Status
September 2025
This privacy policy applies to the website operated by Akkamind d.o.o. (“Akkamind”, “we”, “our”, “us”). We are committed to protecting your personal data and ensuring transparency about how it is processed in compliance with the General Data Protection Regulation (GDPR).
Data Controller
The controller responsible for processing personal data is:
Akkamind d.o.o.
Vrhniška cesta 6,
1354 Horjul,
Slovenia
Email: office@akkamind.com
Scope and Roles
For the purposes of this privacy policy, Akkamind d.o.o. acts as a data controller when processing personal data of website visitors, newsletter subscribers and leads.
Where Akkamind provides its SaaS to business clients, Akkamind typically acts as a data processor on behalf of such clients, who remain the data controllers of the personal data processed in the service. In that case, the processing is governed by a separate Data Processing Addendum (DPA) and the clients’s instructions.
When using our SaaS platform, users may also upload business-related information such as energy usage data of their company. Akkamind processes such data strictly on behalf of the client and does not use it for any other purpose. The clients remains the data controller and Akkamind acts solely as the processor in accordance with the applicable DPA.
Categories of Personal Data
Depending on how you interact with our website and services, we may process the following categories of personal data:
- Technical and usage data collected automatically when visiting our website (e.g. IP address, device and browser information, website interactions).
- Contact details and communication content when you reach out to us.
- Information provided when subscribing to our mailing list.
- Lead and client data processed through our CRM system.
- Account data in connection with login and use of our SaaS solution.
- Business data uploaded by clients (e.g. energy usage data), processed only as a data processor under client instructions.
Purposes and Legal Bases
We process personal data only where permitted by law. Processing activities may include:
- Operation and security of the website (legitimate interest).
- Use of analytics technologies to understand website usage and improve performance (consent).
- Responding to inquiries and providing information about our services (contractual necessity or legitimate interest).
- Distribution of newsletters and marketing communications based on subscription (consent).
- Management of leads and clients through our CRM system (legitimate interest or consent, depending on context).
- Provision of login functionality and SaaS access (contractual necessity).
Use of Cookies and Similar Technologies
Our website uses cookies and similar technologies to enable functionality, remember preferences, analyze traffic, and, if consented to, support marketing and CRM integration.
Details on the specific technologies used, their providers, and storage periods can be found in our cookie policy.
Recipients of Data
Personal data may be processed by carefully selected service providers that support the operation of our website, analytics, CRM, and related services.
International Transfers
Where data is transferred outside the EU/EEA, we implement appropriate safeguards under GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, other recognized transfer tools or adequacy decisions. Further details are available upon request.
Data Sources
We obtain personal data:
- directly from you (e.g., forms, correspondence),
- automatically through your use of our website (e.g., cookies and similar technologies, see our cookie policy), and
- from limited third-party sources (e.g., business contact enrichment for B2B outreach), where permitted by law.
Data Retention
We retain personal data only as long as necessary for the purposes outlined in this privacy policy or as required by law. Retention periods may vary, for example:
- Communication data: retained for as long as necessary for business communication and record-keeping, and may be kept longer where required by law or for the establishment, exercise or defense of legal claims.
- Newsletter subscriptions: until consent is withdrawn.
- Customer and contractual data: as required by law (e.g. up to 10 years for accounting records).
Automated Decision-Making and Profiling
We do not engage in decision-making based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. Where we use basic analytics or audience segmentation for website optimization or marketing, we do so only with your consent and you may withdraw it at any time.
Your Rights as a Data Subject
You have the following rights under GDPR:
- Right to access your personal data
- Right to rectification (correction) of inaccurate data
- Right to erasure of your personal data
- Right to restriction of processing
- Right to data portability
- Right to object to the processing of your data
- Right to withdraw your consent at any time
When you contact us to exercise your rights, we will respond within one month of receipt of your request (extendable by two further months for complex requests, as permitted by GDPR). We may need to verify your identity to protect your data and will inform you if we require additional information. To exercise your rights, please contact us at office@akkamind.com.
If you believe that your rights have been infringed, you also have the right to lodge a complaint with a supervisory authority in the European Union if you consider that the processing of your personal data infringes applicable data protection laws.
Social Media and Third-Party Links
Our website may include links to third-party websites, plug-ins or social media platforms. These third parties process personal data under their own privacy policies. We are not responsible for their practices, and we encourage you to review their privacy notices.
Use of AI Features
For certain features, Akkamind may use AI service providers acting as data processors to generate insights or assist with functionality. We share only the minimum data necessary, apply appropriate security and confidentiality measures, and do not permit providers to use your data to train their models unless explicitly allowed by contract or based on your consent.
Security of Processing
We implement technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, taking into account the state of the art and applicable legal requirements.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time. Updates will be published on this page with an updated “Status” date.