Privacy Policy

This Privacy Policy explains how APEXA collects, uses, and protects your personal information in compliance with the General Data Protection Regulation (GDPR) and applicable Slovak law.

The controller of personal data is BusinessVia s.r.o., which provides services under the trade name and brand APEXA.

Last updated: January 1, 2026

1Information We Collect

Personal Information

Name, email address, and phone number
Company name and job title
Payment information (processed securely via third-party payment processor — we do not store card details)
Project requirements and communications

Automatically Collected Information

IP address and approximate location
Browser type and version
Pages visited and time spent on site
Referring website and device type
Cookies and similar tracking technologies

2How We Use Your Information

Provide, deliver, and improve our AI consulting services
Respond to inquiries and support requests
Process payments and send invoices
Send project updates and relevant communications
Comply with legal and regulatory obligations
Analyse website usage to improve user experience

We do NOT:

Sell your personal data to any third party
Use your data for unrelated marketing purposes
Share your data without consent (except as required by law)

3Legal Basis (GDPR)

We process personal data under the following legal bases as defined in Article 6 of the GDPR:

ConsentYou have given explicit consent for a specific purpose (e.g., marketing emails)

ContractProcessing is necessary to perform a contract with you or take pre-contractual steps

Legitimate InterestBusiness operations including fraud prevention, security, and analytics

Legal ObligationProcessing is required to comply with applicable laws and regulations

4Data Sharing

We share data only with trusted third-party service providers who are necessary to deliver our services. All providers are GDPR-compliant.

HostingVercel (infrastructure and deployment)

EmailGoogle Workspace (business communications)

CRMGoHighLevel (client relationship management)

AnalyticsGoogle Analytics (website usage analysis)

PartnersReferral partners only if you were referred and with your consent

Legal AuthoritiesIf required by applicable law or court order

5Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

Contact inquiries3 years from last interaction

Client project data7 years (legal and accounting requirements)

Marketing dataUntil you opt out or withdraw consent

Website analytics26 months (Google Analytics default)

Financial records10 years (Slovak accounting law)

6Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

✅Right to access — obtain a copy of the personal data we hold about you
✅Right to rectification — correct any inaccurate or incomplete data
✅Right to erasure — request deletion of your data (“right to be forgotten”)
✅Right to restrict processing — limit how we use your data
✅Right to data portability — receive your data in a machine-readable format
✅Right to object — object to processing based on legitimate interests
✅Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at privacy@apexa.ai. We will respond within 30 days as required by GDPR.

7Cookies

We use the following types of cookies:

EssentialRequired for the website to function correctly. Cannot be disabled.

AnalyticsHelp us understand how visitors use the site (Google Analytics). Can be opted out.

PreferencesRemember your settings and preferences.

MarketingUsed to deliver relevant advertisements. We use minimal marketing cookies.

You can manage cookie preferences in your browser settings or via our cookie consent banner.

8Contact & Supervisory Authority

Data Controller

CompanyBusinessVia s.r.o.

Emailprivacy@apexa.ai

Phone+421-903-231-401

AddressSkolska 37, 900 25 Chorvatsky Grob, Slovakia

Supervisory Authority

If you believe your data protection rights have been violated, you may lodge a complaint with the Slovak supervisory authority:

Personal Data Protection Office of the Slovak Republic

Hraničná 12, 820 07 Bratislava

Website: dataprotection.gov.sk