01
Who is the controller
The controller is Lead Studio, s.r.o., with its registered office at Veľká okružná 1309/17, 010 01 Žilina, company ID (IČO): 56721358, tax ID (DIČ): 2122462056, VAT ID (IČ DPH): SK2122462056, registered in the Commercial Register of the District Court Žilina, section Sro, insert no. 87134/L.
For data protection matters, contact us at info@leadstudio.sk. We have not appointed a data protection officer (DPO), because the GDPR does not require us to at our scale of processing.
02
What data we process
- —Contact data: name, email, phone, company and position.
- —Communication content: form messages, emails and call notes.
- —Contract data: client contact persons' details and billing data.
- —Job applicant data: CV and anything you send us in your application.
- —Technical and usage data: IP address, device and browser, which our hosting (Webflow) processes automatically when you visit the website. With your consent, also pages visited, clicks and scroll depth (Webflow Analyze). We do not use advertising cookies.
03
Purposes, legal bases and retention
Purpose
Legal basis
How long
Replying to an enquiry from the form or email
Pre-contractual measures, Art. 6(1)(b) GDPR; legitimate interest, point (f)
24 months from the last communication
Booking an introductory call
Pre-contractual measures, Art. 6(1)(b) GDPR
24 months from the last communication
Working with clients and communicating with their contact persons
Performance of a contract, point (b); legitimate interest, point (f)
For the duration of the contract and 4 years after it ends
Accounting and taxes
Legal obligation, point (c); Act No. 431/2002 Coll. on Accounting
10 years
Recruitment
Pre-contractual measures, point (b); keeping a CV for other positions only with consent, point (a)
Until the end of the recruitment process, 2 years with consent
Analytics (cookies)
Consent, point (a); Section 109(8) of Act No. 452/2021 Coll.
According to the Cookie policy
Our social media profiles
Legitimate interest, point (f), jointly with the network operators (LinkedIn, Instagram)
According to the network's rules
References and case studies
Legitimate interest, point (f), or client consent
While published
04
Legitimate interest
Where we process data on the basis of legitimate interest, this means answering enquiries, looking after clients, presenting our work and protecting our legal claims. You can object to such processing at any time.
Providing data is voluntary. Without contact details, however, we cannot reply to you or conclude a contract.
05
Who we share data with
We do not sell data. Only our vetted suppliers (processors) work with it, under a contract with us pursuant to Art. 28 GDPR:
- —Webflow, Inc.: website and form hosting, website analytics (Webflow Analyze)
- —Google Ireland Ltd.: website font (Google Fonts) and email (Google Workspace)
- —Accounting office: external accounting and tax services
- —Public authorities, where required by law
06
Transfers outside the EU
Some suppliers (e.g. Webflow, Google) are based in the USA. Transfers take place on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses under Art. 46 GDPR.
07
How we protect data
Only our team has access to the data, and only to the extent needed for their work. We use an encrypted connection (HTTPS), two-factor authentication and tools with appropriate security safeguards. We do not carry out automated decision-making or profiling with legal effects.
08
Your rights
- —Access: find out what data we hold about you (Art. 15 GDPR)
- —Rectification: correct inaccurate data (Art. 16)
- —Erasure: ask us to delete your data (Art. 17)
- —Restriction: temporarily suspend processing (Art. 18)
- —Portability: receive your data in a machine-readable format (Art. 20)
- —Objection: object to processing based on legitimate interest (Art. 21)
- —Withdrawal of consent: at any time, without affecting the lawfulness of processing before withdrawal
Just write to info@leadstudio.sk. We will reply within one month at the latest.
09
Complaint to the authority
If you believe we are handling your data incorrectly, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
10
Changes to this policy
We update this policy from time to time. The current version is always on this page, and the effective date is in its header.