GDPR Compliance

Our Commitment to Data Protection

At Aiagentic01 (The Very Best Company s.r.o.), we are fully committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Slovak Act No. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts.

1. Data Controller Information

2. Data Processing Activities

We process personal data for the following activities:

3. Data Security Measures

We implement the following technical and organizational measures (Art. 32 GDPR):

• Encryption — AES-256 for data at rest, TLS 1.3 for data in transit
• EU-based servers — All data processed on Google Cloud Platform servers in Frankfurt and Amsterdam
• Access controls — Role-based access, multi-factor authentication
• Regular audits — Periodic security assessments and vulnerability testing
• Data minimization — We collect only data strictly necessary for each purpose
• Pseudonymization — Applied where possible to reduce identification risk

4. International Data Transfers

We primarily process data within the EU/EEA. Where data transfers to third countries are necessary (e.g., Anthropic for AI processing), we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements (DPAs) with all sub-processors
• Adequacy decisions where applicable
• Transfer Impact Assessments (TIAs) for high-risk transfers

5. Sub-Processors

6. Your Rights (Art. 15-22 GDPR)

You have the right to:

• Access your personal data and obtain a copy
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict processing in certain circumstances
• Port your data to another controller
• Object to processing based on legitimate interest or direct marketing
• Withdraw consent at any time
• Not be subject to automated decision-making with legal effects

To exercise your rights: Email us at contact@aiagentic01.com. We will respond within 30 days. If we need more time (up to 60 additional days for complex requests), we will inform you within the initial 30-day period.

7. Data Breach Procedures

In the event of a personal data breach, we will:

• Notify the Slovak supervisory authority (Úrad na ochranu osobných údajov SR) within 72 hours of becoming aware of the breach (Art. 33 GDPR)
• Notify affected data subjects without undue delay if the breach is likely to result in a high risk to their rights and freedoms (Art. 34 GDPR)
• Document all breaches and remedial actions taken

8. Supervisory Authority

You have the right to lodge a complaint with the Slovak supervisory authority:

9. Data Protection Impact Assessment

We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risk to data subjects, particularly for AI-based automated processing and profiling activities, in accordance with Art. 35 GDPR.