Personal Data Processing Information

1. Identity of the Controller

The controller of personal data is:

For questions concerning personal data processing or the exercise of your rights, contact us at hello@edgehubacademy.com.

2. General Information

The Controller processes personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”), Slovak Act No. 18/2018 Coll. on Personal Data Protection and the relevant provisions of Slovak Act No. 452/2021 Coll. on Electronic Communications.

We process personal data only for specified purposes, to the extent necessary and for an appropriate period. We primarily obtain personal data directly from users through the form or subsequent communication.

3. Processing Activities

3.1 Delivery of the Free E-book

The purposes of processing are:

• receiving and recording the e-book request,
• delivering the correct language version,
• resolving potential delivery issues,
• protecting the form against duplicate or abusive submissions.

The legal basis for delivering the e-book is Article 6(1)(b) GDPR – processing necessary to provide the free digital content requested by the data subject.

We may process necessary technical information to protect the form, secure the service and prevent abuse based on Article 6(1)(f) GDPR – the Controller’s legitimate interest in maintaining a secure and reliable website.

Processed data may include:

• name, if provided,
• email address,
• selected language,
• submission date and time,
• page path and traffic source,
• IP address, browser type and basic technical information,
• email delivery information.

Providing an email address is necessary to deliver the e-book. The e-book cannot be delivered without it. Providing a name is optional.

Data connected with e-book delivery is retained for no longer than 6 months after submission unless another legal basis requires further processing. Technical logs may be retained for a shorter period according to the relevant provider’s settings.

3.2 EdgeHub News and Marketing Communications

Where a user provides separate voluntary consent, we may send by email:

• EdgeHub news,
• practical artificial intelligence tips,
• information about the platform launch,
• information about EdgeHub products, services, memberships and offers.

The legal basis is Article 6(1)(a) GDPR – the data subject’s consent. Consent is voluntary and is not required to receive the free e-book.

We primarily process:

• name, if provided,
• email address,
• selected language,
• the wording, version, date and time of consent,
• technical data required to demonstrate consent,
• message delivery and link interaction data where such measurement is enabled.

Consent may be withdrawn at any time through the unsubscribe option included in a marketing message or by emailing hello@edgehubacademy.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Data is retained until consent is withdrawn and no longer than 24 months after the user’s last demonstrable activity. A necessary record of the granting or withdrawal of consent may subsequently be retained for as long as required to demonstrate compliance and protect legal claims, for no longer than 4 years.

3.3 Communication and Requests

If a user contacts us by email, we process their data to receive and handle the message, answer questions and conduct subsequent communication.

Depending on the content of the communication, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR – the legitimate interest in properly handling communication and protecting the Controller’s rights.

We primarily process the user’s name, email address, message content and any additional information voluntarily provided.

We generally retain communication for no longer than 12 months after it ends unless a contractual relationship, legal claim or another reason requires longer retention.

3.4 Technical Operation and Local Storage

The website may use necessary local storage to:

• remember language or visual preferences,
• protect against repeated submission of the same form,
• provide secure and correct website functionality.

We do not use these technologies for advertising profiling. Users can remove locally stored data through their browser settings. If analytics or advertising technologies are added in the future, we will update this Policy and the applicable consent mechanism before activating them.

4. Recipients of Personal Data

Personal data may be disclosed, to the extent necessary, to:

• Netlify, the provider of hosting, forms and server-side functions,
• Resend, the email delivery provider,
• Websupport, the domain and email service provider,
• providers of necessary IT support,
• public authorities where disclosure is required by law or a binding decision.

The Controller uses providers only to the extent necessary to operate the service and requires appropriate protection of personal data.

5. Transfers to Third Countries

Some technology providers may be established or operate technical infrastructure outside the European Economic Area, particularly in the United States.

Where personal data is transferred outside the European Economic Area, the transfer is based, as applicable, on a valid adequacy decision, the EU–US Data Privacy Framework, Standard Contractual Clauses or another mechanism permitted under the GDPR.

6. Automated Decision-Making and Profiling

We do not use automated individual decision-making or profiling that produces legal effects or similarly significantly affects users.

7. Data Subject Rights

Subject to the conditions established by the GDPR, data subjects have the right to:

• request access to their personal data,
• request correction of inaccurate or completion of incomplete data,
• request erasure of personal data,
• request restriction of processing,
• receive their data in a portable format where the legal conditions are met,
• object to processing based on legitimate interests,
• object to direct marketing at any time,
• withdraw consent at any time where processing is based on consent,
• lodge a complaint with the competent supervisory authority.

Rights may be exercised by emailing hello@edgehubacademy.com. We will respond without undue delay, generally within one month.

The competent supervisory authority is:

8. Personal Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

9. Final Provisions

We may update this Policy, particularly where the services used, purposes of processing or applicable law change. The current version will always be published on this website.