Personal Data Processing Information (GDPR)

This document explains how ProNex Consulting s. r. o. protects your privacy and handles your data when using our website and services.

Last updated: 30 June 2025

1. Who is the data controller?

The data controller who determines the purposes and means of processing your personal data is:

Business name: ProNex Consulting s. r. o.

Registered office: Trieda KVP 1C, 040 23 Košice - mestská časť Sídlisko KVP

Company ID: 56685530

Tax ID: 2122420256

VAT ID: SK2122420256 (according to §7a)

Email: info@pronex-consulting.eu

2. What data do we collect and why?

We process your personal data for the following purposes:

Enquiry Processing (Contact Form):

We process your name, company name, email, phone number, and message text. Data is stored in Supabase (including our internal CRM for enquiry records); we use Resend for email notifications and Google reCAPTCHA for spam protection. The legal basis is our legitimate interest in responding to your request (Art. 6(1)(f) GDPR).

Marketing Communication (Newsletter):

If you give us explicit consent (by checking the box in the contact form or when subscribing separately), we process your email and optionally your name to send news about our services. The legal basis is your consent (Art. 6(1)(a) GDPR).

Website Improvement (Cookies and Analytics):

With your consent via the cookie banner, we may use Google Tag Manager and Google Analytics to measure traffic and store aggregate page-view statistics in Supabase. These tools may process data including IP addresses and device identifiers; they are not fully anonymous. Vercel Analytics provides aggregate hosting statistics without marketing cookies. Without consent, only necessary cookies are active.

Appointment booking (Calendly):

If you book a consultation via Calendly, we process your name, email, and appointment details. Calendly Inc. acts as a processor and may process data outside the EU. The legal basis is pre-contractual steps or our legitimate interest (Art. 6(1)(b) or (f) GDPR).

3. Who has access to your data?

We do not sell your data to third parties. To operate the website and services, we use these verified processors:

Vercel Inc. (website hosting and operations)
Supabase, Inc. (database, contact form submissions and newsletter subscribers — EU data centers)
Resend, Inc. (transactional email delivery)
Google Ireland Limited (Google reCAPTCHA on form submission; Google Tag Manager / Analytics after cookie consent)
Calendly Inc. (consultation scheduling — may process data outside the EU)

Some providers may process data outside the EU (e.g. in the USA) under EU Standard Contractual Clauses or other safeguards under Art. 46 GDPR.

4. How long do we keep your data?

Form data is kept for the duration of communication and enquiry resolution (typically max. 1 year). If a contract is concluded, data may be retained longer under contractual and accounting obligations.
Newsletter data is kept until you unsubscribe (revoke consent).

5. Your rights under GDPR

As a data subject, you have the right to:

Access: Know what data we maintain about you.

Rectification: Request correction of incorrect data.

Erasure: Right to be "forgotten" if data is no longer needed.

Withdraw consent: Cancel newsletter subscription at any time.

File a complaint: If you believe we are violating the law, you can contact the Personal Data Protection Office of the Slovak Republic (www.dataprotection.gov.sk).

Data portability and restriction: Request transfer of data you provided to us, or restriction of processing in cases provided by law.

Object to processing: Object to processing based on legitimate interests, including profiling, where it applies to your situation.

6. Newsletter (Email Subscription)

When subscribing to our newsletter (via the website footer or by checking the box in the contact form), we process the following data:

Email address:

Used for sending marketing and informational emails about our services, news, and offers.

Language preference:

We store your preferred language so we can send you content in the correct language.

Legal basis:

Processing is based on your voluntary consent (Art. 6(1)(a) GDPR), which you provide when subscribing or by checking the box in the contact form.

Data retention:

We retain your data for the entire duration of your subscription. After unsubscribing, your data will be deleted without delay.

Unsubscribing:

You can unsubscribe at any time by clicking the unsubscribe link included in every email we send, or by contacting us at info@pronex-consulting.eu.

Service providers:

We use Supabase (EU data centers) to store and manage subscriber data, and Resend for email delivery. These parties process data solely on our instructions.

7. Use of cookies

Our website uses cookies to ensure proper functionality, analyse traffic, and improve our services.

Necessary cookies:

Ensure the basic functionality of the website (e.g., language preferences). Without them, the website would not work properly. They are always active.

Analytics cookies:

Help us understand how visitors use the site (Google Analytics via Google Tag Manager). They activate only after your consent. Data may include pseudonymised identifiers and is not fully anonymous.

Marketing cookies:

Used to measure marketing effectiveness. They activate only after your consent in the cookie banner.

On your first visit, we ask for consent to optional cookies via the cookie banner. You can change your choice at any time via the “Cookie settings” link in the website footer or by clearing cookies in your browser.

8. Processor privacy policies

You can find more details on how each provider processes data on their websites:

For any questions, please contact us at info@pronex-consulting.eu.