Proflow

Privacy Policy

Last updated: March 13, 2026

1. Introduction

This Privacy Policy explains how Roundly Consulting s.r.o. ("we," "us," or "our"), the operator of the Proflow product, collects, uses, and protects personal information when you visit our website at proflow.sk (the "Website"). This policy applies to the Website only — for information about how the Proflow platform processes data on behalf of customers, please see our GDPR & Data Protection page. For more information about our company, visit roundly-consulting.com.

2. Data Controller

The data controller for personal data collected through this Website is:

Roundly Consulting s.r.o.
Website: roundly-consulting.com

You can contact us regarding data protection matters through our contact form.

3. Information We Collect

We collect the following types of information:

Contact form submissions: When you request a demo or contact us, we collect your name, email address, company name, and any message you provide.

Usage data: We use Google Tag Manager (GTM) to manage analytics scripts on our Website, including Google Analytics and Cloudflare Web Analytics, to collect anonymous usage data such as pages visited, time on site, referral source, and general geographic location. Google Analytics data is collected using cookies and is processed by Google LLC under their Privacy Policy. Cloudflare Web Analytics is privacy-first and does not use cookies or track individual visitors.

Cookies: We use essential cookies required for the Website to function (e.g., language preference) and, with your consent, analytics cookies managed through Google Tag Manager. See section 9 for full details on our cookie usage.

4. How We Use Your Information

We use your information to:

- Respond to your demo requests and inquiries
- Analyze Website traffic and usage patterns to improve our content and user experience
- Improve our Website and content
- Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Legal Basis for Processing

We process your personal data based on:

Legitimate interest: To operate and improve our Website and respond to inquiries.
Consent: For analytics cookies (Google Analytics) and where you voluntarily submit your contact information through our forms. You can withdraw cookie consent at any time through the cookie settings in the website footer.
Legal obligation: Where required by applicable law.

6. Data Retention

Contact form submissions are retained for as long as necessary to fulfill the purpose for which they were collected, typically up to 24 months. Google Analytics data is retained for 14 months and is automatically deleted after this period. Cookie consent preferences are stored for 12 months.

7. Your Rights

Under GDPR, you have the right to:

- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Request data portability
- Withdraw consent at any time (including cookie consent via the cookie settings in our footer)

To exercise any of these rights, please contact us through our contact form.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and secure hosting infrastructure.

9. Cookies

Our Website uses Google Tag Manager (GTM) to manage the loading of analytics scripts. GTM itself does not set cookies or collect personal data — it acts as a container that deploys other tags (such as Google Analytics) based on your consent preferences.

Essential cookies (always active):
preferred-localeStores your preferred language so the site displays in the correct language1 year
cc_cookieStores your cookie consent preferences1 year

Analytics cookies (require consent, managed via GTM):
_gaGoogle Analytics — distinguishes unique visitors2 years
_ga_*Google Analytics — maintains session state2 years
_gidGoogle Analytics — distinguishes visitors (24h)24 hours
_gcl_*Google Tag Manager — stores campaign and conversion data90 days

Analytics cookies are only set after you give consent through our cookie banner. You can change your preferences at any time by clicking "Cookie Settings" in the website footer. If you reject analytics cookies, any previously set analytics cookies will be automatically deleted.

10. Third-Party Services

Google Tag Manager (GTM): We use Google Tag Manager to manage and deploy analytics scripts on our Website. GTM itself does not collect personal data or set cookies — it serves as a tag management system that loads other services (such as Google Analytics) based on your consent. GTM is operated by Google LLC.

Google Analytics: We use Google Analytics 4 (GA4), deployed via GTM, to analyze Website traffic. Google Analytics uses cookies to collect anonymous data about your visit. This data is processed by Google LLC, which may transfer data to servers in the United States. Google is certified under the EU-US Data Privacy Framework. You can opt out of Google Analytics by declining analytics cookies in our cookie banner or by installing the Google Analytics Opt-out Browser Add-on.

Cloudflare Web Analytics: We use Cloudflare Web Analytics for privacy-first website analytics. This service does not use cookies, does not track individual visitors, and does not collect personal data. Analytics data is processed by Cloudflare, Inc. under their Privacy Policy.

Hosting: Our Website is hosted on Cloudflare Pages, a global content delivery and hosting platform operated by Cloudflare, Inc. Cloudflare may process certain technical data (such as IP addresses) for security and performance purposes. The Proflow application itself is hosted on European infrastructure. We do not embed third-party advertising or social media tracking scripts.

11. International Data Transfers

When you consent to analytics cookies, data collected by Google Analytics may be transferred to Google servers in the United States. These transfers are protected by the EU-US Data Privacy Framework and Google's standard contractual clauses. Additionally, Cloudflare Web Analytics data and website hosting data may be processed on Cloudflare's global network, including servers in the United States. Cloudflare participates in the EU-US Data Privacy Framework and maintains standard contractual clauses for international transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

13. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky).