Privacy Policy | Asteroad

Introduction

This Privacy Policy explains how Asteroad s.r.o., registry code 56329601, Námestie 1. mája 2948/15, 811 06 Bratislava (the “Company”) collects, uses, and discloses information obtained through its website asteroad.com (the “Site”). Your Personal Data is processed in accordance with applicable legislation, including the General Data Protection Regulation (2016/679) (“GDPR”) and applicable national data protection laws. The Company acts as data controller of your Personal Data.

This Policy explains what we collect and why. Where we rely on your consent, for example for analytics and advertising cookies, we ask for it separately through our cookie banner, and you can withdraw it at any time. Using the Site does not by itself constitute consent.

1. Changes to this Policy

We may update this Policy from time to time. The date of the most recent update is shown at the top of this page.
Where a change affects processing that relies on your consent, we will ask for your consent again rather than assume it.

2. What Information We Collect

We collect the following information:

Contact information: Your name and email address when you use our contact form, request a consultation, or sign up for communications.

Correspondence: If you contact us via email, we collect your name, email address, and the content of the message in order to respond.

Site search: When you use the search on the Site, we record the search term you entered, the page you searched from, and the result you clicked. These records contain no identifier and are not linked to you or to your other activity on the Site. They are saved to a private spreadsheet in Google Workspace, so the request that saves them reaches Google carrying your IP address, as any request to a website does. Please do not enter personal information into the search box.

Automatic data: Our third-party analytics and performance tools collect browser type, operating system, IP address, domain name, date and time stamps, clickstream data, and behavioral data such as pages visited and session activity. This data is collected via the third-party services described below. We use cookies to collect this information, subject to your consent.

We do not collect Special Categories of Personal Data (race, ethnicity, religious beliefs, health data, biometric data, etc.).

We collect the following information:

Contact information: Your name and email address when you use our contact form, request a consultation, or sign up for communications.

Correspondence: If you contact us via email, we collect your name, email address, and the content of the message in order to respond.

Site search:
The search term you enter, the page you searched from, and the search result you clicked. These records contain no identifier and are not linked to you.

We do not collect Special Categories of Personal Data (race, ethnicity, religious beliefs, health data, biometric data, etc.).

3. How We Use Your Information

We use your information to:

Respond to inquiries and deliver requested information about our services.

Improve the quality of the Site and our services.

Send communications you have opted into, such as newsletters or service updates.

Send administrative notifications related to your interactions with the Company.

Identify and prevent potentially fraudulent or illegal activities.

The Company does not sell user data or Anonymous Data to any third party.

4. Legal Bases for Processing

We process your personal data on the following legal bases under Article 6(1) GDPR:

Responding to inquiries and consultation requests: legitimate interest (Art. 6(1)(f)) in communicating with prospective clients; where the inquiry leads to a contract, steps prior to entering into a contract (Art. 6(1)(b)).
Sending newsletters and other communications you opted into: consent (Art. 6(1)(a)), which you may withdraw at any time.
Analytics, heatmaps and session recordings (Google Analytics 4, Microsoft Clarity): consent (Art. 6(1)(a)) given via the cookie banner.
Marketing automation and advertising conversion measurement (Bloomreach Marketing (Engagement), Google Ads, Microsoft Advertising): consent (Art. 6(1)(a)) given via the cookie banner.
Site search records (anonymised): legitimate interest (Art. 6(1)(f)) in improving the Site’s content.
Site security and delivery (Cloudflare): legitimate interest (Art. 6(1)(f)) in protecting and operating the Site.
Compliance with legal obligations: legal obligation (Art. 6(1)(c)).

5. How We Share Your Information

We may disclose your information to comply with law, court orders, or government requests, or to protect the rights, safety, and security of the Company, our users, or the public. All third-party service providers that process your data on our behalf are required to process data in accordance with our instructions and comply with applicable data protection laws.

In the event of a merger, acquisition, or similar transaction, Personal Data may be transferred as a business asset. The acquiring entity will assume the obligations described in this Privacy Policy.

The Site may contain links to third-party websites with their own privacy policies. The Company is not responsible for those policies.

6. Third-Party Services

We use the following third-party services on this Site:

Framer
The Site is built and hosted on Framer. Our contact form is a Framer form, which means the name, email address and message you submit are transmitted to and stored by Framer on our behalf before they reach us.

This service is operated by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under number 59920637. Framer hosts on Amazon Web Services and transfers data outside the European Economic Area, including to the United States, under an adequacy decision or Standard Contractual Clauses. Data is processed in accordance with Framer’s Privacy Statement.

Google Analytics 4
We use Google Analytics to understand how visitors use the Site, including pages visited, session duration, and traffic source. This service is operated by Google LLC.

We operate Google Analytics with Google Consent Mode v2. Before you make a choice in our cookie banner, and if you decline, no cookies are set and you are not recognized across visits. A basic signal is still sent to Google containing your IP address, browser and device information, and the address of the page you are viewing. Google receives this signal whether or not you go on to consent, and uses it to produce aggregated and estimated statistics.

If you consent to analytics cookies, Google Analytics sets cookies and assigns a randomly generated identifier so that repeat visits can be recognized. We do not send Google your name, email address, or any other information that directly identifies you.

Analytics data is retained for 14 months from your last activity, after which it is deleted. Data is processed in accordance with Google’s Privacy Policy.

Google Tag Manager
We use Google Tag Manager to manage and deploy tracking scripts on the Site. Google Tag Manager does not collect personal data directly but enables the deployment of the tools listed in this section, subject to your consent preferences.

Google Ads
We use Google Ads conversion tracking to measure whether visits to the Site lead to an enquiry after someone clicks one of our advertisements. This service is operated by Google LLC.

Conversion tracking runs under Google Consent Mode v2. Until you consent to marketing cookies, no advertising cookies are set and no advertising identifier is stored on your device. When you arrive from one of our ads, Google adds a click identifier to the landing page address. With your consent this is stored in a cookie so that a later enquiry can be attributed to the advertisement that brought you here.

We also use a Google Ads feature called enhanced conversions. If you have consented to marketing cookies and you then submit our contact form, we send Google your email address converted into an irreversible code, known as a hash. Google compares that code against its own records to confirm whether your enquiry followed a click on one of our advertisements. Google does not receive your email address in readable form, we do not receive any information about your Google account, and this is used only to measure the performance of our advertising.

You can withdraw your consent at any time via the Cookie Settings link in the footer.

Microsoft Advertising
We use Microsoft Advertising conversion tracking (the Universal Event Tracking tag) to measure whether visits to the Site lead to an enquiry after someone clicks one of our advertisements on Bing or other Microsoft services. For users in the European Economic Area, this service is operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

The tag follows your choice in our cookie banner. Until you consent to marketing cookies, it sets no advertising cookies and stores no advertising identifier on your device. When you arrive from one of our ads, Microsoft adds a click identifier to the landing page address. With your consent, this is stored so that a later enquiry can be attributed to the advertisement that brought you here. We do not send Microsoft your name, email address, or the content of your message.

You can withdraw your consent at any time via the Cookie Settings link in the footer. Data is processed in accordance with the Microsoft Privacy Statement.

Microsoft Clarity
We use Microsoft Clarity to analyze visitor behavior through heatmaps and session recordings, which helps us improve the usability of the Site. Clarity is only activated after you provide explicit cookie consent. This service is operated by Microsoft. Data is processed in accordance with Clarity’s Privacy Policy.

Bloomreach Marketing (Engagement)
We use Bloomreach Marketing for marketing automation and personalization testing on this Site. It may collect behavioral data including pages visited, clicks, and session activity. Bloomreach is only activated after you provide explicit cookie consent. With your consent, we also pass the Google Analytics visitor identifier to Bloomreach so that site visits can be connected with marketing automation. This service is operated by Bloomreach Inc. Data is processed in accordance with Bloomreach’s Privacy Policy.

Substack
We use Substack to publish and distribute our newsletter. If you subscribe, your email address (and name, if provided) is processed by Substack Inc. (USA) as our processor. Transfers to the USA are safeguarded under the EU-U.S. Data Privacy Framework, to which Substack Inc. is certified. You can unsubscribe at any time via the link in each email. Data is processed in accordance with Substack’s Privacy Policy.

Google Workspace
Our email and internal documents run on Google Workspace. Messages you send us through the contact form, the feedback forms, or directly by email, including your name, email address, and anything you write, are received and stored in Google mailboxes. Site search records are saved to a private spreadsheet in the same account.

This service is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred outside the European Economic Area under Standard Contractual Clauses. Data is processed in accordance with Google’s Privacy Policy.

Cloudflare
Our Site uses Cloudflare for DNS management, security, and performance services. Cloudflare processes traffic metadata, including IP addresses, to protect the Site from malicious activity and ensure reliable delivery. This processing occurs at the network level and does not require your consent. Data is processed in accordance with Cloudflare’s Privacy Policy.

We use the following third-party services on this Site:

Google Analytics 4
We use Google Analytics to understand how visitors use the Site, including pages visited, session duration, and traffic source. This service is operated by Google LLC.

Analytics data is retained for 14 months from your last activity, after which it is deleted. Data is processed in accordance with Google’s Privacy Policy.

Google Ads
We use Google Ads conversion tracking to measure whether visits to the Site lead to an enquiry after someone clicks one of our advertisements. This service is operated by Google LLC.

You can withdraw your consent at any time via the Cookie Settings link in the footer.

You can withdraw your consent at any time via the Cookie Settings link in the footer. Data is processed in accordance with the Microsoft Privacy Statement.

Bloomreach Marketing (Engagement)
We use Bloomreach Marketing for marketing automation and personalization testing on this Site. It may collect behavioral data including pages visited, clicks, and session activity. Bloomreach is only activated after you provide explicit cookie consent. With your consent, we also pass the Google Analytics visitor identifier to Bloomreach so that site visits can be connected with marketing automation. With your consent, we also pass the Google Analytics visitor identifier to Bloomreach so that site visits can be connected with marketing automation. This service is operated by Bloomreach Inc. Data is processed in accordance with Bloomreach’s Privacy Policy.

7. Cookies and Similar Technologies

Below is the full list of cookies and browser storage used on this Site. Only the necessary items are set before you make a choice. Everything else is set only after you consent.

Cookies and browser storage used on asteroad.com
Name	Set by	Purpose	Type	Expires
Necessary
`framerCookiesConsentMode`	Asteroad	Stores your cookie choices	Local storage	Until cleared
`framerCookiesDismissed`	Asteroad	Records that you have answered the banner	Local storage	Until cleared
Analytics
`_ga`	Google Analytics	Distinguishes visitors	Cookie	400 days
`_ga_SXBXT61ZBP`	Google Analytics	Maintains session state	Cookie	400 days
`_clck`	Microsoft Clarity	Links a visitor to their Clarity records	Cookie	365 days
`_clsk`	Microsoft Clarity	Joins page views into one session recording	Cookie	1 day
`_cltk`	Microsoft Clarity	Session identifier	Session storage	When the tab closes
Marketing
`__exponea_etc__`	Bloomreach	Identifies the browser for personalization	Cookie	400 days
`__exponea_time2__`	Bloomreach	Corrects for clock differences	Cookie	Session
`__exponea_tracking_definition__`	Bloomreach	Holds the current tracking configuration	Session storage	When the tab closes
`__exponea_last_session_start_timestamp__`	Bloomreach	Records when your session began	Local storage	Until cleared
`__exponea_last_session_ping_timestamp__`	Bloomreach	Records session duration	Local storage	Until cleared
`_gcl_au`	Google Ads	Attributes an enquiry to an advertisement click	Cookie	90 days
`_gcl_aw`	Google Ads	Stores the advertisement click identifier when you arrive from an ad	Cookie	90 days
`_gcl_ls`	Google Ads	Stores the advertisement click identifier	Local storage	Until cleared
`_uetsid`	Microsoft Advertising	Links the pages of one visit to an advertisement click	Cookie and local storage	1 day
`_uetvid`	Microsoft Advertising	Recognizes the browser on later visits for conversion measurement	Cookie and local storage	390 days
`_uetmsclkid`	Microsoft Advertising	Stores the advertisement click identifier when you arrive from an ad	Cookie and local storage	90 days

Local storage and session storage are browser storage rather than cookies. Session storage is cleared when you close the tab. Local storage remains until you clear your browsing data.

If you withdraw your consent, we stop using the tools you have withdrawn it from, and no new data is collected. Items already stored in your browser stay there until they expire or you delete them. You can remove them at any time through your browser settings, and you can change or withdraw your choices at any time via the Cookie Settings link in the footer.

8. How Long We Store Your Data

We retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our Terms. In practice:

Contact form submissions and correspondence.
Up to 3 years from our last contact with you.

Google Analytics.
14 months from your last activity.

Google Ads conversion data.
In line with Google’s own retention periods for advertising data.

Microsoft Advertising conversion data.
In line with Microsoft’s own retention periods for advertising data.

Microsoft Clarity recordings.
In line with Microsoft’s retention periods for Clarity.

Site search records.
Kept while they are useful for planning our content, and cleared periodically. These records contain no identifier and are not linked to you.

Newsletter subscription data.
Until you unsubscribe.

Accounting records.
10 years where required by law.

When data is no longer needed, it is securely deleted or anonymized.

9. Your Rights

Under GDPR, you have the right to: request access to your personal data, request correction, request erasure, object to processing, request restriction of processing, request data portability, and withdraw consent at any time. You also have the right to lodge a complaint with a Data Protection Authority if you believe your rights have been violated.

You also have the right to lodge a complaint with your local Data Protection Authority. For Slovakia, this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, e-mail statny.dozor@pdp.gov.sk, website dataprotection.gov.sk.

10. No Fee Required

You will not have to pay a fee to access your personal data or exercise your rights. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

11. How to Make Requests

You can make a request regarding your information by emailing privacy@asteroad.com. We will retain your information as necessary to comply with legal obligations, resolve disputes, and enforce our Terms.

12. Where We Store Your Data

We store the information you send us in the European Union wherever the service allows it. Several of the providers listed above process data outside the European Economic Area, including in the United States.

Where that happens, the transfer is covered either by an adequacy decision, such as the EU-US Data Privacy Framework, or by Standard Contractual Clauses approved by the European Commission.

Framer, which hosts this Site and receives our contact form submissions, runs on Amazon Web Services and transfers data outside the European Economic Area under those safeguards. Google, Microsoft, and Substack do the same for the analytics, advertising, and newsletter services described above.

We take steps to ensure personal information is treated securely and in accordance with this Privacy Policy.

13. Security

We use industry-standard data encryption and access restrictions to protect your personal information. However, no transmission over the Internet can be guaranteed to be 100% secure.

14. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@asteroad.com.