Privacy Policy

1. Who is responsible for your data

MS Consulting Agency (“we”, “us”) is the data controller for the personal data described in this policy. You can reach us at:

MS Consulting Agency
Lazaretská 23, 811 09 Bratislava, Slovakia
Email: info@msconsultingagency.eu · Phone: +421 944 669 615

If you have any question about how we handle your data, write to us at the address above and we will answer within 30 days.

2. What data we collect

Data you give us

When you use the enquiry form, or write or call us, we collect the details you choose to provide: your name, email address, telephone number (optional), the subject you select and the content of your message. If we go on to work together, we may also process the information necessary for that engagement — for example details of a property, a transaction or a company.

Data collected automatically

Our web server records standard technical data for every request: IP address, date and time, the page requested, the referring page and the browser identification string. When you submit the form we store the same technical data alongside the message so that we can investigate abuse.

What we do not collect

We do not use advertising networks, tracking pixels, social-media trackers or profiling of any kind, and we do not collect special categories of personal data through this website.

3. Why we use it, and on what legal basis

• To answer your enquiry and prepare a possible engagement — Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
• To perform an agreement once we work together — Article 6(1)(b) GDPR.
• To keep the website secure and to stop spam and abuse — Article 6(1)(f) GDPR (our legitimate interest in a working, non-abused service).
• To load the embedded map — Article 6(1)(a) GDPR (your consent, which you give through the banner and can withdraw at any time).
• To meet legal obligations, such as accounting and tax record-keeping — Article 6(1)(c) GDPR.

We never sell your data, and we do not use it to send marketing you have not asked for.

4. How long we keep it

• Enquiries that do not lead to an engagement — up to 24 months from our last exchange, then deleted.
• Client records — for the duration of the engagement and afterwards for as long as Slovak accounting and tax law requires (generally 10 years).
• Technical form logs (IP, time, verdict) — 12 months, then rotated and deleted.
• Your cookie choice — stored in your own browser for 12 months, or until you clear it.

5. Who else sees it

Your data stays with us. We share it only where it is necessary, and only with:

• Our hosting provider, which operates the server on which this website and our mailboxes run, within the European Union, under a data-processing agreement.
• Professional advisors (for example an accountant or lawyer) where the law requires it or where it is necessary for a matter you have instructed us on.
• Counterparties you ask us to approach — and only with the information you have agreed we may pass on.
• OpenStreetMap, if you consent to the embedded map: your IP address reaches the OpenStreetMap Foundation when the map loads. Without that consent, no request is made.

We do not transfer your data outside the European Economic Area for our own purposes. Where a matter you instruct us on involves a country outside the EEA, we will tell you beforehand.

6. Cookies and local storage

This website sets no advertising or analytics cookies. It stores one item in your browser, and only after you make a choice:

Third-party content is blocked until you allow it. The map on our contact page is not requested from OpenStreetMap unless you press Accept all or Load the map. The fonts and images on this site are served from our own server, so no third party learns that you visited.

You can change your mind at any time using the Cookie settings link at the bottom of any page, or by clearing your browser storage for this site.

7. Your rights

Under the GDPR you have the right to:

• ask what data we hold about you and receive a copy of it;
• have inaccurate data corrected;
• have your data erased where there is no longer a reason for us to keep it;
• ask us to restrict how we use it while a question about it is resolved;
• receive the data you gave us in a portable, machine-readable form;
• object to processing based on our legitimate interest;
• withdraw a consent you gave, at any time, without it affecting what was lawful beforehand.

Write to info@msconsultingagency.eu and we will deal with your request free of charge, normally within 30 days.

If you believe we have handled your data wrongly you can also complain to the Slovak supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

8. How we protect it

The website is served over HTTPS with a valid certificate and strict transport security. The enquiry form is protected against automated abuse and rate-limited. Message records are stored outside the public web directory, on a server we control, with access restricted to the people who need it. Our email is authenticated with SPF, DKIM and DMARC so that messages claiming to be from us can be verified.

No system is perfect. If a breach ever affects your rights, we will notify the supervisory authority within 72 hours and tell you directly where the law requires it.

9. Children

Our services are aimed at businesses and adults. We do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, tell us and we will delete it.

10. Changes to this policy

We update this policy when our practices or the law change. The date at the top always shows the current version. Material changes will be announced on this page before they take effect.