Legal

Privacy Policy.

How Elerion collects, uses, and protects personal data, and what rights you have under the GDPR.

Last updated: 23 July 2026

1. Who we are

ELERION, s.r.o. ("Elerion", "we", "us") is the controller of the personal data described in this policy. We are a company registered in Slovakia.

Registered seat
Staroslovanská 1554/17, 040 18 Košice – mestská časť Krásna, Slovakia
Company ID (IČO)
36781282
Tax ID (DIČ)
2022381086
VAT ID (IČ DPH)
SK2022381086 (§7a, registered since 29 June 2012)
Commercial register
Mestský súd Košice, oddiel: Sro, vložka č. 19856/V

We have not appointed a Data Protection Officer, as we are not required to under Article 37 of the GDPR. For any privacy matter, contact us at the address below or by email.

2. What data we collect

2.1 Contact form

When you submit the contact form on this site, we receive the name, email address, and message you provide. Nothing else in the form is required, and we ask that you do not include sensitive personal data in your message.

2.2 Email and other correspondence

If you write to us directly, we process your email address, your name if you give it, and the content of the correspondence, together with any information you share with us while we discuss or carry out a project.

2.3 Analytics

We use Plausible Analytics, which we run on our own infrastructure. Plausible does not use cookies, does not create persistent identifiers, and does not track visitors across sites or over time. It records aggregate figures such as page views, referring sites, country, and device type. We cannot identify you from this data.

2.4 Web fonts

This site loads the Poppins and Mulish typefaces from Google Fonts. When a page loads, your browser requests those files from Google’s servers, and your IP address is transmitted to Google as part of that request. See Google’s privacy policy for how Google handles it.

2.5 Server logs

Our hosting provider keeps standard access logs, which may include IP addresses, timestamps, requested URLs, and user-agent strings. These are kept for security and troubleshooting and are retained for a short period by the provider.

We do not use advertising cookies, tracking pixels, social media trackers, or profiling of any kind, and we do not make automated decisions that produce legal effects for you.

3. Why we process it, and on what legal basis

  • To answer your enquiry and prepare a quote - Article 6(1)(b) GDPR, steps taken at your request before entering into a contract.
  • To deliver a project we have agreed - Article 6(1)(b) GDPR, performance of a contract.
  • To keep the site secure and understand how it is used - Article 6(1)(f) GDPR, our legitimate interest in operating a functioning, secure website. We consider this proportionate because the analytics data is aggregate and does not identify you.
  • To meet accounting and tax obligations - Article 6(1)(c) GDPR, compliance with Slovak law.

4. Who we share it with

We do not sell personal data and we do not share it for anyone else’s marketing. We disclose it only to service providers who process it on our behalf under a data processing agreement, and to public authorities where the law requires it. Our providers are:

  • Netlify - website hosting and contact form processing.
  • Google - web font delivery, as described in section 2.4.
  • Our email provider - receiving and storing correspondence.
  • Our accountant - invoicing and statutory bookkeeping.

5. Transfers outside the EEA

Some of the providers above are established in the United States or process data there. Where personal data is transferred outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses, by an adequacy decision such as the EU–US Data Privacy Framework, or by another safeguard permitted under Chapter V of the GDPR. You can ask us for details of the safeguard applied to a specific transfer.

6. How long we keep it

  • Enquiries that do not lead to a project - up to 12 months from our last exchange, then deleted.
  • Client project records and correspondence - for the duration of the engagement and up to 3 years afterwards, matching the general limitation period under the Slovak Civil Code.
  • Invoices and accounting records - 10 years, as required by Slovak accounting and VAT legislation.
  • Analytics - retained in aggregate form only; it contains no personal data.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you, and receive a copy of it;
  • have inaccurate data corrected, and incomplete data completed;
  • have your data erased, where one of the grounds in Article 17 applies;
  • restrict our processing, where one of the grounds in Article 18 applies;
  • receive the data you gave us in a structured, machine-readable format, and have it transmitted to another controller;
  • object at any time to processing based on our legitimate interest, including the analytics described above;
  • withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out beforehand.

To exercise any of these, write to us at the email address above. We will respond within one month. We do not charge for this, unless a request is manifestly unfounded or excessive.

8. Complaints

If you believe we have handled your personal data unlawfully, you can lodge a complaint with the Slovak supervisory authority:

Authority
Úrad na ochranu osobných údajov Slovenskej republiky
Address
Hraničná 12, 820 07 Bratislava 27, Slovakia

We would appreciate the chance to address your concern directly first, but you are not required to contact us before complaining.

9. Security

This site is served over HTTPS. We limit access to personal data to the people who need it to do their work, and we use reputable providers with their own technical and organisational safeguards. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

Our services are aimed at businesses. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our services or the law change. The current version is always on this page, with the date it last changed shown at the top. Where a change materially affects your rights, we will make that clear.