Version 2.0, effective from 26 October 2026
This policy explains how we process personal data when you visit www.ableneo.com, contact us through the website, or subscribe to our newsletter. Cookies are described in section 8. Job applicants: this policy applies to you as well. We process applications in the Nalgoo recruitment system; see also the Nalgoo privacy policy.
The website is operated by three companies that decide together why and how your data is processed (joint controllers under Article 26 GDPR):
| ableneo Slovensko s.r.o. | ableneo Consulting s. r. o. | ableneo Česko s.r.o. | |
|---|---|---|---|
| Registered office | Mýtna 48, 811 07 Bratislava, Slovakia | Mýtna 48, 811 07 Bratislava, Slovakia | Zárybničná 2339/35, Záběhlice, 141 00 Praha 4, Czech Republic |
| Company ID | 47 002 140 | 55 224 121 | 05173167 |
| Registered in | Commercial Register of the City Court Bratislava III, Section Sro, File No. 87023/B | Commercial Register of the City Court Bratislava III, Section Sro, File No. 167252/B | Commercial Register of the Municipal Court in Prague, Section C, File No. 259462 |
All three companies share one contact point: info-sk@ableneo.com, +421 2 32 144 791.
Arrangement between the joint controllers (Article 26 GDPR). The three companies have agreed in writing who is responsible for what:
Contact for data protection: info-sk@ableneo.com, or by post to the Slovak registered office.
Data protection matters are the responsibility of the managing directors of the companies. We have not appointed a data protection officer under Article 37 GDPR, because the law does not require one for our activities.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering an inquiry sent through the contact form or by e-mail | Name, company, e-mail, phone, content of your message | Steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR; for inquiries on behalf of a company, our legitimate interest in answering business inquiries, Art. 6(1)(f) | Until we have answered your inquiry and any follow-up has ended. If a contract follows, for as long as the contract and our legal obligations require |
| Newsletter about our events and news | E-mail, name if collected, opens and clicks recorded by Mailchimp | Your consent, Art. 6(1)(a) GDPR | Until you unsubscribe |
| Business communication with existing clients and their contacts about similar services | Name, company, business e-mail, phone, role | Legitimate interest in direct marketing, Art. 6(1)(f) GDPR, and the rules for commercial communication to existing customers | For the duration of the business relationship, and afterwards until you object or we no longer have a business reason to contact you; we review this at least once a year |
| Contacting potential clients identified from public professional profiles (for example LinkedIn) | Name, company, role, business contact data, public profile information | Legitimate interest in direct marketing, Art. 6(1)(f) GDPR | Until you object, or until we conclude there is no business interest; we review this at least once a year |
| Protecting the website against spam and abuse | IP address, browser data, form content | Legitimate interest in website security, Art. 6(1)(f) GDPR | Only as long as needed to detect abuse; technical logs are deleted automatically by our hosting provider |
| Website analytics and advertising (cookies) | Online identifiers, pages visited, device and browser data | Your consent given in the cookie banner, Art. 6(1)(a) GDPR | As shown for each cookie in the cookie list in section 8 |
| Establishing, exercising or defending legal claims | Data from the purposes above that relate to the claim | Legitimate interest, Art. 6(1)(f) GDPR | Until the claim is resolved and the limitation period ends |
Where the data comes from. Mostly from you. For potential clients, from public professional profiles and company websites. If we obtained your data this way, we tell you at our first contact.
Do you have to provide data? To get an answer to an inquiry we need at least a way to contact you. The newsletter and cookies are voluntary; refusing them has no effect on anything else.
We do not process special categories of personal data and do not knowingly collect data about children.
Where we rely on consent, you may withdraw it at any time: use the unsubscribe link in each newsletter, change your choice through “Manage consent” at the bottom of every page, or write to us. Withdrawal does not affect processing carried out before it.
You may object at any time to processing for direct marketing, and we will stop. You may also object to other processing based on legitimate interest on grounds relating to your particular situation (Art. 21 GDPR); we then stop unless we demonstrate compelling legitimate grounds or need the data for legal claims.
We share data only to the extent needed and only with recipients bound by confidentiality:
| Recipient | Role | Purpose | Location and safeguard |
|---|---|---|---|
| The Rocket Science Group LLC (Intuit Mailchimp), USA | Processor | Sending the newsletter | USA, EU-US Data Privacy Framework (certified through Intuit Inc.); standard contractual clauses as a fallback |
| Google Ireland Limited, Google LLC (USA) | Processor; independent controller for its own purposes | Google Tag Manager, Google Analytics, Google Ads, reCAPTCHA | EU and USA, EU-US Data Privacy Framework (Google LLC is certified) |
| Meta Platforms Ireland Ltd., Meta Platforms, Inc. (USA) | Joint controller for collecting and transmitting pixel data | Meta Pixel (only with marketing consent) | EU and USA, EU-US Data Privacy Framework (Meta Platforms, Inc. is certified) |
| LinkedIn Ireland Unlimited Company, LinkedIn Corporation (USA) | Joint controller for the Insight Tag | Advertising and conversion measurement (only with marketing consent) | EU and USA, EU-US Data Privacy Framework (LinkedIn Corporation is certified) |
| Aut O’Mattic A8C Ireland Ltd. (Akismet), with Automattic Inc. (USA) as sub-processor | Processor | Spam filtering of form submissions | USA, standard contractual clauses in the Automattic data processing addendum |
| Microsoft Ireland Operations Ltd. | Processor | E-mail, Teams, document storage and Microsoft 365 Copilot, where we receive and handle inquiries and client communication | EU, within the EU Data Boundary. Copilot features that use Anthropic models (including Copilot Cowork) are processed outside the EU Data Boundary by Anthropic as Microsoft’s sub-processor, under the Microsoft data protection addendum. Other transfers to the USA, if any, under the EU-US Data Privacy Framework (Microsoft Corporation is certified) and standard contractual clauses |
| Atlassian Pty Ltd (Australia) for Jira, Confluence and Rovo; Loom, Inc. (USA) for Loom and Loom AI; purchased through the reseller Eyzee S.A. (Poland) | Processor | Jira, Confluence and Loom, where we record and track business inquiries and client work, including the AI features Atlassian Rovo and Loom AI | Stored data in the EU (Atlassian data residency); access from Australia and the USA and the AI features (Atlassian’s AI sub-processors, including OpenAI in the USA) under the standard contractual clauses in the Atlassian data processing addendum; Atlassian, Inc. and Loom, Inc. are also certified under the EU-US Data Privacy Framework |
| Anthropic Ireland, Limited, with Anthropic, PBC (USA) as sub-processor | Processor | Claude AI assistant, used to help prepare answers to inquiries and business communication | USA, standard contractual clauses in the Anthropic data processing addendum |
| Websupport s. r. o., Bratislava | Processor | Website hosting. Contact form submissions pass through the web server and are delivered to us by e-mail; they are not stored on the website. The newsletter form sends your e-mail address directly to Mailchimp. The server keeps technical access logs | Slovakia, EU |
| Pipedrive OÜ, Tallinn, Estonia | Processor | CRM: managing client and prospect contacts and business inquiries | EU; transfers to Pipedrive, Inc. in the USA under the EU-US Data Privacy Framework (Pipedrive, Inc. is certified) and standard contractual clauses |
| Accountants, auditors, lawyers, IT support providers | Processors or independent controllers | Operating our business | EU |
| Public authorities | Independent controllers | Where the law requires it | EU |
Transfers outside the EU. Some of the providers above process data in the USA. These transfers rely on the European Commission adequacy decision for the EU-US Data Privacy Framework of 10 July 2023; where a provider is not certified, they rely on the standard contractual clauses approved by the European Commission. You can ask us for a copy of the relevant safeguards.
You have the right to:
We answer within one month. We may ask you to confirm your identity.
Complaints. You may complain to the supervisory authority in the EU country where you live, work, or where the alleged infringement took place:
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you (Art. 22 GDPR). If you accept marketing cookies, Google, Meta and LinkedIn may use the data to show you ads that match your interests.
We use cookies and similar technologies on www.ableneo.com. Cookies that are strictly necessary for the website to work are used without consent. All other cookies are used only after you agree in the cookie banner, separately for each category:
| Category | Purpose | Provider |
|---|---|---|
| Functional | Make the website work, remember your cookie choices and protect the forms against abuse | ableneo |
| Preferences | Remember settings you choose on the website | ableneo |
| Statistics | Measure how the website is used, in aggregated form | Google Analytics (Google Ireland Limited, Google LLC) |
| Marketing | Measure the effect of our advertising and show you relevant ads on other platforms | Google Ads, Meta Pixel (Meta Platforms Ireland Ltd.), LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) |
You can change or withdraw your choice at any time through “Manage consent” at the bottom of every page. Withdrawal does not affect use before it.
The list below shows each cookie with its provider, purpose and how long it is stored:
We update this policy when our processing changes. The version and date are shown at the top. Previous version: Consent of the data subject to the processing of personal data.