Last updated on September 21, 2026
Privacy Policy
Introduction
This Privacy Policy explains how Asteroad s.r.o., registry code 56329601, Námestie 1. mája 2948/15, 811 06 Bratislava (the “Company”) collects, uses, and discloses information obtained through its website asteroad.com (the “Site”). Your Personal Data is processed in accordance with applicable legislation, including the General Data Protection Regulation (2016/679) (“GDPR”) and applicable national data protection laws. The Company acts as data controller of your Personal Data.
This Policy explains what we collect and why. Where we rely on your consent, for example for analytics and advertising cookies, we ask for it separately through our cookie banner, and you can withdraw it at any time. Using the Site does not by itself constitute consent.
1. Changes to this Policy
We may update this Policy from time to time. The date of the most recent update is shown at the end of this page.
Where a change affects processing that relies on your consent, we will ask for your consent again rather than assume it.
2. What Information We Collect
3. How We Use Your Information
We use your information to:
Respond to inquiries and deliver requested information about our services.
Improve the quality of the Site and our services.
Send communications you have opted into, such as newsletters or service updates.
Send administrative notifications related to your interactions with the Company.
Identify and prevent potentially fraudulent or illegal activities.
The Company does not sell user data or Anonymous Data to any third party.
4. Legal Bases for Processing
We process your personal data on the following legal bases under Article 6(1) GDPR:
Responding to inquiries and consultation requests: legitimate interest (Art. 6(1)(f)) in communicating with prospective clients; where the inquiry leads to a contract, steps prior to entering into a contract (Art. 6(1)(b)).
Sending newsletters and other communications you opted into: consent (Art. 6(1)(a)), which you may withdraw at any time.
Analytics, heatmaps and session recordings (Google Analytics 4, Microsoft Clarity): consent (Art. 6(1)(a)) given via the cookie banner.
Marketing automation and advertising conversion measurement (Bloomreach Marketing (Engagement), Google Ads): consent (Art. 6(1)(a)) given via the cookie banner.
Site search records (anonymised): legitimate interest (Art. 6(1)(f)) in improving the Site’s content.
Site security and delivery (Cloudflare): legitimate interest (Art. 6(1)(f)) in protecting and operating the Site.
Compliance with legal obligations: legal obligation (Art. 6(1)(c)).
5. How We Share Your Information
We may disclose your information to comply with law, court orders, or government requests, or to protect the rights, safety, and security of the Company, our users, or the public. All third-party service providers that process your data on our behalf are required to process data in accordance with our instructions and comply with applicable data protection laws.
In the event of a merger, acquisition, or similar transaction, Personal Data may be transferred as a business asset. The acquiring entity will assume the obligations described in this Privacy Policy.
The Site may contain links to third-party websites with their own privacy policies. The Company is not responsible for those policies.
6. Third-Party Services
We use the following third-party services on this Site:
Framer
The Site is built and hosted on Framer. Our contact form is a Framer form, which means the name, email address and message you submit are transmitted to and stored by Framer on our behalf before they reach us.
This service is operated by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under number 59920637. Framer hosts on Amazon Web Services and transfers data outside the European Economic Area, including to the United States, under an adequacy decision or Standard Contractual Clauses. Data is processed in accordance with Framer’s Privacy Statement.
Google Analytics 4
We use Google Analytics to understand how visitors use the Site, including pages visited, session duration, and traffic source. This service is operated by Google LLC.
We operate Google Analytics with Google Consent Mode v2. Before you make a choice in our cookie banner, and if you decline, no cookies are set and you are not recognized across visits. A basic signal is still sent to Google containing your IP address, browser and device information, and the address of the page you are viewing. Google receives this signal whether or not you go on to consent, and uses it to produce aggregated and estimated statistics.
If you consent to analytics cookies, Google Analytics sets cookies and assigns a randomly generated identifier so that repeat visits can be recognized. We do not send Google your name, email address, or any other information that directly identifies you.
Analytics data is retained for 14 months from your last activity, after which it is deleted. Data is processed in accordance with Google’s Privacy Policy.
Google Tag Manager
We use Google Tag Manager to manage and deploy tracking scripts on the Site. Google Tag Manager does not collect personal data directly but enables the deployment of the tools listed in this section, subject to your consent preferences.
Google Ads
We use Google Ads conversion tracking to measure whether visits to the Site lead to an enquiry after someone clicks one of our advertisements. This service is operated by Google LLC.
Conversion tracking runs under Google Consent Mode v2. Until you consent to marketing cookies, no advertising cookies are set and no advertising identifier is stored on your device. When you arrive from one of our ads, Google adds a click identifier to the landing page address. With your consent this is stored in a cookie so that a later enquiry can be attributed to the advertisement that brought you here.
We also use a Google Ads feature called enhanced conversions. If you have consented to marketing cookies and you then submit our contact form, we send Google your email address converted into an irreversible code, known as a hash. Google compares that code against its own records to confirm whether your enquiry followed a click on one of our advertisements. Google does not receive your email address in readable form, we do not receive any information about your Google account, and this is used only to measure the performance of our advertising.
You can withdraw your consent at any time via the Cookie Settings link in the footer.
Microsoft Clarity
We use Microsoft Clarity to analyze visitor behavior through heatmaps and session recordings, which helps us improve the usability of the Site. Clarity is only activated after you provide explicit cookie consent. Data is processed in accordance with Clarity’s Privacy Policy.
Bloomreach Marketing (Engagement)
We use Bloomreach Marketing for marketing automation and personalization testing on this Site. It may collect behavioral data including pages visited, clicks, and session activity. Bloomreach is only activated after you provide explicit cookie consent. This service is operated by Bloomreach Inc. Data is processed in accordance with Bloomreach’s Privacy Policy.
Substack
We use Substack to publish and distribute our newsletter. If you subscribe, your email address (and name, if provided) is processed by Substack Inc. (USA) as our processor. Transfers to the USA are safeguarded under the EU-U.S. Data Privacy Framework, to which Substack Inc. is certified. You can unsubscribe at any time via the link in each email. Data is processed in accordance with Substack’s Privacy Policy.
Google Workspace
Our email and internal documents run on Google Workspace. Messages you send us through the contact form, the feedback forms, or directly by email, including your name, email address, and anything you write, are received and stored in Google mailboxes. Site search records are saved to a private spreadsheet in the same account.
This service is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred outside the European Economic Area under Standard Contractual Clauses. Data is processed in accordance with Google’s Privacy Policy.
Cloudflare
Our Site uses Cloudflare for DNS management, security, and performance services. Cloudflare processes traffic metadata, including IP addresses, to protect the Site from malicious activity and ensure reliable delivery. This processing occurs at the network level and does not require your consent. Data is processed in accordance with Cloudflare’s Privacy Policy.
7. Cookies and Similar Technologies
Below is the full list of cookies and browser storage used on this Site. Only the necessary items are set before you make a choice. Everything else is set only after you consent.
| Name | Set by | Purpose | Type | Expires |
|---|---|---|---|---|
| Necessary | ||||
framer | Asteroad | Stores your cookie choices | Local storage | Until cleared |
framer | Asteroad | Records that you have answered the banner | Local storage | Until cleared |
| Analytics | ||||
_ga | Google Analytics | Distinguishes visitors | Cookie | 400 days |
_ga_ | Google Analytics | Maintains session state | Cookie | 400 days |
_clck | Microsoft Clarity | Links a visitor to their Clarity records | Cookie | 365 days |
_clsk | Microsoft Clarity | Joins page views into one session recording | Cookie | 1 day |
_cltk | Microsoft Clarity | Session identifier | Session storage | When the tab closes |
| Marketing | ||||
__exponea_ | Bloomreach | Identifies the browser for personalization | Cookie | 400 days |
__exponea_ | Bloomreach | Corrects for clock differences | Cookie | Session |
__exponea_ | Bloomreach | Holds the current tracking configuration | Session storage | When the tab closes |
__exponea_ | Bloomreach | Records when your session began | Local storage | Until cleared |
__exponea_ | Bloomreach | Records session duration | Local storage | Until cleared |
_gcl_ | Google Ads | Attributes an enquiry to an advertisement click | Cookie | 90 days |
_gcl_ | Google Ads | Stores the advertisement click identifier | Local storage | Until cleared |
Local storage and session storage are browser storage rather than cookies. Session storage is cleared when you close the tab. Local storage remains until you clear your browsing data.
If you withdraw your consent, we stop using the tools you have withdrawn it from, and no new data is collected. Items already stored in your browser stay there until they expire or you delete them. You can remove them at any time through your browser settings, and you can change or withdraw your choices at any time via the Cookie Settings link in the footer.
8. How Long We Store Your Data
We retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our Terms. In practice:
Contact form submissions and correspondence.
Up to 3 years from our last contact with you.
Google Analytics.
14 months from your last activity.
Google Ads conversion data.
In line with Google’s own retention periods for advertising data.
Microsoft Clarity recordings.
In line with Microsoft’s retention periods for Clarity.
Site search records.
Kept while they are useful for planning our content, and cleared periodically. These records contain no identifier and are not linked to you.
Newsletter subscription data.
Until you unsubscribe.
Accounting records.
10 years where required by law.
When data is no longer needed, it is securely deleted or anonymized.
9. Your Rights
Under GDPR, you have the right to: request access to your personal data, request correction, request erasure, object to processing, request restriction of processing, request data portability, and withdraw consent at any time. You also have the right to lodge a complaint with a Data Protection Authority if you believe your rights have been violated.
You also have the right to lodge a complaint with your local Data Protection Authority. For Slovakia, this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, e-mail statny.dozor@pdp.gov.sk, website dataprotection.gov.sk.
10. No Fee Required
You will not have to pay a fee to access your personal data or exercise your rights. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.
11. How to Make Requests
You can make a request regarding your information by emailing privacy@asteroad.com. We will retain your information as necessary to comply with legal obligations, resolve disputes, and enforce our Terms.
12. Where We Store Your Data
We store the information you send us in the European Union wherever the service allows it. Several of the providers listed above process data outside the European Economic Area, including in the United States.
Where that happens, the transfer is covered either by an adequacy decision, such as the EU-US Data Privacy Framework, or by Standard Contractual Clauses approved by the European Commission.
Framer, which hosts this Site and receives our contact form submissions, runs on Amazon Web Services and transfers data outside the European Economic Area under those safeguards. Google, Microsoft, and Substack do the same for the analytics, advertising, and newsletter services described above.
We take steps to ensure personal information is treated securely and in accordance with this Privacy Policy.
13. Security
We use industry-standard data encryption and access restrictions to protect your personal information. However, no transmission over the Internet can be guaranteed to be 100% secure.
14. Contact Us
If you have questions about this Privacy Policy, contact us at privacy@asteroad.com.