Skip to content

Privacy Policy

How data is handled. Plainly.

This page describes how Sophotech s.r.o. collects, processes, and protects personal data through sopho.tech and the forms it serves. Sophotech is the data controller under Article 4(7) of Regulation (EU) 2016/679 (GDPR).

Controller: Sophotech s.r.o., Karpatské námestie 7770/10A, 831 06 Bratislava, Slovenská republika. Contact: contact@sopho.tech. Full company details on the Imprint.

What this page covers

This policy applies to personal data processed in connection with sopho.tech and the forms it serves (general contact, job applications). Engagement-specific processing under a separate MSA, SOW, or DPA is governed by those agreements on their own terms — this page does not duplicate or override them.

Personal data we collect

Sophotech only collects personal data you submit through the forms below or that the site infrastructure logs for security purposes.

  • Contact form: name, email, and your message. Optional fields where present: company, role, phone. The form handler records the submission IP address and timestamp.
  • Job application: name, email, the position applied for, and the resume file (PDF) you upload. Optional fields where present: phone, cover note. The form handler records the submission IP address and timestamp.
  • Anti-spam verification: when Cloudflare Turnstile loads on the form pages, Cloudflare receives the request IP address and browser and page-interaction signals, used to score the submission. See Cookie Policy — Anti-spam verification for the cookie set on the user side.
  • Server access logs: IP address, request metadata, and timestamp, captured by Cloudflare at the edge for security and operational purposes.
  • Usage analytics: pages viewed, the referring site, and general browser, device, and approximate-location (country) information, together with the IP address and request metadata used to derive it, to measure how the site is used.

Purposes and legal basis

  • Responding to inquiries — GDPR Art. 6(1)(b), steps prior to entering a contract at your request.
  • Processing job applications — GDPR Art. 6(1)(b), steps prior to entering an employment or contractor relationship at your request.
  • Operating, securing, and maintaining the site — GDPR Art. 6(1)(f), legitimate interest in keeping sopho.tech available and protected.
  • Measuring how the site is used (analytics) — GDPR Art. 6(1)(f), legitimate interest in understanding how visitors find and use the site.
  • Preventing form abuse (anti-spam verification) — GDPR Art. 6(1)(f), legitimate interest in protecting the form handler from automated abuse.
  • Recognising visitors interested in our services (optional cookies) — GDPR Art. 6(1)(a), your consent, which you can withdraw at any time via "Cookie settings" in the footer.
  • Complying with legal obligations — GDPR Art. 6(1)(c), where applicable Slovak law requires retention or disclosure.

Only the optional cookies described in the Cookie Policy are based on your consent (Art. 6(1)(a)); you can withdraw it at any time. All other processing relies on the bases above.

Recipients and subprocessors

Sophotech relies on the following processors and recipients in connection with this site.

  • Cloudflare, Inc. (United States, with EU edge presence) — site hosting, form delivery, file storage, and edge security, including anti-spam verification.
  • Form-data platform (United States) — storage of contact and job-application records.
  • Audience-identification provider (United States) — sets optional cookies, only with your consent, to recognise visitors interested in our services. Inactive until you accept optional cookies.
  • Analytics provider — measures how the site is used.

International transfers

Several of the processors listed above are established in the United States. Transfers to them occur on the basis of the European Commission's Standard Contractual Clauses (GDPR Art. 46), supplemented by encryption in transit and scoped access. Where a processor publishes a current Data Protection Addendum or EU-US Data Privacy Framework certification, Sophotech relies on those instruments where applicable.

Anti-spam verification

Forms on this site load Cloudflare Turnstile to distinguish human submissions from automated abuse. Cloudflare receives the request IP address and browser and page-interaction signals, used to score the submission. Turnstile itself does not set tracking cookies, and Cloudflare's privacy policy applies to that processing: https://www.cloudflare.com/privacypolicy/.

Retention

  • Contact form submissions: 24 months after last contact, then deleted.
  • Job applications and resume files: 6 months after the role closes or is filled, unless you ask Sophotech to keep your application on file for future openings.
  • Cloudflare server access logs: up to 30 days at the edge. Turnstile verification data is subject to the same edge retention window.

Where a retained record cannot be fully deleted for technical reasons, the affected personal data is anonymised. Retention windows are reviewed at least annually.

Your rights

Under the GDPR, you have the right to:

  • access the personal data Sophotech holds about you (Art. 15);
  • request correction of inaccurate or incomplete data (Art. 16);
  • request deletion (Art. 17);
  • restrict processing (Art. 18);
  • receive your data in a portable format (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • not be subject to a decision based solely on automated processing (Art. 22) — Sophotech does not carry out such decisions.

To exercise any of these, email contact@sopho.tech. Sophotech responds within 30 days, in line with Art. 12(3).

Children

The site is not directed at children. Sophotech does not knowingly collect personal data from anyone under 16. If you believe a child has submitted personal data through this site, contact Sophotech and it will be deleted.

Automated decision-making

None. Sophotech does not use automated decision-making — with or without profiling — that produces legal or similarly significant effects under Art. 22 GDPR.

Complaints

If you are not satisfied with how Sophotech handles your personal data, you have the right to lodge a complaint with the Slovak supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava 27
Slovenská republika
https://dataprotection.gov.sk

You may also lodge a complaint with the supervisory authority in your country of residence.

Updates

This page is reviewed at least annually and whenever processing changes. Material updates are reflected in the "Last reviewed" date below.

Contact

For questions about this policy or to exercise your rights, email contact@sopho.tech or write to Sophotech s.r.o., Karpatské námestie 7770/10A, 831 06 Bratislava, Slovenská republika. Full company details on the Imprint.

Last reviewed: 3 June 2026.