1. Controller
Data Controller:
PFM – EU, s. r. o.
IČO: 36577545
Halašova 22, 831 03 Bratislava, Slovakia
(We/Company)
2. Data We Process
A) Data Provided by You (lead forms/registration/contact):
● Name, surname
● e-mail
B) Website Usage Data (online identifiers and behavioural data):
● IP address (primarily recorded in server log files),
● cookies and/or advertising identifiers,
● information about the user’s device and browser,
● language preferences and approximate location (derived from the IP address),
● website events and user behaviour (e.g. page views, clicks, form submissions, and traffic source/referral information).
3. Purposes of Processing and Legal Basis
(1) Lead Collection and Communication Before / During the Campaign (via email).
Purpose: confirmation of registration, sending information about the campaign progress, updates and news, priority access, and campaign-related offers.
Legal basis:
consent (Art. 6(1)(a) of the GDPR) – typically for marketing communications and newsletters, where applicable, legitimate interest (Art. 6(1)(f) of the GDPR) – for necessary communications related to your registration (e.g. confirmation messages and essential service communications).
Note: For purely marketing emails, it is recommended to obtain explicit consent and provide a clear option to unsubscribe.
(2) Remarketing and Personalised Advertising (e.g. Google Ads, Meta)
Purpose: displaying advertisements to users who have visited the website and/or performed certain actions, creating remarketing audiences, and measuring the performance of advertising campaigns.
Legal basis: consent (Art. 6(1)(a) of the GDPR), granted via the cookie banner for the use of marketing cookies. In Germany in particular, obtaining such consent is generally considered essential.
(3) Website Analytics (e.g. Google Analytics / GA4)
Purpose: measuring website traffic and user behaviour, improving the website, and evaluating the performance of campaigns.
Legal basis: generally consent (Art. 6(1)(a) of the GDPR), obtained via the cookie banner for the use of analytical cookies (particularly relevant for audiences in Germany).
(4) Website Security and Operation (Server Logs, Abuse Prevention)
Purpose: ensuring the security of the website, detecting attacks or misuse, and maintaining the stability of the service.
Legal basis: legitimate interest (Art. 6(1)(f) of the GDPR).
4. Cookies, Consent and Preference Management
We use cookies and similar technologies on our website. Upon your first visit, you can set your preferences in the cookie banner (necessary/analytical/marketing cookies). You may change or withdraw your consent at any time via the “Cookie Settings” link available on the website. Without your consent, we will not store analytical or marketing cookies on your device (except for those that are strictly necessary for its operation).
5. Recipients of Personal Data (Who Has Access to the Data)
Your personal data may be disclosed to the following recipients: the provider of website hosting and IT administration services (acting as a data processor), Ecomail (email marketing and CRM platform), Google (e.g. Google Analytics and Google Ads) – provided by Google Ireland Limited within the EU, Meta Platforms (e.g. Facebook Pixel / Instagram advertising) – provided by Meta Platforms Ireland Limited, other service providers as necessary for the operation of the campaign where applicable. Indiegogo, Inc. (crowdfunding platform / campaign platform), 2261 Market Street #4731, San Francisco, CA 94114, USA.
6. Transfers to Third Countries (Outside the EU/EEA)
Some service providers (in particular, large advertising and analytics platforms) may process personal data outside the EU/EEA (for example, in the United States). In such cases, we ensure that the transfer is carried out subject to appropriate safeguards, typically through Standard Contractual Clauses (SCCs) and, where necessary, additional measures.
7. How Long We Store Data
● Leads and email contacts for campaigns: for the duration of the campaign and retained for up to 24 months from the last activity, or until consent is revoked/unsubscribed.
● Analytical data: according to tool settings
● Server logs: according to server security needs
● Cookies: according to cookie type (essential/analytical/marketing) and the lifetime specified in the cookie banner.
8. Automated decision-making and profiling
Remarketing may involve profiling (classifying users into audiences based on their behaviour on the website) to display relevant advertisements. We do not make decisions that would have legal effects on you or similarly significant impacts without human intervention.
9. Is providing data mandatory?
Providing data is voluntary. However, if you do not provide us with your email address in the lead form, we will not be able to send you information about the campaign. If you do not agree to analytical/marketing cookies, the website will still function, but some measurements and ad personalisation will be inactive.
10. Your rights
You have the right:
● to access your data,
● to correct it,
● to delete it,
● to restrict its processing,
● to data portability (receive your data in a structured format),
● to object to processing based on legitimate interest,
● withdraw consent (if we process based on consent) – without affecting the lawfulness of processing before withdrawal.
11. How to exercise your rights
Write to us at olexa@pfm-eu.sk. We may request reasonable verification of your identity to protect your data.
12. Complaint to the supervisory authority
If you believe that your personal data is being processed improperly, you have the right to file a complaint with the relevant supervisory authority.
Slovakia: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, statny.dozor@pdp.gov.sk.
For individuals in Germany, the competent supervisory authority is that of the German federal state where you reside or where the alleged infringement occurred.
13. Data security
We take appropriate technical and organisational measures (access rights, system security, encryption where appropriate, and internal processes).
14. Changes to the document
This document may be updated. The current version is always published on the website.
Effective from: 13.4.2026