Privacy Policy
When processing your personal data for the aforementioned purposes, we are guided by the principle of data minimization; therefore, we process it for each purpose only to the extent necessary for its fulfillment. Upon expiration of the processing period, your personal data will be anonymized and used for statistical and analytical purposes, and this data can no longer be linked back to you.
I. Purpose of this Policy
This Policy informs you, as a data subject, about the processing of your personal data pursuant to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR") and Act No. 18/2018 Coll. on Personal Data Protection and amending and supplementing certain acts as amended (hereinafter referred to as the "Act"). This Policy, together with the terms of use of this website and any other documents referred to herein, determines the types of personal data we collect, the manner in which we collect and process this information, with whom we share it in connection with the provided services, and certain rights and options you have in this regard. We recommend that you familiarize yourself with the information contained in this document. Any changes related to the processing of your personal data will be implemented by updating this document published on our website.
II. Data Controller
The Data Controller is Odonata s. r. o., with its registered office at Digital Park II, Einsteinova 25, 851 01 Bratislava, Company Identification Number (IČO): 52656454, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, Insert No.: 141865/B (hereinafter also referred to as "Odonata"). The Data Controller is the entity that determines the purposes and means of the processing of your personal data, as well as the entity responsible for the protection of your personal data.
IIII. Who can I contact with questions regarding the processing of my personal data and where can I exercise my rights related to the processing of personal data?
If you have any questions concerning the processing of your personal data by Odonata, or if you wish to exercise any of your rights as a data subject arising from applicable legal regulations, you may contact us at any time using the following methods:
By contacting the Data Protection Officer of Odonata at the email address: [email protected],
In writing, by sending a letter to: Odonata s. r. o., Digital Park II, Einsteinova 25, 851 01 Bratislava.
Furthermore, in connection with the processing of your personal data, you may at any time lodge a complaint with the Office for Personal Data Protection, located at: Námestie 1. mája, 811 06 Bratislava, website: Office for Personal Data Protection of the Slovak Republic; or with a data protection supervisory authority in the Member State of your habitual residence or place of work, which will inform you about the progress and outcome of the complaint, including the possibility of seeking a judicial remedy.
I
IV. For what purpose and how do you process my personal data?
a) If I subscribe to the newsletter
Method of obtaining your personal data
We collect your personal data directly from you when you complete the electronic newsletter subscription form available on our website. We also collect your personal data indirectly when you visit our website through cookies, after you have granted your consent to their use.
Categories, purposes, legal basis, and retention periods of your personal data.
Purpose of processing
Category of data
Legal basis
Retention period
Sending news and marketing information (newsletter)
First name, last name, email address, data regarding the time of granting consent.
Consent of the data subject.
For the duration of the consent, a maximum of 30 days from the withdrawal of consent.
Receipt and handling of data subject rights under the Act and the GDPR
Title, first name, last name, correspondence address, email, phone number, data arising from the request, method and time of receipt and handling of the request, related communication, and all personal data to which the request relates.
Processing is necessary for compliance with a legal obligation arising primarily from the GDPR and the Personal Data Protection Act.
60 days from the date of the (justified) exercise of the data subject's request (right). Subsequently, 5 years for the purpose of demonstrating compliance with a legal obligation.
Records management
Data forming part of a registry record
Compliance with legal obligations under the Act on Archives and Registries.
Expiration of the retention (archiving) period established by specific regulations for individual (paper or electronic) documents/data of which the personal data form a part, or the expiration of a 10-year period from their collection, in the event that a statutory retention period for these documents is not established. If, in connection with the activity during which the documents were collected, proceedings are initiated by public authorities, the processing period is extended by the duration of the respective proceedings.
When processing your personal data for the aforementioned purposes, we are guided by the principle of data minimization; therefore, we process it for each purpose only to the extent necessary for its fulfillment. Upon expiration of the processing period, your personal data will be anonymized and used for statistical and analytical purposes, and this data can no longer be linked back to you.
b) If I contact you via the contact form
Method of obtaining your personal data
We collect your personal data directly from you when you complete the electronic form located on our website to contact our company for the purpose of providing consultations. We also collect your personal data indirectly when you visit our website through cookies, after you have granted your consent to their use.
Categories, purposes, legal basis, and retention periods of your personal data.
Purpose of processing
Category of data
Legal basis
Retention period
Performance of the profession (provision of advice and consultations)
First name, last name, email address, phone number, and other personal data provided by the data subject via the text field in the electronic form.
Compliance with a legal obligation pursuant to Act No. 420/2004 Coll. on Mediation and on amendments and supplements to certain acts.
Performance of contractual obligations arising from the contract for the provision of services. For the period stipulated by the relevant legal regulation.
Receipt and handling of data subject rights under the Act and the GDPR
Title, first name, last name, correspondence address, email, phone number, data arising from the request, method and time of receipt and handling of the request, related communication, and all personal data to which the request relates.
Processing is necessary for compliance with a legal obligation arising primarily from the GDPR and the Personal Data Protection Act.
60 days from the date of the (justified) exercise of the data subject's request (right). Subsequently, 5 years for the purpose of demonstrating compliance with a legal obligation.
Records management
Data forming part of a registry record
Compliance with legal obligations under the Act on Archives and Registries.
Expiration of the retention (archiving) period established by specific regulations for individual (paper or electronic) documents/data of which the personal data form a part, or the expiration of a 10-year period from their collection, in the event that a statutory retention period for these documents is not established. If, in connection with the activity during which the documents were collected, proceedings are initiated by public authorities, the processing period is extended by the duration of the respective proceedings.
When processing your personal data for the aforementioned purposes, we are guided by the principle of data minimization; therefore, we process it for each purpose only to the extent necessary for its fulfillment. Upon expiration of the processing period, your personal data will be anonymized and used for statistical and analytical purposes, and this data can no longer be linked back to you.
Recipients of your personal data
When processing your personal data for the purposes stated in this Policy, Odonata may use the services of contractual partners who participate in the technical and organizational provision of these activities. For personal data protection purposes, contractual partners have the status of processors who process personal data exclusively on the basis of a data processing agreement, on behalf of Odonata, while being bound by the obligation of confidentiality and the observance of security measures in accordance with applicable legal regulations.
Processors can be divided into the following categories:
1. Suppliers of software solutions for registering data on data subjects, including systems for accessing documentation and communication, and the creation, registration, and sending of content.
2. Providers of the technical solution for the website and online form, which serve to collect data from data subjects.
3. Suppliers of cloud and office software services through which electronic documents, emails, and other internal communication are stored and managed.
4. Providers of IT support and infrastructure management necessary for the proper functioning of systems related to the website and the controller's activities.
5. Providers of specialized communication solutions used for communication with data subjects.
6. Entities ensuring the archiving or shredding of documentation related to data subjects.
The list of specific processors may change depending on the currently used technologies and services. Their current list is available upon request via the email address: [email protected].
In addition to the aforementioned processors, your personal data may also be made available to other recipients acting as independent controllers, if required by law or if necessary for the establishment, exercise, or defense of our legal claims. This may primarily include public authorities (e.g., courts, law enforcement agencies, the Office for Personal Data Protection of the Slovak Republic) or advisors.
International transfer of personal data
Within the processing of your personal data for the purposes stated in this Policy, personal data may be transferred outside the European Union and the European Economic Area, especially in cases where Odonata uses cloud services or IT tools provided by entities based outside the EU. The transfer of personal data may occur in particular to the United States of America (USA) in cases where data is stored or processed through cloud solutions provided by companies certified under the EU-U.S. Data Privacy Framework. The transfer of data in such cases is carried out in accordance with applicable personal data protection laws, primarily based on the Commission Implementing Decision (EU) 2023/1795 of 10 July 2023, and the transfer is made only to entities holding a valid certification under this framework. Should it be necessary to transfer personal data to another third country or an international organization that does not guarantee an adequate level of personal data protection, we will inform you specifically about such a transfer. In such a case, the transfer will only take place on the basis of legal mechanisms permitted by the GDPR (e.g., standard contractual clauses), and, if required, only after obtaining your explicit consent.
Automated decision-making and profiling Within the processing of your personal data, no automated decision-making or profiling takes place.
c) If I contact you via the WhatsApp application
Method of obtaining your personal data
By clicking on the WhatsApp application icon, a new tab will open and you will be redirected to the WhatsApp application or portal, through which you can contact us and start a conversation. We collect your personal data directly from you through the communication initiated in this way. In accordance with the WhatsApp terms of use, when we are in contact with you, in addition to the data you provide us in the text of the communication, we have access to your phone number and username. We also collect your personal data indirectly when you visit our website or the WhatsApp application through cookies, after you have granted your consent to their use.
Categories, purposes, legal basis, and retention periods of your personal data.
Purpose of processing
Category of data
Legal basis
Retention period
Performance of the profession (provision of advice and consultations)
First name, last name, email address, phone number, and other personal data provided by the data subject via the text field in the electronic form.
Compliance with a legal obligation pursuant to Act No. 420/2004 Coll. on Mediation and on amendments and supplements to certain acts.
Performance of contractual obligations arising from the contract for the provision of services. For the period stipulated by the relevant legal regulation.
Receipt and handling of data subject rights under the Act and the GDPR
Title, first name, last name, correspondence address, email, phone number, data arising from the request, method and time of receipt and handling of the request, related communication, and all personal data to which the request relates.
Processing is necessary for compliance with a legal obligation arising primarily from the GDPR and the Personal Data Protection Act.
60 days from the date of the (justified) exercise of the data subject's request (right). Subsequently, 5 years for the purpose of demonstrating compliance with a legal obligation.
Records management
Data forming part of a registry record
Compliance with legal obligations under the Act on Archives and Registries.
Expiration of the retention (archiving) period established by specific regulations for individual (paper or electronic) documents/data of which the personal data form a part, or the expiration of a 10-year period from their collection, in the event that a statutory retention period for these documents is not established. If, in connection with the activity during which the documents were collected, proceedings are initiated by public authorities, the processing period is extended by the duration of the respective proceedings.
When processing your personal data for the aforementioned purposes, we are guided by the principle of data minimization; therefore, we process it for each purpose only to the extent necessary for its fulfillment. Upon expiration of the processing period, your personal data will be anonymized and used for statistical and analytical purposes, and this data can no longer be linked back to you.
Recipients of your personal data
When processing your personal data for the purposes stated in this Policy, Odonata may use the services of contractual partners who participate in the technical and organizational provision of these activities. For personal data protection purposes, contractual partners have the status of processors who process personal data exclusively on the basis of a data processing agreement, on behalf of Odonata, while being bound by the obligation of confidentiality and the observance of security measures in accordance with applicable legal regulations.
Processors can be divided into the following categories:
1. Suppliers of software solutions for registering data on data subjects, including systems for accessing documentation and communication, and the creation, registration, and sending of content.
2. Providers of the technical solution for the website and online form, which serve to collect data from data subjects.
3. Suppliers of cloud and office software services through which electronic documents, emails, and other internal communication are stored and managed.
4. Providers of IT support and infrastructure management necessary for the proper functioning of systems related to the website and the controller's activities.
5. Providers of specialized communication solutions used for communication with data subjects.
6. Entities ensuring the archiving or shredding of documentation related to data subjects.
The list of specific processors may change depending on the currently used technologies and services. Their current list is available upon request via the email address: [email protected].
In addition to the aforementioned processors, your personal data may also be made available to other recipients acting as independent controllers, if required by law or if necessary for the establishment, exercise, or defense of our legal claims. This may primarily include public authorities (e.g., courts, law enforcement agencies, the Office for Personal Data Protection of the Slovak Republic) or advisors.
International transfer of personal data
Within the processing of your personal data for the purposes stated in this Policy, personal data may be transferred outside the European Union and the European Economic Area, especially in cases where Odonata uses cloud services or IT tools provided by entities based outside the EU. The transfer of personal data may occur in particular to the United States of America (USA) in cases where data is stored or processed through cloud solutions provided by companies certified under the EU-U.S. Data Privacy Framework. The transfer of data in such cases is carried out in accordance with applicable personal data protection laws, primarily based on the Commission Implementing Decision (EU) 2023/1795 of 10 July 2023, and the transfer is made only to entities holding a valid certification under this framework. Should it be necessary to transfer personal data to another third country or an international organization that does not guarantee an adequate level of personal data protection, we will inform you specifically about such a transfer. In such a case, the transfer will only take place on the basis of legal mechanisms permitted by the GDPR (e.g., standard contractual clauses), and, if required, only after obtaining your explicit consent.
Automated decision-making and profiling
Within the processing of your personal data, no automated decision-making or profiling takes place.
c) If I contact you via the WhatsApp application
Method of obtaining your personal data
By clicking on the WhatsApp application icon, a new tab will open and you will be redirected to the WhatsApp application or portal, through which you can contact us and start a conversation. We collect your personal data directly from you through the communication initiated in this way. In accordance with the WhatsApp terms of use, when we are in contact with you, in addition to the data you provide us in the text of the communication, we have access to your phone number and username. We also collect your personal data indirectly when you visit our website or the WhatsApp application through cookies, after you have granted your consent to their use.
Categories, purposes, legal basis, and retention periods of your personal data.
Purpose of processing
Category of data
Legal basis
Retention period
Performance of the profession (provision of advice and consultations)
First name, last name, email address, phone number, and other personal data provided by the data subject via the text field in the electronic form.
Compliance with a legal obligation pursuant to Act No. 420/2004 Coll. on Mediation and on amendments and supplements to certain acts.
Performance of contractual obligations arising from the contract for the provision of services. For the period stipulated by the relevant legal regulation.
Receipt and handling of data subject rights under the Act and the GDPR
Title, first name, last name, correspondence address, email, phone number, data arising from the request, method and time of receipt and handling of the request, related communication, and all personal data to which the request relates.
Processing is necessary for compliance with a legal obligation arising primarily from the GDPR and the Personal Data Protection Act.
60 days from the date of the (justified) exercise of the data subject's request (right). Subsequently, 5 years for the purpose of demonstrating compliance with a legal obligation.
Records management
Data forming part of a registry record
Compliance with legal obligations under the Act on Archives and Registries.
Expiration of the retention (archiving) period established by specific regulations for individual (paper or electronic) documents/data of which the personal data form a part, or the expiration of a 10-year period from their collection, in the event that a statutory retention period for these documents is not established. If, in connection with the activity during which the documents were collected, proceedings are initiated by public authorities, the processing period is extended by the duration of the respective proceedings.
When processing your personal data for the aforementioned purposes, we are guided by the principle of data minimization; therefore, we process it for each purpose only to the extent necessary for its fulfillment. Upon expiration of the processing period, your personal data will be anonymized and used for statistical and analytical purposes, and this data can no longer be linked back to you.
Recipients of your personal data
When processing your personal data for the purposes stated in this Policy, Odonata may use the services of contractual partners who participate in the technical and organizational provision of these activities. For personal data protection purposes, contractual partners have the status of processors who process personal data exclusively on the basis of a data processing agreement, on behalf of Odonata, while being bound by the obligation of confidentiality and the observance of security measures in accordance with applicable legal regulations.
Processors can be divided into the following categories:
1. Suppliers of software solutions for registering data on data subjects, including systems for accessing documentation and communication, and the creation, registration, and sending of content.
2. Providers of the technical solution for the website and online form, which serve to collect data from data subjects.
3. Suppliers of cloud and office software services through which electronic documents, emails, and other internal communication are stored and managed.
4. Providers of IT support and infrastructure management necessary for the proper functioning of systems related to the website and the controller's activities.
5. Providers of specialized communication solutions used for communication with data subjects.
6. Entities ensuring the archiving or shredding of documentation related to data subjects.
The list of specific processors may change depending on the currently used technologies and services. Their current list is available upon request via the email address: [email protected].
In addition to the aforementioned processors, your personal data may also be made available to other recipients acting as independent controllers, if required by law or if necessary for the establishment, exercise, or defense of our legal claims. This may primarily include public authorities (e.g., courts, law enforcement agencies, the Office for Personal Data Protection of the Slovak Republic) or advisors.
International transfer of personal data
Within the processing of your personal data for the purposes stated in this Policy, personal data may be transferred outside the European Union and the European Economic Area, especially in cases where Odonata uses cloud services or IT tools provided by entities based outside the EU. The transfer of personal data may occur in particular to the United States of America (USA) in cases where data is stored or processed through cloud solutions provided by companies certified under the EU-U.S. Data Privacy Framework. The transfer of data in such cases is carried out in accordance with applicable personal data protection laws, primarily based on the Commission Implementing Decision (EU) 2023/1795 of 10 July 2023, and the transfer is made only to entities holding a valid certification under this framework. Should it be necessary to transfer personal data to another third country or an international organization that does not guarantee an adequate level of personal data protection, we will inform you specifically about such a transfer. In such a case, the transfer will only take place on the basis of legal mechanisms permitted by the GDPR (e.g., standard contractual clauses), and, if required, only after obtaining your explicit consent.
Automated decision-making and profiling
Within the processing of your personal data, no automated decision-making or profiling takes place.
This Personal Data Processing Policy is valid and effective as of April 15, 2026.
© 2026 CestaCez · coaching & mediation