Privacy Policy
Effective from 7 October 2026
We process your personal data responsibly, only to the extent we need, and in line with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection. On this page you will find what data we process, why, for how long and what your rights are.
1. Who processes your data
INdividuality s. r. o., operator of the Ardan & Preston brand
Na Troskách 780/2, 974 01 Banská Bystrica, Slovakia
Company ID (IČO): 53 073 193, Tax ID (DIČ): 2121255818
Registered in the Commercial Register of the District Court Banská Bystrica, section Sro, file No. 38870/S
Email: info@ardanpreston.com, phone: +421 904 259 223
You can contact us about data protection at the email or phone number above. We have not appointed a data protection officer, as the law does not require us to.
2. What data we process and why
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Replying to your enquiry (email, phone, website form, social media message) | name, email, phone, company, message content | steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR, or our legitimate interest in answering questions, Art. 6(1)(f) | until the enquiry is handled; if no cooperation follows, at most 2 years from the last contact |
| Lead forms in Facebook and Instagram ads | the data you enter in the form (usually name, email, phone, company and answers to questions) | steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR; if the form includes consent to receive news, your consent, Art. 6(1)(a) | at most 2 years from submitting the form or until consent is withdrawn |
| Client work and invoicing | contact and billing details of clients and their contact persons | performance of a contract, Art. 6(1)(b) GDPR, and legal obligations, Art. 6(1)(c) | for the duration of the contract; accounting records 10 years under the Accounting Act |
| Sending news and offers by email | name, email | your consent, Art. 6(1)(a) GDPR; for existing clients our legitimate interest, Art. 6(1)(f) | until consent is withdrawn or you object |
| Measuring website traffic and advertising (cookies) | online identifiers, device data and website behaviour | your consent, Art. 6(1)(a) GDPR and § 109(8) of Slovak Act No. 452/2021 Coll. on electronic communications | depending on the cookie, at most 2 years, or until consent is withdrawn |
| Secure operation of the website | IP address, browser type, time of access (server logs) | our legitimate interest in website security, Art. 6(1)(f) GDPR | only as long as needed to keep the website secure |
| Establishing and defending legal claims | data needed to prove a claim | our legitimate interest, Art. 6(1)(f) GDPR | for the limitation period |
Providing your data is voluntary. Without contact details, however, we cannot reply to you or prepare an offer. We do not sell personal data and do not use it for any purpose other than the one it was collected for.
3. Advertising on Facebook and Instagram
We also promote our services through ads run by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (Facebook and Instagram).
- Lead forms in ads. If you fill in a form directly in an ad, Meta passes the data you entered to us. We use it only to contact you about the offer you showed interest in. Meta’s own processing is governed by its policy at facebook.com/privacy/policy.
- Ad measurement and targeting. If we use ad measurement tools on the website (for example the Meta Pixel), they only run with your consent. They help us see whether ads work and show them to people who may find them relevant.
- Our social media profiles. For the insights of our Facebook and Instagram pages we are joint controllers with Meta. We process the messages you send us in order to reply.
4. Cookies
Cookies are small files that a website stores in your browser.
- Necessary cookies keep the website working, for example by remembering your chosen language. We do not need your consent for them.
- Analytics and marketing cookies are used only with your consent, which you can withdraw at any time.
- Embedded content. The website shows Instagram posts and videos from platforms such as YouTube or Facebook. When this content loads, these providers may process your IP address and set their own cookies under their own policies.
You can delete or block cookies at any time in your browser settings.
5. Who we share data with
We share data only to the extent necessary with these recipients:
- providers of web hosting, email and the software tools we use in our work (processors),
- Meta Platforms Ireland Limited for advertising and forms on Facebook and Instagram,
- our external accountants and legal advisers,
- public authorities where required by law.
All our processors are bound by contracts that oblige them to protect your data.
6. Transfers outside the EU
Some providers, such as Meta or Google, may transfer data to the USA. Such transfers rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
7. Your rights
In relation to the processing of your personal data you have the right to:
- access your data and receive a copy,
- have inaccurate or incomplete data corrected,
- have your data erased when it is no longer needed or you have withdrawn consent,
- restrict processing,
- data portability,
- object to processing based on legitimate interest and to direct marketing,
- withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal,
- lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
You can exercise your rights by email at info@ardanpreston.com. We will reply without undue delay and within one month at the latest.
8. Automated decisions and security
We do not make decisions with legal or similarly significant effects based solely on automated processing. We protect your data with appropriate technical and organisational measures, such as encrypted connections, restricted access and regular updates.
9. Changes to this policy
We may update this policy from time to time. The current version is always published on this page together with its effective date.
