Privacy & cookies

Who is responsible for your data

The controller of robertkrause.sk and of personal data processed for the purposes described here is:

Use this email for privacy questions and requests to exercise your rights. This notice covers both language versions of the website. External websites, social networks and book sales websites have their own controllers and privacy rules.

What we process and why

Website operation and security

Loading a page technically involves transmitting an IP address, the requested URL, request time and browser/device information. The hosting provider may also process these in operational and security logs to deliver content, diagnose errors and prevent abuse. The legal basis is our legitimate interest in an available and secure website under Article 6(1)(f) GDPR.

Your messages and enquiries

If you email us, we process your email address, name, any contact details and the content of the correspondence. Service enquiries involve steps before entering into a contract, or its performance, under Article 6(1)(b) GDPR. Other questions are handled on the basis of our legitimate interest in responding and maintaining necessary correspondence under point (f). Statutory obligations to retain contractual or accounting records fall under point (c).

You provide information voluntarily; without the contact details and information needed to handle a request, we may be unable to respond. This presentation website has no contact form or user accounts. Please do not send medical records or other sensitive information that we do not need to handle a business enquiry.

Analytics and advertising — only with consent

The legal basis for the planned analytics and marketing is your consent under Article 6(1)(a) GDPR. Storing or accessing optional cookies or similar identifiers requires prior consent under Slovak Act No. 452/2021 on Electronic Communications, in particular Section 109(8). Analytics and marketing have separate choices; consent is not a condition of access to the website.

Planned analytics and advertising services

Google Tag Manager · tag management

Google Tag Manager loads only after analytics or marketing is allowed. It manages tags according to selected purposes and their configuration. Loading it technically transmits information such as your IP address and browser information to Google. The provider for the EEA is Google Ireland Limited. Adding the tag manager does not activate all planned services; each individual tag must respect the relevant consent.

Google Analytics 4 · analytics

This will help us understand audience numbers, acquisition sources and page usage. It may process cookie identifiers, website events, technical device information and approximate location. The provider for EEA users is Google Ireland Limited; other Google companies may also be involved. See Google’s privacy policy.

Hotjar · analytics

We plan to use heatmaps and recordings of interactions such as clicks, navigation and scrolling, together with technical device information, to identify confusing parts of the website. Hotjar belongs to the Contentsquare group; the exact contracting entity and recording scope will be specified for the account before activation. See the Hotjar / Contentsquare privacy centre.

Google Ads · marketing and personalised advertising

We plan advertising effectiveness and conversion measurement, advertising audiences and remarketing. With marketing consent, Google may process advertising identifiers, ad-click identifiers and visit/conversion information and use it for personalised advertising. The provider for the EEA is Google Ireland Limited, with other Google companies involved as applicable to the service.

Advertising personalisation may involve profiling or audience creation. We do not use this website to make solely automated decisions producing legal or similarly significant effects on you under Article 22 GDPR.

Cookies and similar storage

Cookies are small files stored in your browser. Local or session storage may serve similar functions. Optional cookies are planned only for the analytics services described above and Google Ads. Essential storage of your choice is used solely to respect that choice.

An asterisk represents an account-specific part of a name. Optional entries are a planned overview, not a list of cookies already active. Actual names and lifetimes depend on the account and browser settings; we will reconcile this overview with actual measurement before activation. For consented advertising features, Google may also use its own cookies on its domains, as listed in its official advertising cookie information.

Giving, refusing or withdrawing consent

On your first visit you can select “Accept all”, “Reject”, or open settings and allow only selected categories. Analytics and marketing are off by default. Closing settings, scrolling or continuing to browse does not give consent.

With Basic Google Consent Mode v2, Google Tag Manager does not load before consent to at least one optional category. Each analytics or advertising tag must then respect its relevant consent. The analytics choice controls analytics storage; the marketing choice controls advertising storage, sending data for advertising purposes and advertising personalisation.

You can change or withdraw consent at any time through “Cookie settings” in the footer or the button below. Acceptance and rejection are remembered for the same 180 days, shared by SK/EN on the same device and browser. We ask again after expiry or a change to services or policy. If browser storage is blocked, your choice applies only to the current page.

Withdrawal applies prospectively and does not affect the lawfulness of earlier processing. We stop further loading of the affected tools, remove their accessible cookies on our domain, and reload the page if a tool has already loaded. This cannot delete cookies on third-party domains or data already received by providers. You can request erasure separately. Browser settings also let you delete cookies, which may remove your remembered choice.

How long we keep data

• Cookie choice: 180 days; an expired or invalid record is removed on the next page load. Expiry is also checked while the page is open.
• Email enquiries: while handling the request and necessary follow-up. Further retention is limited to what is needed to evidence an agreement, establish or defend rights, or fulfil statutory obligations. The period depends on the content of the correspondence and whether a contractual relationship arises.
• Operational and security logs: as necessary to deliver the service, resolve an error or investigate a security incident, in accordance with the hosting provider’s configuration and justified retention periods.
• Analytics and advertising service data: none is currently sent. Retention after transmission depends on the data type and service settings and differs from cookie lifetime. We will publish the actual retention settings, including Hotjar recordings, before activation.

Recipients and international transfers

Contracted hosting, business email and website maintenance providers, and authorised people acting for the controller, may process data to the extent necessary. Competent authorities may receive data where legally required. With the relevant consent, Google receives technical data when Google Tag Manager loads. After additional services are activated and you consent, the Google and Hotjar / Contentsquare providers identified above will also receive the relevant data.

These global services may involve transfers outside the EEA, notably to the United States. For Google services, information about contractual and transfer conditions is available in Google’s data protection centre. Before activating additional planned services, we will check the actual recipients and safeguards: for example, a European Commission adequacy decision covering the eligible recipient, or Standard Contractual Clauses with necessary supplementary measures. We do not assume every provider or transfer automatically qualifies under the EU–US framework. You can request information about recipients and a copy of the relevant safeguards by email.

Your rights and the supervisory authority

Subject to the GDPR’s conditions, you have rights of access and a copy, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation, and object to direct marketing at any time. You may withdraw consent at any time.

Write to info@krause.sk. We normally respond within one month; if a lawful extension is needed, we will explain why. If identity verification is necessary, we will request only proportionate information. Browser-only identifiers may not let us identify a person without additional information.

If you believe your data is being processed unlawfully, you may complain or request proceedings before the Office for Personal Data Protection of the Slovak Republic, or contact the competent supervisory authority under the GDPR.

Changes to this notice

We update this page when processing or tools change. The current version date appears above. Additional purposes or changes requiring fresh consent apply only after a new choice; existing consent is not treated as permission for arbitrary future services.