GDPR

Privacy policy

We process your data transparently, securely and only to the extent necessary. Below you will find everything that matters.

Effective from 1 January 2026

1. Controller

The controller determining the purposes and means of processing personal data is Heroes Agency s.r.o. (brand Hiroäs), registered office Budatínska 3230/16, 851 06 Bratislava, Slovakia, company ID: 52945511, tax ID: 2121271460, VAT ID: SK2121271460, registered in the Commercial Register of the District Court Bratislava I.

Contact for data protection matters: e-mail ahoj@hiroas.sk, phone +421 944 169 485, postal address Bojnická 9426/18, 831 04 Bratislava.

2. Legal framework

We process personal data in line with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on personal data protection, as amended.

3. What data we process and why

  • Contact form and enquiries: name, company, position, e-mail, phone number, selected service and message. Purpose: replying to your enquiry and pre-contractual communication. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering a contract), or (a) GDPR (your consent).
  • Contracts and invoicing: identification, billing and contact details. Legal basis: Art. 6(1)(b) and (c) GDPR (performance of a contract and legal obligations, mainly accounting and tax).
  • Marketing communication: e-mail and name, if you subscribe or are our client. Legal basis: consent or legitimate interest in direct marketing towards existing clients (Art. 6(1)(a) or (f) GDPR).
  • Website operation and security: technical data such as IP address, device and browser type, time of access. Legal basis: legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR).

4. Retention periods

  • Form enquiries: no longer than 2 years from the last communication.
  • Contractual and accounting documents: 10 years under the Accounting Act.
  • Marketing consents: until withdrawn, no longer than 3 years from being granted.
  • Technical and security logs: usually up to 12 months.

5. Who we share data with

We do not sell personal data. We share it only with trusted processors who provide services to us: hosting and cloud providers, e-mail and CRM tools, analytics and advertising tools, accounting and legal support. We have data processing agreements in place with all of them.

Where data is transferred outside the European Economic Area (for example tools with servers in the USA), the transfer is based on an adequacy decision or the EU standard contractual clauses.

6. Cookies and analytics

The website may use necessary cookies required for its operation and — based on your consent — analytics and marketing cookies. You can change your cookie settings at any time in your browser or by withdrawing consent through the contact details above.

7. Your rights

  • the right of access to your personal data and to a copy of it,
  • the right to rectification of inaccurate or incomplete data,
  • the right to erasure (“right to be forgotten”),
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to processing based on legitimate interest and to direct marketing,
  • the right to withdraw consent at any time without affecting prior lawful processing,
  • the right to lodge a complaint with the supervisory authority.

You can exercise your rights by e-mail at ahoj@hiroas.sk. We will reply within one month of receiving your request at the latest.

8. Supervisory authority

Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, e-mail: statny.dozor@pdp.gov.sk, web: dataprotection.gov.sk.

9. Security and changes to this policy

We have adopted appropriate technical and organisational measures to protect data against unauthorised access, loss or misuse. We may update this policy; the current version is always available on this page.