Privacy Policy

Effective date: [1.1.2026]

1. Controller

Alpen Agency s. r. o.
Saleziánov 4
071 01 Michalovce
Slovak Republic
Email: office@alpen.agency

2. Data Protection Contact

For all privacy-related requests, please contact:
office@alpen.agency

If we are required to appoint a Data Protection Officer (DPO) or voluntarily appoint one, the contact details will be published here.

3. Personal Data We Process

3.1 Website access data (server logs)

When you access our website, our systems may automatically process:

  • IP address
  • Date/time of access
  • Requested page/URL
  • Browser and device information
  • Referrer URL (where available)

3.2 Communications (email / contact requests)

If you contact us, we process the data you provide, such as:

  • Name
  • Email address
  • Company name
  • Phone number (if provided)
  • Message content

3.3 Newsletter / insights subscription (if used)

If you subscribe to updates, we process your email address and (where applicable) confirmation and log data to document your consent. We recommend double opt-in for subscriptions.

4. Purposes of Processing

  • Operating and securing the website
  • Responding to inquiries and managing business communications
  • Preparing offers and performing contracts
  • Preventing abuse, spam, and fraud
  • Sending requested updates/newsletters (if you have subscribed)

5. Legal Bases (Art. 6 GDPR)

  • Art. 6(1)(b) GDPR – contract performance / pre-contractual measures (e.g., inquiries, proposals)
  • Art. 6(1)(c) GDPR – legal obligation (where applicable)
  • Art. 6(1)(f) GDPR – legitimate interests (website security, abuse prevention, efficient communication)
  • Art. 6(1)(a) GDPR – consent (e.g., newsletter subscription; non-essential cookies where used)

6. Legitimate Interests

Where processing is based on Art. 6(1)(f) GDPR, our legitimate interests include: ensuring IT security and availability of the website, preventing misuse (e.g., spam), and maintaining efficient business communication and administration.

7. Recipients / Processors

We do not sell personal data. We may share data with service providers acting as processors where necessary, such as:

  • Hosting / infrastructure provider: [INSERT PROVIDER NAME + COUNTRY]
  • Email service provider: [INSERT PROVIDER NAME + COUNTRY]
  • Website maintenance / IT support: [INSERT PROVIDER NAME + COUNTRY]
  • CRM / project tools (if used): [INSERT PROVIDER NAME + COUNTRY]
  • Newsletter provider (if used): [INSERT PROVIDER NAME + COUNTRY]

Where required, we conclude data processing agreements (DPAs) with our processors.

8. International Transfers

If we use providers located outside the EU/EEA, personal data may be transferred to third countries. In such cases, we implement appropriate safeguards (e.g., adequacy decision or EU Standard Contractual Clauses), and where necessary, additional protective measures.

9. Retention

  • Server logs: typically retained for up to [INSERT e.g. 14/30] days unless needed for security investigations.
  • Inquiry/communication data: retained for up to [INSERT e.g. 12/24] months after last contact, unless a contract follows or legal retention applies.
  • Contract-related data: retained according to statutory retention obligations.
  • Newsletter data (if used): retained until you unsubscribe or withdraw consent.

10. Cookies

Our website may use cookies. Essential cookies are used only where necessary for basic functionality. Non-essential cookies (e.g., analytics/marketing) are used only after your consent and can be managed via our cookie settings/banner (if implemented).

11. Your Rights

You have the right to:

  • access your data
  • rectification
  • erasure
  • restriction of processing
  • data portability
  • object to processing (especially where based on legitimate interests)
  • withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact: office@ub.consulting

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. In Slovakia, the supervisory authority is:

Office for Personal Data Protection of the Slovak Republic
Námestie 1.mája 18
811 06 Bratislava
Slovak Republic
Website: https://dataprotection.gov.sk/en/

13. Requirement to Provide Data

Providing personal data is generally voluntary. However, if you do not provide certain data (e.g., an email address), we may not be able to respond to your inquiry or provide requested services.

14. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version is published on this website.

Last updated: [INSERT DATE]