Privacy Policy
Effective as of 20 October 2026
This policy explains how we process personal data when you use the askdata.sk website and the AskData service, in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.
1. Controller
RBH Technology s. r. o., registered office Kapušianska 9, 821 02 Bratislava – Ružinov, Slovak Republic, Company ID (IČO) 54435773, Tax ID (DIČ) 2121662257, VAT ID (IČ DPH) SK2121662257. Contact person: Ing. Richard Böhmer. Email: hello@askdata.sk.
2. What data we process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| The “Book a demo” form | name, email, clinic/company, phone, message, time of consent, IP address and browser (protection against abuse) | handling your request and arranging a demo | consent (Art. 6(1)(a)) and steps taken prior to entering into a contract (Art. 6(1)(b)); spam protection – legitimate interest (Art. 6(1)(f)) |
| Client account | name, email, password (only as a secure hash), role, organization, sign-in and activity logs | providing the service, securing the account, auditing | performance of a contract (Art. 6(1)(b)), legitimate interest in security (Art. 6(1)(f)) |
| Use of the service | chat questions, answers, dashboard settings, the client’s operational data | providing analytics and answers | performance of a contract; for client data we act as a processor under a data processing agreement |
| Cookies and the LinkedIn Insight Tag | cookie identifiers, pages visited, technical browser data | measuring conversions and ad performance on LinkedIn | consent (Art. 6(1)(a)), Section 109 of Act No. 452/2021 Coll. (Slovak Electronic Communications Act) |
| Analytics cookies (PostHog, EU hosting) | browser identifier, visited URLs without parameters, technical data; on public pages also Web Vitals and a session recording with masked fields | measuring site traffic and service usage | consent (Art. 6(1)(a)), Section 109 of Act No. 452/2021 Coll. (Slovak Electronic Communications Act) |
PostHog runs only with your consent. We do not send your email address, the text of chat questions or patient data to analytics. In the signed-in area, session recording and automatic click tracking are switched off.
3. How long we keep data
- Demo requests are deleted from our database 24 months after submission; records flagged as suspected spam are deleted after 30 days. We delete the IP address and browser data from the remaining requests after 90 days. Clean-up runs daily. You can ask for earlier deletion by email.
- Account and service data: for the duration of the contract and afterwards to the extent necessary to meet legal obligations and to defend legal claims.
- Security and audit logs: generally 12 months.
- Your cookie choice: 6 months; marketing cookies according to their own settings (see the Cookie Policy).
4. Recipients and processors
- Hetzner Online GmbH (Germany) – hosting of the server and database in the EU.
- Anthropic (USA) or, alternatively, OpenAI (USA) – language models that process chat questions and the query results needed to answer them. Data is not used to train models.
- LinkedIn Ireland Unlimited Company – LinkedIn Insight Tag, only with your consent.
- PostHog (cloud in the European Union) – analytics for the website and app usage, only with your consent.
- Resend (if email notifications are enabled) and the email service provider, if you write to us by email or we reply to you.
- Public authorities, where required by law.
For transfers to third countries (notably the USA) we rely on an adequacy decision (the EU-U.S. Data Privacy Framework) or on the European Commission’s standard contractual clauses.
5. Your rights
- access to your data, rectification, erasure and restriction of processing,
- data portability,
- the right to object to processing based on legitimate interest,
- the right to withdraw consent at any time (for example via “Cookie settings” in the footer or by email), without affecting the lawfulness of processing carried out before withdrawal.
Please send requests to hello@askdata.sk. We will respond within one month. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
6. Automated decision-making
We do not make decisions with legal effects based solely on automated processing, and we do not carry out profiling.
7. Changes
We may update this policy. The current version is always published on this page.