Version: 1.1

Last Updated: 21 August 2026

ASTRUCT respects your privacy and is committed to protecting personal data processed in connection with our business activities.

This Privacy Notice explains what personal data we process, where we obtain it, why we use it, how long we retain it, who may receive it, and what rights you have in relation to your personal data.

1. Data Controller

The controller responsible for the processing of personal data is:

Ing. Attila Csölle, trading as ASTRUCT

Töböréte 354

929 01 Kútniky

Slovakia

Business ID (IČO): 51793024

Tax ID (DIČ): 1124709553

Email: info@astruct.eu

For questions concerning privacy or the processing of personal data, please contact us at the email address above.

2. Personal Data We Process

Depending on our relationship with you and the circumstances, we may process limited business-related personal data including:

󠁯•󠁏 name;

󠁯•󠁏 job title or professional role;

󠁯• company or organisation;

• business email address;

• business telephone number;󠁯

󠁯• business correspondence;

󠁯• records of previous communications;

󠁯• information relating to enquiries, quotations, projects, contracts or services;

󠁯• publicly available professional or company-related information relevant to establishing or maintaining a potential business relationship.

󠁯We aim to collect and process only information reasonably necessary for the relevant business purpose.

󠁯We do not intentionally collect special-category or other sensitive personal data for sales or business-development purposes.

3. How We Obtain Personal Data

󠁯We may obtain personal data:

󠁯• directly from you when you contact or communicate with us;

󠁯• from your company or organisation;

󠁯• from company websites;

󠁯• from publicly available company information;

󠁯• from public business directories;

󠁯• from publicly accessible professional or corporate sources;

󠁯• from publicly available web search results;

󠁯• through business correspondence relating to enquiries, quotations, projects or contracts.

󠁯For business-development purposes, we may research companies that appear reasonably likely to have a legitimate commercial interest in ASTRUCT's services.

󠁯Our research is focused primarily on company-level information and business contact information.

󠁯We do not intentionally collect private contact details for business-development purposes.

4. Why We Process Personal Data

We may process personal data for the following purposes.

Business enquiries and communication

To respond to enquiries, communicate with customers and prospective customers, prepare quotations and discuss potential projects or services.

Contract and project administration

To take steps before entering into a contract and to establish, perform and administer contracts, projects, orders and related business activities.

Business development and B2B marketing

We may identify and contact companies and relevant business contacts where we reasonably believe that ASTRUCT's services may be relevant to their organisation.

This may include limited and targeted business-to-business outreach relating to steel detailing, fabrication documentation and related services.

Customer and prospect management

We maintain records of companies, prospective customers, communications and business opportunities in order to manage our business relationships and sales activities.

Legal, accounting and administrative purposes

We may process information where necessary to comply with legal, accounting, tax or regulatory obligations and to establish, exercise or defend legal claims.

5. Legal Bases for Processing

Depending on the circumstances, we rely on one or more of the following legal bases.

Legitimate interests

We may process limited business contact information where necessary for our legitimate interests in:

• developing and operating our business;

• identifying potential B2B customers;

• communicating with relevant business contacts;

• marketing services that may reasonably be relevant to another business;

• managing customer and prospective customer relationships;

• maintaining records of business communications;

• protecting and exercising our legal rights.

Where we rely on legitimate interests, we consider the nature of the information, the context in which it was obtained, the relevance of our services to the organisation concerned, the reasonable expectations of the individual and the potential impact on their rights and freedoms.

You have the right to object at any time to processing of your personal data for direct marketing purposes.

Contract

We may process personal data where necessary to take steps at your request before entering into a contract or to perform a contract.

Legal obligation

We process certain information where necessary to comply with applicable legal, accounting, tax or regulatory requirements.

Where another legal basis is required under applicable law, we will process personal data only where an appropriate legal basis is available.

6. B2B Direct Marketing

ASTRUCT carries out limited and targeted business-to-business outreach.

We may contact a business where we reasonably believe that our services are relevant to its activities.

Where appropriate and permitted by applicable law, this may include contacting relevant individuals at a business using publicly available professional or business contact information.

Where a business contact's personal data has been obtained from a public source, we may process limited professional information such as their name, professional role, company and published business contact details.

We do not intentionally use private or personal email addresses obtained outside a business context for B2B marketing.

Direct marketing activities are carried out subject to applicable data protection and electronic communications laws in the relevant jurisdiction.

You may object to direct marketing at any time.

If you do not wish to receive further marketing communications from us, simply reply to our email or contact: info@astruct.eu

We will stop using your personal data for direct marketing purposes.

We may retain the minimum information necessary to record your objection and ensure that you are not contacted again for direct marketing purposes.

7. Sources of Business Contact Information

Where we have not obtained your personal data directly from you, it may have been obtained from:

• your employer's or organisation's website;

• publicly available company information;

• public business directories;

• publicly accessible professional or corporate sources;

• publicly available web search results.

Where reasonably practicable, the source of business contact information may also be recorded in our internal business records.

If you would like to know where we obtained your personal data, you can contact: info@astruct.eu

8. Service Providers and Data Recipients

We use selected third-party service providers to operate our business and information systems. These providers may process personal data where necessary to provide their services.

Our principal technology providers currently include:

• Websupport, s.r.o. — website hosting, database hosting and email infrastructure;

• Microsoft — cloud storage, office productivity and email-related services, including OneDrive, Excel and Outlook;

• OpenAI — AI-assisted company research, analysis and preparation of business information through ChatGPT and API-based services;

When using AI-assisted tools for business research, we seek to minimise the personal data submitted and limit its use to information reasonably necessary for the relevant business purpose.

Our business research is primarily focused on company-level information and publicly available professional or business contact information.

We may also disclose personal data to accountants, legal advisers, professional advisers, public authorities or other recipients where reasonably necessary or legally required.

We do not sell personal data.

Where service providers process personal data on our behalf, we use providers offering appropriate data protection and security safeguards and, where applicable, processing arrangements required under data protection law.

9. International Data Transfers

Some technology and cloud service providers we use may process personal data outside Slovakia or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we rely on applicable legal transfer mechanisms and safeguards provided under data protection law, which may include adequacy decisions, standard contractual clauses or other legally recognised safeguards where required.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal obligations.

As a general rule:

• active customer and project information is retained for the duration of the business relationship and for any additional period required for legal, accounting, tax, contractual or legitimate business purposes;

• prospective customer and B2B business-development contact information that does not result in an active business relationship is normally reviewed and deleted or anonymised after 24 months of inactivity, unless there is a reasonable business or legal reason to retain it for longer;

• business correspondence is retained only for as long as reasonably necessary for the relevant business purpose and any applicable legal requirements;

• where a person objects to direct marketing, we may retain minimal information on a suppression list for as long as necessary to ensure that the marketing preference continues to be respected.

Retention periods may vary where applicable legal, contractual or regulatory requirements require information to be retained for a different period.

11. Website, Technical Data and Cookies

ASTRUCT does not currently use its website to intentionally collect personal information through user accounts, analytics tools, advertising pixels or behavioural tracking technologies.

We have not intentionally implemented analytics or advertising tracking technologies on the ASTRUCT website.

Our website hosting and technical service providers may process limited technical information necessary to operate, secure and deliver the website. This may include information such as IP addresses, server logs, request information and other technical connection data.

Such technical processing may be necessary for website operation, security, troubleshooting and prevention of misuse.

If we introduce analytics, advertising technologies, non-essential cookies or other tracking technologies in the future, this Privacy Notice and any required cookie information or consent mechanism will be updated accordingly.

12. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, destruction or misuse.

Business information is stored using controlled business systems and cloud services.

Access to personal data is limited according to operational requirements.

We also seek to minimise the amount of personal data collected and processed, particularly in connection with business-development and company-research activities.

13. Your Rights

Subject to applicable data protection law and any relevant conditions or exceptions, you may have the right to:

• request access to your personal data;

• request correction of inaccurate or incomplete personal data;

• request deletion of your personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• object at any time to processing for direct marketing purposes;

• request data portability where applicable;

• withdraw consent where processing is based on consent;

• lodge a complaint with the relevant data protection supervisory authority.

These rights are subject to the conditions and exceptions provided by applicable law.

To exercise your rights, contact: info@astruct.eu

We may need to verify your identity before acting on certain requests.

14. Right to Object to Direct Marketing

You have the right to object at any time to the use of your personal data for direct marketing.

If you object, we will stop using your personal data for direct marketing purposes.

You can object simply by replying to a marketing email or by contacting: info@astruct.eu

We may retain limited information solely to ensure that your objection continues to be respected and that you are not added to future marketing campaigns.

15. Complaints

If you have concerns about how we process your personal data, please contact us first so that we can investigate the matter.

Email: info@astruct.eu

You also have the right to lodge a complaint with the competent data protection supervisory authority.

For ASTRUCT's establishment in Slovakia, the supervisory authority is:

Úrad na ochranu osobných údajov Slovenskej republiky (Data Protection Authority of the Slovak Republic)

You may also have the right to contact another competent supervisory authority depending on your location and the applicable data protection law.

16. Changes to This Privacy Notice

We may update this Privacy Notice from time to time where our business activities, systems, service providers or legal obligations change.

The current version will be published on the ASTRUCT website together with the date of the latest update.

Current version: 1.1

Last Updated: 21 August 2026