RIS-TECH / Corporate information
Privacy notice
This notice covers visits to ristechgroup.com, business enquiries, use of the Aurora assistant and data protection requests for both the DIGITAL and INDUSTRY divisions.
Websupport provides 14 days of log backups in its control panel. We are still verifying how long it retains original logs and other copies and whether its support staff can access data from outside the EEA. You can send questions to info@ristechgroup.com.
Who is responsible for your data
RIS-TECH s. r. o. is the controller for both divisions. The company owner personally handles data protection requests. You can email info@ristechgroup.com, call us or write to our registered office.
RIS-TECH s. r. o.Ulica Martina Rázusa 2402/44
984 01 Lučenec
Slovakia
What gets recorded when you visit
When you open a page, your browser sends a request to our host, Websupport. The server needs your network address and the requested page address to return the content.
The access log records the IP address, time, request method, path with any query parameters, and response status. It may also contain the browser information and referring page your browser sends. Error logs help diagnose faults and keep the site available.
Photos, video and fonts load from our domain. The site runs no advertising pixels or visitor analytics in your browser. The language selector can remember an explicit choice of English for the browser session.
Enquiries by phone, email and post
If you call us, your number may be visible. When you introduce yourself or write to us, we receive the details you choose to share, such as your name, company, return contact details and project description. We use them to answer your enquiry or prepare the quotation you request.
Contacting us is voluntary. To reply in writing or call you back, we need a way to reach you. We may need more detail about the project to prepare a quotation. An enquiry does not subscribe you to marketing.
DIGITAL and INDUSTRY contact forms
To send an enquiry using a form, enter your full name, email address, service category and project description. Company name and phone number are optional. The INDUSTRY form also lets you give a target timeframe. Please leave out sensitive data and confidential material. The forms do not accept attachments.
When you submit the form, our server at Websupport passes your message to our Websupport business email service. The DIGITAL team receives it at digital@ristechgroup.com and the INDUSTRY team at industry@ristechgroup.com, according to the division you selected. The team replies to the address you supplied. The form and Aurora are separate services. We do not send form submissions to the chat.
The contact page checks whether delivery is available. A selected service code can appear in the page address and in the access log. Keep names, email addresses and project details out of the URL.
To prevent excessive submissions, a counter uses a pseudonym derived from your IP address to track attempts over a ten-minute window. A separate identifier containing no message text prevents duplicate sending for 24 hours. The application clears expired records during subsequent processing or maintenance.
Aurora in the DIGITAL and INDUSTRY divisions
Aurora is an optional AI assistant for questions about our services. The default local mode keeps the conversation in the open page’s memory. You can continue using it without enabling online chat. You can also reach our team by email or contact form.
Online mode is optional. Selecting “Enable online Aurora” gives us your consent under Article 6(1)(a) GDPR to use OpenAI to generate a reply. Earlier local messages are excluded from the online conversation. When you send a message, OpenAI receives your question, language and division. For follow-up questions, it also receives the opening exchange and up to two other recent question-and-answer exchanges. Keep personal data, passwords and confidential information out of the chat.
Your choice lasts for the open page, including if you close and reopen the chat window. You can withdraw your consent at any time by selecting “Turn off online mode and clear chat”. This stops further messages from going to OpenAI and clears the conversation from the page’s memory. Reloading the page also restores the default local mode. Withdrawal does not affect the lawfulness of processing before you withdrew consent.
Our application does not save a conversation transcript. We disable storage of completions for later use when calling the API (store=false). Even with this setting, OpenAI’s abuse monitoring logs may contain parts of questions and replies and related technical data. Its published default is to retain these logs for up to 30 days. A longer period can apply when the law requires it or when reasonably necessary to protect the service or others from harm.
To prevent abuse, the online service limits attempts using a pseudonym derived from your IP address. The counter is valid for ten minutes. Expired records are cleared on subsequent writes or during maintenance. We record monthly totals for budget usage and first accepted online requests by notice version. These totals contain no name, IP address or message text. Maintenance removes them after the end of the following calendar month in UTC.
Purposes and lawful bases
If you are an individual asking for a quotation or another step necessary before entering into your own contract, we process the necessary data under Article 6(1)(b) GDPR. The same basis applies where the data is necessary to perform a contract you entered into in your own name. We process data in accounting records to meet our legal obligations under Article 6(1)(c).
If you represent a business or send a general business enquiry, we use your work contact details and the contents of your enquiry under Article 6(1)(f) GDPR. Our legitimate interests are to answer your approach, prepare a quotation you request and follow up on the project under discussion. We do not use enquiry contacts for unsolicited marketing.
We also rely on Article 6(1)(f) GDPR to use necessary connection details, operational logs and request counters for the website, forms and online chat. Our legitimate interests are to deliver the page requested, diagnose outages, prevent abuse and avoid duplicate submissions. You have the right to object to processing based on legitimate interests.
We process an online conversation with Aurora with your consent under Article 6(1)(a) GDPR. We use the data necessary to assess and answer a data protection request to comply with a legal obligation under Article 6(1)(c).
Who receives data and where
Websupport, s. r. o. hosts the website and provides our business email. It processes connection data and messages delivered to our mailboxes. Section 16.11 of its general terms describes processing on behalf of its customers. Websupport identifies Bratislava as the location of its production and backup data centres. We are still verifying whether and from where its support staff or other suppliers may access data from outside the European Economic Area (EEA).
For online chat, OpenAI Ireland Ltd. processes messages on our behalf. It may use affiliates and other processors outside the EEA, including in the United States, to deliver the service. Section 4.1 of its Data Processing Addendum provides for standard contractual clauses or a European Commission adequacy decision for these transfers. To ask about a specific transfer or to obtain a copy of the relevant safeguards, email info@ristechgroup.com.
For phone calls, a telecommunications provider also processes connection details. For letters, a postal operator processes the details needed for delivery.
Websupport’s data centre locations (in Slovak)
Websupport’s terms on data processing, section 16.11 (in Slovak)
Retention and security
If an enquiry does not lead to an engagement, we keep the correspondence and related working copies for six months from the last substantive contact. At our next monthly review after that period, we delete them, including from the trash. When an engagement goes ahead, we keep only the details needed to perform the contract and maintain accounting records. We need contract documents to deliver the work and accounting records for the applicable statutory retention period.
We need data from a rights request to verify it, assess it and reply within the statutory deadline. Further retention depends on whether and to what extent we still need to demonstrate how we handled the request or address specific proceedings.
Websupport makes the last 14 days of access and error log backups available in its control panel. We are still verifying how long it retains the original logs and other copies.
The website uses HTTPS. The contact page communicates with a server endpoint on the same domain. Browsing or selecting a service does not create an enquiry record in the application.
Your rights and how we respond
You can ask whether we process your data, request access and a copy, and ask us to correct inaccuracies. You can request erasure or restriction where the GDPR conditions are met. Portability applies to data you have provided where processing is automated and based on consent or a contract.
Articles 12 and 15 to 22 GDPR require us to handle requests about your rights. Article 6(1)(c) covers the data necessary to assess and answer your request. If we have reasonable doubts about identity, we may ask for the information needed to verify it.
We will respond without undue delay and within one month of receiving your request. If the complexity or number of requests requires more time, we may extend the period by up to two further months. We will explain why within the first month.
The website does not make solely automated decisions about your enquiry that have legal or similarly significant effects. We do not profile you when you visit.
Your right to object
If we process your data to serve the website, prevent abuse or respond to a business enquiry on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation. Email info@ristechgroup.com, write to us or call us. We may continue only if we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or if the processing is necessary to establish, exercise or defend legal claims.
Complaints to a supervisory authority
You can complain to a supervisory authority, particularly in the Member State where you usually live, work or believe an infringement took place. In Slovakia, contact the Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava.