Privacy Notice
Last updated: 2026-09-14
This notice explains what personal data TGS Consult s.r.o. collects through this website, why, and for how long.
Data controller
TGS Consult s.r.o., IČO 54 396 590, DIČ 2121659496, Bleduľová 6756/12, 841 08 Bratislava, Slovakia — operated by Vladimír Fejdi, Managing Director & Owner. Contact via the form on this site or via LinkedIn.
Contact form
When you submit the contact form we store your name, e-mail address, and message, and e-mail them to the site owner, solely to respond to your inquiry. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), given when you submit the form.
AI chat conversations
If you use the AI chat assistant, your conversation (a session ID, the messages, and timestamps) is logged on our server to maintain service quality and prevent abuse. Messages are sent to a third-party AI model provider solely to generate a response, and the text of your question may additionally be sent to OpenAI as an embeddings (similarity-search) request so the assistant can retrieve relevant background from this site's own published content — see "Third parties" below. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in maintaining service quality and preventing abuse.
Anonymous visit analytics
We collect anonymous visit analytics through a first-party beacon: page path, referrer, and screen width, together with your IP address with the last octet zeroed (anonymized) — never your full IP address. We do not use cookies or third-party trackers for this. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in measuring traffic; the data is anonymized.
API request logs
Our server logs metadata for API requests (timestamp, method, path, status, duration, anonymized IP) for operational and security purposes. Request bodies are never logged.
Security logs
When our systems detect a security-relevant event — an automated vulnerability scan, a blocked abusive chat request, a failed administrator sign-in, or a spam bot caught by our form protections — we record it together with the full (non-anonymized) IP address of the request. The legal basis is our legitimate interest in network and information security (Art. 6(1)(f) GDPR, Recital 49). These security logs are kept for approximately 3 months and are then deleted automatically. They are used solely to investigate and block abuse and, where warranted, to report it to the network or hosting provider of the source. Our hosting platform (Microsoft Azure) may additionally keep its own infrastructure access logs, subject to its own retention. Ordinary visits are not affected — regular analytics and request logs continue to store anonymized IP addresses only.
Retention
We retain contact-form messages, chat logs, and analytics data for up to 12 months, after which they are deleted.
Your rights
Under the GDPR you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, and to data portability. You may exercise any of these rights by e-mailing us or messaging via LinkedIn. If you believe your rights have been infringed, you also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky).
Third parties
We do not sell or share your personal data with third parties, except: the AI model provider (OpenAI, Anthropic, or Google, depending on current configuration) which processes chat messages solely to generate a response, OpenAI, which additionally processes chat questions as embeddings (similarity-search) requests solely to retrieve relevant site content for the answer, and Azure Communication Services, which delivers e-mail notifications on our behalf.