller, under a data processing agreement and in accordance with applicable law. Recipients acting as independent controllers process data under their own privacy policies and their own legal obligations.
Some providers or their subcontractors may process personal data outside the European Economic Area. In particular:
Data are transferred only on the basis of safeguards required by the GDPR, in particular:
You may request further information about the safeguards used by writing to andras@am-business.eu or info@accountingslovakia.sk.
For users who have given consent, Google Ads, Meta Pixel, Google Analytics, Microsoft Clarity and newsletter systems may analyse behaviour, interests and interactions and create advertising audiences or statistical profiles.
The Controllers do not make decisions based solely on automated processing that would produce legal effects concerning the data subject or similarly significantly affect them.
Personal data generally come directly from the data subject. Some data arise automatically when the Website is used, or are obtained by the Controller from Stripe, banks or other providers involved in a transaction.
Providing the data marked as mandatory when contacting us, registering, ordering, paying and invoicing may be a contractual or statutory requirement. Without these data, the Controller may be unable to handle the request, accept the order, process the payment or issue an invoice.
Consent to the newsletter and to analytics, marketing and external media cookies is voluntary. Refusing consent does not prevent the use of the basic functions of the Website or making a purchase.
Under the conditions laid down in the GDPR, you have the right to:
These rights are not absolute. For example, a Controller cannot erase data that it is required by law to keep, and may refuse erasure where processing is required by law or where there is another legal ground or legitimate aim for processing.
Requests may be sent to:
The Controller will respond generally within one month of receiving the request. For a complex request or a large number of requests, this period may be extended by a further two months, and you will be informed of any extension. Before handling a request, the Controller may ask for additional information needed to verify your identity.
The Controllers have put in place technical, administrative and physical security measures so that personal data can be accessed and used only by authorised persons for the purposes for which they were collected. These may include in particular:
Transmission of data over the internet cannot be made completely risk-free. The Controllers nevertheless apply measures appropriate to the risks involved.
You may first contact the relevant Controller using the contact details above. You also have the right to lodge a complaint or a motion to initiate proceedings with the supervisory authority, including if you believe that a personal data breach has occurred or is imminent:
Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky) Galvaniho Business Centrum II Galvaniho 7/B 821 04 Bratislava Slovak Republic Website: dataprotection.gov.sk
You also have the right to apply to the competent court, including the court of your place of residence.
The Controllers may amend this Policy if legislation, the operation of the Website, the providers used or the processing procedures change. The current version is always published on the Website. In the case of a material change, a Controller may also provide a separate notice appropriate to the circumstances.
AM Finanz s.r.o. Zámocká 3, 811 01 Bratislava Company ID: 50 222 104 • Tax ID: 2120216626
Accounting Slovakia spol. s r.o. Tallerova 4, 811 02 Bratislava Tax number: SK2120870015