Privacy policy
Effective from: 31 October 2026
1. Who processes your data
The controller is Media Orbitz s.r.o., registered office Melónový rad 706, 946 39 Iža, Slovakia, company ID (IČO): 47 207 337, registered in the Commercial Register of the District Court Nitra, section Sro, insert No. 44479/N, managing director Slavomír Hruška (“I”). Contact for anything about personal data: hi@slavomirhruska.com.
No data protection officer (DPO) is appointed, as one is not required under Art. 37 GDPR. Send all questions and requests to hi@slavomirhruska.com.
2. In short
- Google Analytics loads only after you consent — until then nothing is sent to Google.
- Your email is added to the list only after you confirm via the link in an email (double opt-in).
- Calculators and the quiz run in your browser — the numbers you enter are not sent to my server.
- Text you enter into the AI tools is sent to Anthropic for processing; I do not store it.
3. What I process, why, and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Running and securing the website (Cloudflare Pages hosting) | IP address, browser type, requested URL, time of request (provider’s technical logs) | Legitimate interest — a secure, working website (Art. 6(1)(f) GDPR) | Short-term, generally not more than 30 days |
| Visitor statistics (Google Analytics 4) | After consent: a pseudonymous cookie identifier, pages visited, tool events (started, completed, quiz result, email form submitted — without the email address), device, browser, approximate location. Without consent, Google Analytics is not loaded at all and nothing is sent to Google. | Consent (Art. 6(1)(a) GDPR and § 109(8) of Slovak Act No. 452/2021 Coll. on Electronic Communications) | 14 months |
| Fonts (Google Fonts) | IP address and browser data when fonts load from Google’s servers | Legitimate interest — consistent display of the website (Art. 6(1)(f) GDPR) | Per Google’s policies |
| Email list: investor checklist, tool results and further fundraising emails | Email address, language. The “name” field is sent to the server but not saved to the list. | Consent (Art. 6(1)(a) GDPR), confirmed by clicking the link in the email | Until you unsubscribe or withdraw consent; the record proving consent is kept for up to 3 years after you unsubscribe. Unconfirmed sign-ups: the confirmation link is valid for 48 hours and nothing is stored on my side. |
| AI tools (e.g. elevator pitch generator, pitch check) | The text you enter; IP address for rate limiting (8 requests per hour) | Providing the service you request (Art. 6(1)(b) GDPR); abuse prevention — legitimate interest (Art. 6(1)(f)) | Not stored by me. The IP address is kept only in memory for at most 1 hour. Anthropic automatically deletes API inputs and outputs within 30 days; content flagged as violating its Usage Policy may be kept for up to 2 years. |
| Booking a consultation (cal.com) | Name, email, chosen slot, any note you add | Steps prior to a contract at your request (Art. 6(1)(b) GDPR) | 3 years (limitation period for possible claims) |
| Email correspondence | Address, name and message content | Legitimate interest in replying, or contract performance (Art. 6(1)(f) / (b) GDPR) | 3 years after the last contact |
| Invoicing and accounting (paid consultations) | Name or company name, billing details, invoice data | Legal obligation (Art. 6(1)(c) GDPR, Slovak Accounting Act No. 431/2002 Coll.) | 10 years |
4. Recipients and processors
- Cloudflare, Inc. (USA) — hosting, CDN and the server logic behind forms and AI tools.
- Google Ireland Ltd. / Google LLC (Ireland / USA) — Google Analytics (with consent only) and Google Fonts.
- BlueFox Email — Innovaris Group Kft., Mester utca 40-44, 1095 Budapest, Hungary — sending confirmation emails and managing the email list.
- Anthropic, PBC (USA) — processing AI-tool text with the Claude model.
- Cal.com, Inc. (USA) — appointment booking.
- Cloudflare, Inc. (Cloudflare Email Routing) — receiving and forwarding email sent to hi@slavomirhruska.com.
I do not sell data or use it for advertising.
5. Transfers outside the EU
Some providers are based in the USA. Cloudflare, Inc., Google LLC and Cal.com, Inc. are certified under the EU-U.S. Data Privacy Framework, so transfers to them rely on the European Commission’s adequacy decision. Anthropic, PBC is not certified; transfers to it rely on the European Commission’s Standard Contractual Clauses (Art. 46 GDPR), which are part of its commercial terms.
6. Cookies and local storage
You can change your choice at any time via the “Cookie settings” link in the footer.
| Name | Type | Purpose | Expiry | When it is set |
|---|---|---|---|---|
_ga | Cookie (Google) | Distinguishes visitors in Google Analytics | 2 years | Only after consent |
_ga_LW3XBC8K7T | Cookie (Google) | Keeps session state in Google Analytics | 2 years | Only after consent |
cookie-consent, cookie-consent-date | localStorage | Remembers your choice (accept / reject) and when you made it | 12 months, then I ask again | After you click the banner (necessary) |
tk-currency | localStorage | Currency chosen in the calculators | Until cleared | After you change currency (functional) |
Cloudflare may set strictly necessary security cookies such as __cf_bm. I do not use advertising cookies.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. You can withdraw consent at any time (every email has an unsubscribe link) without affecting the lawfulness of earlier processing. Just write to hi@slavomirhruska.com.
There is no automated decision-making with legal effects and no profiling.
8. Complaints
You can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk, or with the supervisory authority in your country of residence.
9. Changes
I may update this policy; the current version is always on this page.