This concise notice explains how personal data is processed on kludne.sk.
Notice version 2026-09-09 · dated 2026-09-09
Nodowa s. r. o. is the controller for the processing described in this notice.
Nodowa s. r. o. · Registered office: Bernolákova 7896/13, 811 07 Bratislava – Staré Mesto, Slovenská republika · Company ID (IČO): 57 656 398 · Register entry: Obchodný register Mestského súdu Bratislava III, oddiel Sro, vložka č. 200058/B.
Use either monitored contact channel for privacy questions and rights requests.
Each operation has a specific purpose, data set, and lawful basis.
Pseudonymous session ID, structured answers, scores and the result are used to deliver the readiness check you request under GDPR Article 6(1)(b).
Only after consent, online identifiers, device and browser information, and allowlisted interaction events are used to measure use and improve the site under Article 6(1)(a). Refusal does not affect the service.
A hashed possession token, your decision, notice version, method and time are kept to demonstrate consent under Articles 6(1)(c) and 7(1). This is not an analytics profile.
The description and page URL are required. Email is optional. Necessary submission metadata is used to diagnose and correct reported problems under Article 6(1)(f).
Minimal request, security and diagnostic data are used to secure and operate the service under Article 6(1)(f).
Caller number and minimal call-history metadata are used to receive and respond to inquiries under Article 6(1)(f). Calls are live only: we do not record calls and voicemail is disabled.
We disclose data only to providers needed for these operations and do not sell personal data.
Render Services, Inc. processes hosting and database data. Production resources: Frankfurt, Germany. This does not rule out processing elsewhere. For EEA-to-US transfers, Render's DPA uses the EU-US Data Privacy Framework (DPF) and, if it does not apply or ceases to be available, the European Commission's Standard Contractual Clauses (SCCs).
Google Ireland Limited provides GA4 and is not contacted before consent. Transfers to participating US Google entities rely on the EU-US Data Privacy Framework (DPF); where no applicable adequacy framework is used, Google relies on Standard Contractual Clauses (SCCs).
Telecommunications providers receive the data needed for live telephone service and minimal call-history metadata.
These are the maximum launch retention periods.
Kept for approximately 2 hours from session creation.
Kept for up to 7 days and inaccessible to the live application except through a controlled restore.
Event and user data are kept for 2 months; resetting retention on new activity is off.
Kept for no more than 2 months and removed on withdrawal where accessible to the site.
Kept for 3 years from withdrawal, expiry, or the end of the processing to which the evidence relates.
Kept for 14 days.
Kept for 12 months from submission and deleted manually by Nodowa.
Kept for 30 days from the call and deleted manually by Nodowa.
Use the monitored privacy contact for applicable rights and the settings below for analytics consent.
You may request access, rectification, erasure, restriction and portability, and object where the GDPR makes those rights applicable. Contact privacy@kludne.sk.
You can withdraw consent as easily as you gave it. Withdrawal does not affect processing that was lawful before it.
You may complain to the Slovak supervisory authority at Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, statny.dozor@pdp.gov.sk, +421 2 3231 3214.
Úrad na ochranu osobných údajov Slovenskej republikyNecessary storage keeps your language and consent choice. GA4 storage is used only after consent; refusal does not affect the service.
The @kludny_bot bot provides a Slovak A2 readiness check in a private chat. It is operated by Nodowa s. r. o.; the contacts and rights described in this notice also apply to the bot operator’s processing of data. The check is intended for people aged 18 and over.
When you message the bot or press its buttons, Telegram sends us the message and technical data, including chat and user identifiers. Updates may also contain your profile name, username and interface language. We use the necessary data to process your action and reply in that chat. We do not store raw Telegram identifiers or profile data in assessment records or conversation state. The bot does not ask for a phone number, email or documents. Do not send it personal details; enter only answers to questions when prompted.
To continue the conversation, we temporarily store the selected language, assessment stage, current selection within a question and protected technical data for accessing the assessment. The conversation record is linked to the chat through a pseudonymous technical key. Structured answers, scores and the result are stored in the readiness service. Result access lasts one hour from the start of the assessment; active records are deleted within approximately two hours of its start. Recovery copies are retained for up to seven days and are unavailable to the live application except during a controlled restore.
Active conversation state automatically expires one hour after its last update. Separate pseudonymous technical markers that prevent the same action from being executed twice are retained for up to 24 hours and do not contain message text or answers.
The /delete command removes the assessment that the current conversation can still access from the active database, together with its answers and result. The /cancel and /restart commands clear conversation state; the previous assessment remains subject to automatic deletion. The /delete command does not erase message history in Telegram. Use Telegram’s message and chat deletion controls to manage that history.
Your messages, the bot’s replies and the result pass through Telegram. Telegram processes its platform data under its own privacy policy. Retention periods in our systems do not determine how long messages are stored in Telegram. We do not send bot conversation events, answers or results to GA4. If you visit kludne.sk, the rules described here and your analytics choice apply to your website visit.
For privacy questions or to exercise your rights, contact privacy@kludne.sk. Full controller details and other available contacts are provided above.