IZWI AI
Legal information

Privacy Policy

Effective from September 11, 2026

This is an English translation of the Slovak original. In case of any discrepancy, the Slovak version prevails.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR") and with Act No. 110/2019 Coll., on the processing of personal data. Here you can learn how we process your personal data and how we ensure that it is protected.

1. Identification of the controller

The controller of personal data within the meaning of Article 4(7) of the GDPR is:

Business name
Tomáš Ižvolt
Address
J. Palkoviča 81/14, 02001 Dolné Kočkovce
Company ID (IČO)
57517002
Trade register
District Office Považská Bystrica, trade license register no. 330-32744
Email
info@tomasizvolt.com
Website
www.izvolttomas.com

2. Purpose and legal basis for the processing of personal data

We process your personal data solely for specified, explicit and legitimate purposes. Personal data is processed for the following purposes:

  • For the purpose of fulfilling orders, personal data is processed when a digital product is purchased, an invoice is issued and the product is delivered by email. The legal basis for the processing is the performance of a contract pursuant to Article 6(1)(b) of the GDPR.
  • For the purpose of fulfilling accounting and tax obligations, personal data is processed when accounting documents are archived and VAT records are kept. The legal basis for the processing is compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR.
  • For the purpose of communicating with customers, personal data is processed when answering questions and handling complaints and warranty claims. The legal basis for the processing is legitimate interest pursuant to Article 6(1)(f) of the GDPR.
  • For the purpose of direct marketing, personal data is processed when sending newsletters and information about news, products and promotions. The legal basis for the processing is consent pursuant to Article 6(1)(a) of the GDPR.
  • For the purpose of operating the website and analytics, personal data is processed by means of cookies and tools that track the behavior of website visitors. The legal basis for the processing is consent or legitimate interest, depending on the type of cookies and the specific purpose of the processing.

3. Categories of personal data

In particular, we process the following categories of data:

  • Identification data: first name, last name, company ID (IČO), tax ID (DIČ) (when purchasing as a business)
  • Contact data: email address, telephone number
  • Billing data: address, country, payment details
  • Technical data: IP address, cookies, information about the browser and device
  • Voluntarily provided data: content of messages sent via contact forms, feedback, ratings
  • Accounting records: We process the personal data of customers, or of other persons recorded in the accounts, to the extent of title, first name, last name, billing address, bank account number, payment details, telephone number, email and signature for the purpose of keeping accounts and fulfilling the obligations arising from Act No. 563/1991 Coll., on Accounting, Act No. 235/2004 Coll., on Value Added Tax, and other relevant legislation of the Slovak Republic. The legal basis for the processing of personal data is the fulfillment of legal obligations. We retain accounting and tax documents for the period laid down by the relevant legislation, as a rule for a period of 10 years.
  • Warranty claims: We process the personal data of purchasers who have filed a claim regarding the digital services provided to the extent of title, first name, last name, address, email, telephone number, order details and details of the digital performance subject to the claim, and the subject of the claim, for the purpose of receiving and handling the claim and keeping records of claims. The legal basis for the processing of this personal data is the fulfillment of a legal obligation under Act No. 634/1992 Coll., on Consumer Protection, or, where applicable, our legitimate interest in handling and recording the claim. We retain the personal data for 5 years from the date on which the claim was handled.
  • Contact form: We process the personal data of prospective customers to the extent of title, first name, last name, email, telephone number and subject of the message for the purpose of receiving and handling your inquiry. The legal basis for the processing of this personal data is the performance of a contract or, as the case may be, pre-contractual relations. We retain the personal data for 12 months.
  • Reviews: We process the personal data of purchasers who have provided a review to the extent of title, first name, last name, photograph, email, telephone number and subject of the review, with the consent of the data subject, for the purpose of publishing the review on the controller's website and social networks. We process this personal data for as long as the consent remains in effect. The data subject may withdraw their consent at any time by sending a notice by email to info@tomasizvolt.com, and the trader is obliged to remove the review, or to remove the purchaser's personal data from it, within 14 days of the date of the request.
  • Newsletter: We process the personal data of persons who have subscribed to the newsletter to the extent of first name, last name and email on the legal basis of the data subject's consent. We process the personal data of purchasers, or of other persons with whom we have a contractual relationship, for the purpose of sending the newsletter on the legal basis of legitimate interest, namely informing them about the controller's activities, offers and promotions. The data subject may withdraw their consent at any time or, where applicable, object to the processing of personal data by sending a written notice or by unsubscribing from the newsletter. We process the personal data for a period of 10 years.
  • Webinars: We process the personal data of participants in and registrants for our live broadcasts - webinars (or recordings of live broadcasts) to the extent of first name, last name, username, email, telephone number or, where applicable, other data provided, for the purpose of participation and providing technical access to the webinar. The legal basis is the consent of the data subject, given when registering for the webinar. We process this personal data for a period of 5 years. We organize webinars with a partner (WebinarJam LLC), which ensures the technical operation of the webinars and is responsible for sending email reminders. On the basis of the contractual relationship thus established, the trader reserves the right to send a reasonable number of promotional emails for direct marketing purposes on the legal basis of legitimate interest. You can easily unsubscribe from these emails by clicking the "unsubscribe" link in the email footer. By registering for the webinar, you also agree to take part in a sales event that will be held at the end of the broadcast.

4. Recipients of personal data

Your personal data may be made available to the following categories of recipients:

  • providers of IT and hosting services (Vercel Inc., USA – website hosting; Supabase Inc., USA – registration database),
  • payment gateway providers (e.g., Gopay, PayPal),
  • accounting firms and tax advisors (Name sro),
  • email marketing tools (e.g., Smartemailing),
  • legal and marketing advisors (if necessary),
  • employees or collaborators bound by confidentiality,
  • public authorities (e.g., the tax office), where required by law.

All recipients are contractually bound to comply with their obligations in the area of personal data protection.

5. Recipients and transfers of data to third countries

As a rule, we do not transfer personal data to third countries outside the EU and the EEA unless there is a legal ground for doing so and adequate protection within the meaning of Article 44 et seq. of the GDPR. Where we use tools such as Google, Facebook or newsletter services based outside the EU, we ensure the protection of data by means of standard contractual clauses (SCCs).

Recipients

To whom do we disclose your personal data? We disclose personal data to a third party only where this is required of us by a specific law or where it is necessary for the performance of a contract. These are, in particular, public administration authorities and other authorized entities. We may also disclose your personal data to a processor that provides us with professional and specialized services. Where we engage a processor to process personal data, we have concluded a data processing agreement with it and have bound it to confidentiality. We have engaged the following processors:

If you have any questions regarding this privacy policy, you can contact us using the information provided below.

6. Retention period for personal data

Order and invoice data is retained for the period laid down by the relevant legislation of the Slovak Republic, in particular Act No. 563/1991 Coll., on Accounting, Act No. 235/2004 Coll., on Value Added Tax, and other tax regulations, as a rule for a period of 10 years.

Data provided via the contact form is retained for a period of 5 years from the last communication.

Data processed for marketing purposes is retained until consent is withdrawn, but for no longer than 5 years.

Cookies are retained according to their type, but for no longer than 2 years.

7. Rights of the data subject

You have the following rights:

  • Right of access – you can request a copy of the data being processed.
  • Right to rectification – if the data is inaccurate or out of date, you have the right to have it rectified.
  • Right to erasure (right to be forgotten) – if the data is no longer needed or you withdraw your consent.
  • Right to restriction of processing – where you contest the accuracy of the data or its processing.
  • Right to data portability – you can obtain your data in a structured format.
  • Right to object – to processing based on legitimate interest or to direct marketing.
  • Right to withdraw consent – at any time, without affecting the lawfulness of prior processing.
  • Right to lodge a complaint – you have the right to lodge a complaint with the Office for Personal Data Protection if you believe that the processing of your personal data has infringed the law.

8. How to exercise your rights

You can exercise your rights:

By email: info@tomasizvolt.com

We will handle your request without undue delay, but no later than within 30 days. In justified cases, we may extend this period by a further 60 days.

9. Security of processing

We ensure adequate protection of personal data through:

  • the use of encryption (HTTPS, encrypted databases),
  • regular backups,
  • restricted access (authorized persons only),
  • internal security policies,
  • training for employees and collaborators.

10. Automated decision-making and profiling

We do not carry out any automated decision-making or profiling on the basis of your personal data that would have a legal or significant effect on you as a data subject.

11. Final provisions

This privacy policy takes effect on [September 11, 2026]. The controller reserves the right to update it at any time. The current version is always available on the website.