This privacy statement was last updated on 21. October 2026 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via https://specify.sk/en_gb. We recommend that you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

2. Sharing with other parties

We only share this data with processors and with other third parties for which consent must be obtained.

Processors

Name: Brevo
Country: France
Purpose: Manage contacts in CRM, communicate and send newsletters based on actual usage

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. 

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organization is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

The security measures we use consist of:

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend that you read the privacy statements of these websites prior to making use of these websites.

7. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: You have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

9. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.

10. Contact details

Specify sro.
Spitalska 53, 811 01 Bratislava
Slovakia
Website: https://specify.sk/en_gb
Email: konzultacia@ex.comspecify.sk

Annex

Compliance | The Privacy Suite for WordPress

This website uses the Privacy Suite for WordPress by Complianz to collect consent records. For this feature, your IP address is anonymized and stored in our database. For more information, see Privacy Statement Compliance.

Really Simple Security

The Really Simple Security and Really Simple Security plugins do not process any personal data, so the GDPR does not apply to these plugins or your use of these plugins on your website. You can find our privacy policy here. here.

Popup Maker – pop-ups and cookies

Purpose of processing: We use the Popup Maker plugin to display informational notifications and offers on the specify.sk website. Cookies are used to limit the repeated display of the same pop-up window.

Data processed: Information about the display of the pop-up window or the execution of the corresponding action, stored via cookies. The display of the window itself does not require the provision of a name or email address. If the window contains a form, we process the data submitted through this form according to its purpose and the relevant part of this statement, for example when booking a consultation or contacting us.

Legal basis: We store optional cookies based on your consent given through your cookie settings. If your use involves the processing of personal data, the legal basis is Article 6(1)(a) GDPR. You can change or withdraw your consent at any time through your cookie settings on our website.

We store data submitted via forms according to the periods specified for the respective processing purpose. The validity of the cookie does not determine the retention period of form data.

Recipients and data transfers: Popup Maker itself does not send personal data of visitors to the plugin manufacturer by default. The data stored on our website is available to authorized persons and contracted hosting and IT support providers to the extent necessary. If the form uses an external service, its involvement and any data transfers are listed in the relevant section of this statement.

Details on the use and management of cookies: Cookie Policy.

LatePoint – reservations and organization of consultations

Purpose of processing: We use the LatePoint plugin on specify.sk to book appointments. Through it, we accept consultation orders, record appointments, and send confirmations, comments, and organizational information. We cannot process a reservation without the necessary contact information.

Data processed: Name, surname, e-mail address, or phone number and company name, selected service, date and status of the reservation, and information that the client provides in the reservation form. We only process data necessary to process the reservation and related communication.

Legal basis: When communicating with representatives of corporate clients, we use Article 6(1)(f) GDPR – the legitimate interest of Specify sro in organizing consultations and managing business relationships. If the client is a natural person, including an entrepreneur, who concludes a contract in his own name, the processing necessary for the preparation and performance of this contract is based on Article 6(1)(b) GDPR. You can object to processing based on legitimate interest in the manner specified in this statement.

Data recipients: The data is accessed to the extent necessary by authorized persons and contracted providers of hosting, IT support and delivery of organizational messages. When booking an online consultation, we provide Zoom with the data necessary to organize the meeting. We provide the rules for using Zoom and Fathom in separate sections of this statement.

Retention period: We store contact details and organizational communication for reservations for a maximum of 12 months from the last communication. We store reservation data for a maximum of 12 months from the date of booking or cancellation. Data required for subsequent contractual cooperation is subject to separate rules according to the purpose of this cooperation and legal obligations. You can find our privacy policy here here.

Zoom – voice calls and video consultations

Purpose of processing: We use Zoom for remote voice calls and video consultations, discussing client business needs, presenting proposals, and providing agreed-upon services.

Data processed: Identification and contact data of participants, meeting and attendance data, voice, or video when the camera is on, shared screen, messages and files transferred during the meeting. Zoom also processes technical data necessary for the connection and operation of the service, such as IP address and device and connection data.

Legal basis: When communicating with representatives of corporate clients, Article 6(1)(f) GDPR – the legitimate interest of Specify sro in conducting business communication and providing consultations to corporate clients. If the client is a natural person, including an entrepreneur, who concludes a contract in his own name, the processing necessary for the preparation and performance of this contract is based on Article 6(1)(b) GDPR. Recording and automatic transcription by Fathom are subject to separate rules set out below.

Recipients and storage: The service provider is Zoom Communications, Inc. Its contractors are involved in providing the service. Processing on our behalf is governed by the relevant terms and conditions for processing personal data pursuant to Article 28 of the GDPR. We retain organizational consultation data in our records for a maximum of 12 months after the appointment is made or cancelled. If Zoom processes certain data for its own purposes as a separate controller, it applies its own data protection and retention rules.

Transfers outside the EEA: When using Zoom, data processing may occur in the USA and other countries outside the European Economic Area. Transfers are made on the basis of an appropriate adequacy decision, including the EU–US Data Privacy Framework, if applicable to the specific recipient and the transfer, or on the basis of standard contractual clauses and necessary additional measures. You can request information about the recipients and the safeguards used, including the possibility of obtaining a copy of them, at konzultacia@specify.sk.

Details: Zoom Privacy Statement.

Fathom – communication transcription and AI annotations

Purpose of processing: During Zoom consultations, we use Fathom, with the consent of the participants, to record the conversation, automatically transcribe spoken speech into text, and create AI notes, summaries, tasks, and agreed-upon next steps. The purpose is to accurately capture requirements and agreements, provide text output to the client, and improve the quality of the consultations provided.

Data processed: Conversation content, names and email addresses of participants, speaker designations, meeting details, audio recording, text transcription and AI-generated notes. During audio-visual recording, the camera image or shared screen image is also processed. We will inform participants of the specific scope of recording before it begins.

Legal basis and consent: We perform the recording, automatic transcription, creation of AI recordings and their prior notification of transmission on the basis of individual, informed and voluntary consent pursuant to Article 6(1)(a) of the GDPR. We obtain consent from each participant before the recording begins. Reading this statement, booking an appointment, joining the call or remaining silent does not replace this consent.

Consultation without recording and withdrawal of consent: Recording is not a requirement for the consultation. If any participant does not consent, the consultation will be conducted without recording and automatic transcription via Fathom; if necessary, we will create manual working notes to the extent necessary for business communication. Consent can be revoked at any time during the meeting or by email to konzultacia@specify.sk. After the withdrawal, we will stop the processing based on consent and will ensure the deletion of the relevant data without undue delay, unless there is a separate legal reason for their retention. The withdrawal does not affect the lawfulness of the processing before its withdrawal.

Sending entries: After the consultation, a text AI recording is automatically sent to the client and the relevant consultant Specify sro. We will announce the scope of the sent outputs and their recipients before the recording begins. We make the outputs available only to persons authorized to familiarize themselves with the content of the consultation.

Retention period and deletion: We retain consultation records for a maximum of 30 days from the meeting. We retain text transcripts and AI notes for a maximum of 90 days from the meeting. Deletion from Fathom and from local and other storage in our administration is ensured by Specify sro, operating under the brand Specify Labs, on an ongoing basis and at the latest by the expiry of the relevant period. The periods also apply to exports, files and email copies managed by us.

We will delete the entire Fathom call, including associated text outputs, no later than 30 days after the meeting. We may retain necessary text copies outside of Fathom for up to 90 days after the meeting. We will delete unnecessary data sooner. Deletion from the provider's technical systems and backups is governed by its contractual and technical procedures. Copies delivered to the client remain under its control. Separate approved follow-up documents, such as an order or specification, are subject to their own purpose, legal basis and retention period.

Accuracy of AI outputs: Transcriptions and AI transcriptions may contain errors. You can report inaccuracies to us at konzultacia@specify.sk. AI registration does not replace an approved order or contract. We do not use the outputs for decisions with legal or similarly significant effects based solely on automated processing.

Provider and transfers outside the EEA: The service is provided by Fathom Video Inc. Processing on our behalf is governed by a data processing agreement pursuant to Article 28 of the GDPR. Data may also be processed to the extent necessary by its contractors, including AI providers. Any processing by the provider for its own purposes is described in its privacy policy.

Fathom states that data is stored in the USA; processing may also take place in other countries outside the EEA. Transfers are made on the basis of an appropriate adequacy decision, including the EU–US Data Privacy Framework, if applicable to the recipient and the transfer, or on the basis of standard contractual clauses and necessary additional measures. You can request information about the recipients and the safeguards used, including the possibility of obtaining a copy of them, at konzultacia@specify.sk. Consent to recording does not replace the requirements for the lawfulness of international transfers.

Details: Privacy Policy Fathom a Fathom Data Processing Agreement.

TranslatePress – multilingual website and automatic translation via Google Cloud

Purpose of processing: We use the TranslatePress plugin to provide multilingual content on specify.sk. Automatic text translation is provided by the Google Cloud Translation service via the API.

Data processed: Text content to be translated and information about the source and target languages. If the translated text contains personal data, such as a name or other data identifying a specific person, this data is also processed during the translation. We limit the scope of processing to the content necessary to provide language versions of the website.

Legal basis: If personal data is processed during translation, we base it on Article 6(1)(f) GDPR – the legitimate interest of Specify sro in making the website content available in multiple languages and providing visitors with clear information. You can object to processing based on legitimate interest at konzultacia@specify.sk.

Data recipients: When automatically translating via our Google Cloud API key, the texts are sent directly to the Google Cloud Translation service provider. The processing of personal data on our behalf is governed by the Cloud Data Processing Addendum pursuant to Article 28 of the GDPR. Google Cloud contractors may participate in the provision of the service. Authorized persons and contracted hosting and IT support providers have access to the translations stored on our website to the extent necessary.

Retention period: The translations created are stored in our website database and are kept for the period necessary to provide the relevant content. Translations containing personal data are subject to the period specified for the original data; after this period, we will also ensure their removal from the translation database.

Google states that when processed via the Cloud Translation API, translated text is stored in memory for a short period of time to perform the translation and is not used to train or improve translation models. Technical and operational data about the use of the service has separate retention policies according to Google Cloud Privacy Notice.

Transfers outside the EEA: When using the service, data may be processed in the USA and other countries outside the European Economic Area. The protection of transfers is based on the relevant adequacy decision, if applicable to the transfer, or on the Google Cloud Standard Contractual Clauses and necessary additional measures. You can request information about the recipients and the safeguards used, including the possibility of obtaining a copy of them, at konzultacia@specify.sk.

Details: Privacy Policy TranslatePress, Google Cloud and GDPR a Google Cloud Data Processing Agreement.