Protecting your personal data matters to us. This policy explains what personal data we process in connection with the www.gocml.com website and the CML (Corporate Mind Layer) service, for what purposes and on what legal basis, who we share it with, and what rights you have. Processing is governed by Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection.
I. Controller and contact details
The controller is GOCML s. r. o., with its registered office at Jurská 14621/19, 831 02 Bratislava-Nové Mesto, Slovakia, Company ID (IČO): 57 706 778, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, Insert No. 200970/B (the “controller” or “CML”).
For any data-protection matters, contact us at hello@gocml.com.
II. What data we process and why
1) Website visitors
During an ordinary visit we do not process data that would directly identify you. The website is static and uses no cookies and no analytics or marketing tools — see Section X. Cookies below.
2) Demo requests and the contact form
When you fill in the “Request Demo” form or contact us, we process the data you provide: first name, last name, work e-mail, company name, your role, industry, and the content of your message.
Purpose: handling your request, arranging and delivering the demo, mutual communication, and any discussions about cooperation.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with prospects and developing business relationships (Art. 6(1)(f) GDPR).
Retention: for the duration of handling your request and the related communication, at most 24 months from the last communication if no business relationship arises. If a contractual relationship is established, for its duration and any statutory retention periods.
3) E-mail and other communication
If you contact us by e-mail (hello@gocml.com) or otherwise, we process the data contained in the communication in order to handle it, based on our legitimate interest (Art. 6(1)(f) GDPR).
III. Recipients and processors
Our service providers may access the data and process it on our behalf under contract (processors), in particular our web-hosting provider (DreamHost, LLC) and our e-mail provider (Google). We do not disclose personal data to third parties for their own purposes unless required by law.
IV. Transfers to third countries
Our hosting and e-mail providers may also process data outside the European Economic Area (in the USA). Any such transfer relies on appropriate safeguards under the GDPR, in particular the standard contractual clauses approved by the European Commission, or an adequacy decision (EU-U.S. Data Privacy Framework).
V. Retention
We keep personal data only for as long as necessary to achieve the purpose of the processing, or as required by law. Specific periods are listed with the individual purposes above.
VI. Your rights
As a data subject you have the right to:
- access your personal data and information about its processing;
- have inaccurate data corrected and incomplete data completed;
- erasure (“right to be forgotten”) under the conditions of Art. 17 GDPR;
- restriction of processing under the conditions of Art. 18 GDPR;
- data portability under the conditions of Art. 20 GDPR;
- object to processing based on legitimate interest and to processing for direct marketing;
- where processing is based on consent, withdraw it at any time — without affecting the lawfulness of processing before withdrawal.
You can exercise your rights via the contact in Section I. You also have the right to lodge a complaint with the supervisory authority.
VII. Supervisory authority
Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.
VIII. Automated decision-making and profiling
We do not carry out automated individual decision-making or profiling with legal effects on data subjects when processing personal data obtained through the website.
IX. Changes to this policy
We may update this policy, in particular in response to legislative changes in data protection or changes in the tools we use. The current version is always available on this page.
X. Cookies
The www.gocml.com website stores no cookies on your device and uses no similar technologies (pixels, local storage) to track visitors. We use no analytics or marketing tools, and all parts of the site (including fonts) are served directly from our own domain — no data leaves to third parties during an ordinary visit.
Since nothing is stored on your device, no consent is required under § 109(8) of Slovak Act No. 452/2021 Coll. on Electronic Communications, and the site therefore shows no cookie banner. If we ever deploy tools that require consent, we will update this policy and ask for your consent first.
Effective date: 17 July 2026