Privacy Policy
Trinity Studio — a brand and division of TurnOnline.biz s.r.o.
Effective from: 4 July 2026 · Version: 1.0
The Slovak version is legally binding. In case of any discrepancy, the Slovak text prevails (Section 10).
1. Controller
The controller of personal data is:
- TurnOnline.biz s.r.o., brand/operation Trinity Studio
- Registered seat: Antolská 3721/4, 851 07 Bratislava, Slovak Republic
- ID No. (IČO): 44 749 619 · registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, insert No. 58171/B
- Data-protection contact: support@turnonline.biz
Processing complies with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on personal data protection, as amended.
2. Scope
This policy covers processing in connection with our website and business communication (enquiries, booking the initial consultation). It does not cover personal data we process as a processor on behalf of our clients when delivering services — that is governed by a separate Data Processing Agreement (DPA) concluded with the relevant client.
3. What data we process, why, and on what legal basis
| Data category | Purpose | Legal basis (GDPR) |
|---|---|---|
| Identification and contact data you provide (name, e-mail, phone, company, message) when contacting us or booking the initial consultation | Responding to enquiries, communication and pre-contractual steps | Art. 6(1)(b) (pre-contractual measures) and (f) (legitimate interest in communicating) |
| Technical operational data (e.g. IP address, browser type, access time) automatically logged by hosting | Website operation, security and stability | Art. 6(1)(f) (legitimate interest in secure operation) |
Our website currently uses no analytics or marketing cookies, tracking tools or profiling. Should we introduce them, we will do so only on your consent (Art. 6(1)(a)) and update this policy.
4. Recipients and processors
We may share personal data with our service providers (processors) acting under an Art. 28 GDPR contract:
- Google (Google Cloud / Firebase Hosting) — website hosting; Google Workspace — e-mail communication.
We process our website and personal data within the European Union (EU) region; applications we build and operate for clients are likewise hosted in the EU region unless otherwise agreed with the client. Where the provider allows it, we select EU data residency.
We do not disclose personal data to third parties for marketing, and we do not sell it.
5. International transfers
Some providers (e.g. Google) may process data outside the EEA. Such transfers occur only under Chapter V GDPR — on the basis of an adequacy decision (EU–US Data Privacy Framework) and/or Standard Contractual Clauses (SCCs).
6. Retention
We keep personal data only as long as necessary:
- Enquiries and business communication: for the time needed to handle the enquiry and then no more than 2 years from the last contact, if no contract arises.
- Technical operational logs: no more than 6 months.
If a contract arises, we keep data for its term and thereafter for the period required by law (e.g. accounting and tax records).
7. Your rights
As a data subject you have the right to: access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where we process on consent, you may withdraw it at any time. Exercise your rights at support@turnonline.biz.
You also have the right to lodge a complaint with the supervisory authority:
- Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, www.dataprotection.gov.sk.
8. Automated decision-making
We do not carry out automated individual decision-making, including profiling, producing legal effects on data subjects.
9. Changes
We may update this policy; the current version, with its effective date, is always available on our website.
10. Language
This policy is drawn up in Slovak and English; in case of conflict, the Slovak version prevails.