Privacy policy

1. Data controller

The data controller responsible for processing personal data described in this policy is:

Invictus Solutions s. r. o.
Bratislava, Slovenská republika
IČO: 57030219
DIČ: 2122539155
Registered with Mestský súd Bratislava III, entry no. Sro/188921/B
Contact: info@invictus-solutions.sk, +421 904 855 624

2. Scope of this policy

This policy covers the website at invictus-solutions.sk (and aliases) and any direct correspondence you initiate with us — email, phone, LinkedIn message, or via the Cal.com booking link in the contact section.

3. What we do not do

• We do not use cookies for tracking, analytics, advertising, or profiling.
• We do not run third-party analytics scripts (no Google Analytics, no Meta pixel, no anything).
• We do not share your data with marketing platforms, ad networks, or data brokers.
• We do not host a contact form on the site. The "Contact" section opens your own email client (mailto:) and the calendar link goes to Cal.com.

4. What we do collect, and why

4.1 Inquiries you send us

When you email us, call us, or message us on LinkedIn, we receive whatever information you choose to send: typically your name, business email, company name, and the subject of your inquiry.

• Lawful basis: Article 6(1)(f) GDPR — legitimate interest in responding to business inquiries; or 6(1)(b) where the inquiry is a step toward a contract.
• Retention: Active correspondence as long as needed to complete the matter; archived business correspondence retained for up to three (3) years from last contact, then deleted, unless a longer retention is required by law (e.g. tax records).
• Recipients: Only us. Email is hosted on infrastructure we operate and is not shared with third parties.

4.2 Booked calls (Cal.com)

If you book a call via the calendar link, that booking is processed by Cal.com as an independent processor. We receive your name, email, and the time you selected.

• Lawful basis: Article 6(1)(b) GDPR — pre-contractual measures.
• Retention: Calendar entries retained for the duration of the engagement plus 12 months.
• Recipients: Cal.com (data processor). Their privacy policy is available on their site.

4.3 Server access logs

Our web server keeps standard access logs (IP address, request path, user agent, timestamp, response code). These are used solely to operate and secure the site, not for analytics.

• Lawful basis: Article 6(1)(f) GDPR — legitimate interest in operating and securing the site.
• Retention: 30 days, after which logs are deleted.
• Recipients: The hosting provider that operates the underlying server, under a data processing agreement.

4.4 Local browser preferences

Your dark/light theme preference is stored in your browser's localStorage. This data never leaves your device and is exempt from consent requirements as it is strictly necessary to provide functionality you explicitly requested.

5. International transfers

Our hosting and Cal.com may process data outside the EEA. Where this is the case, transfers are governed by the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Your rights under the GDPR

You have the right to:

• Access the personal data we hold about you (Art. 15)
• Have inaccurate data corrected (Art. 16)
• Have your data erased where there is no overriding lawful basis (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time, where processing is based on consent (Art. 7)

To exercise any of these rights, email info@invictus-solutions.sk. We will respond within 30 days.

7. Right to lodge a complaint

If you believe your data is being processed unlawfully, you may lodge a complaint with the Slovak supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava 27
dataprotection.gov.sk

8. Changes to this policy

We may update this policy when our practices change. The "last updated" date at the top of the page reflects the most recent revision.