Privacy Policy

1 Purpose of personal data processing

Gusso s.r.o. as the controller of the website processes personal data of data subjects in accordance with EU and Slovak legislation for the following purposes:

• responding to requests submitted via the contact form
• providing information about its services
• maintaining basic records of communication with prospective clients
• processing customer requests via an external technical support system
• analysing website traffic and optimising the website

2 Scope of personal data processed

Personal data processed may include:

• first and last name
• email address
• phone number (if provided)
• content of the message or inquiry
• technical data (IP address, device data, cookies)

All data is provided voluntarily.

3 Legal basis for processing

• Art. 6(1)(a) GDPR – consent of the data subject
• Art. 6(1)(b) GDPR – pre-contractual relations or performance of a contract
• Art. 6(1)(f) GDPR – legitimate interest of the controller (website traffic analysis)

4 Retention period for personal data

Personal data is retained:

• for the duration of handling the request
• for a maximum of 12 months from the last communication
• or until withdrawal of consent by the data subject

5 Recipients of personal data

Personal data may be disclosed to:

• technical infrastructure providers (web hosting, email services)
• customer request management system providers
• analytics tool providers (Google LLC – Google Analytics)
• AI service provider (OpenAI, L.L.C. – generating chat assistant responses)

These recipients are bound by contractual and statutory obligations in accordance with GDPR.

6 Transfer of data to third countries

As part of analytical and technical services, personal data may be transferred to third countries outside the EU/EEA – specifically to the USA in connection with the use of Google Analytics (Google LLC). This transfer is secured through Standard Contractual Clauses (SCC) in accordance with Art. 46 GDPR and the EU-U.S. Data Privacy Framework.

7 Rights of data subjects

In connection with the processing of your personal data, you have the right:

• to access the personal data we process about you
• to rectification of incorrect or incomplete data
• to erasure of data (the "right to be forgotten")
• to restriction of processing of personal data
• to data portability
• to object to the processing of personal data
• to withdraw consent to processing
• to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk)

8 Cookies

The website gusso.sk uses cookies for the following purposes:

• Necessary cookies – ensure basic functionality of the site (e.g. forms, security)
• Analytical cookies – measuring traffic and user behaviour through Google Analytics (Google LLC). These cookies collect anonymised data about site usage

Analytical cookies are stored based on your consent. You can modify or refuse cookie settings at any time in your browser settings.

9 Automated decision-making

The website gusso.sk does not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

10 AI chat assistant

The gusso.sk website provides a virtual chat assistant that answers visitors' questions about our services. When you use it, the following data is processed:

• the text of the messages you type into the chat
• if you use the "Talk to a human" option: name, email address, optional message and the conversation transcript

To generate responses we use a language model provided by OpenAI, L.L.C. (USA). For this purpose the conversation content is transferred to this processor. Data from the "Talk to a human" option is additionally sent by email to [email protected] and processed as a regular inquiry. According to the provider's terms, data submitted via its application interface (API) is not used to train its models.

The legal basis is the controller's legitimate interest in providing support to website visitors (Art. 6(1)(f) GDPR). When submitting the "Talk to a human" form, the legal basis is your consent, granted by ticking the relevant checkbox.

In connection with this service, personal data is transferred to a third country outside the EU/EEA – to the USA (OpenAI, L.L.C.). This transfer is secured through Standard Contractual Clauses (SCC) in accordance with Art. 46 GDPR, or the EU-U.S. Data Privacy Framework.

Please do not enter sensitive personal data or special categories of data (e.g. health data, ID numbers, login credentials) into the chat.