1. Data controller
The controller is the entity identified on the Operator page. Questions and requests concerning personal data can be sent to the email or postal address listed there.
2. Contact form data
When you submit an inquiry, we process your name or company name, email, optional phone number, selected project type, indicative selection, message and submission time. A one-way hash of the IP address, rather than its readable form, is also stored to protect the form.
3. Purposes and legal bases
- handling an inquiry, preparing a proposal and taking steps before entering into a contract: Article 6(1)(b) GDPR,
- website security, spam prevention and the establishment, exercise or defence of legal claims: legitimate interests under Article 6(1)(f) GDPR,
- compliance with accounting, tax or other legal obligations where they arise: Article 6(1)(c) GDPR,
- optional analytics and external services: consent under Article 6(1)(a) GDPR where consent is required.
The required form fields are necessary to handle the inquiry. Without them, we cannot properly respond. Submitting the form does not result in automated decision-making or conclude a contract.
4. Recipients
Hosting, database, email, technical support and form protection providers may process data to the extent necessary. If the user enables optional services, their providers may also process data, in particular Google for Google Analytics, Maps or reCAPTCHA. Data is disclosed to a public authority where required by law.
5. Transfers outside the EEA
Some technical service providers may process data outside the European Economic Area. In such cases, a valid legal mechanism is used, such as an adequacy decision or standard contractual clauses. The relevant provider's privacy policy gives further details.
6. Retention
We retain an inquiry for the time necessary to handle it, conduct related communication and protect legal claims; it is then deleted or anonymised unless the law requires further retention. Accounting and contractual documents are retained for statutory periods. Security and anti-spam records are deleted on a rolling basis after the period needed to protect the form.
7. Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. Where processing relies on consent, you may withdraw it at any time without affecting processing before withdrawal. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
8. Cookies and external services
Necessary cookies provide the form session, security and storage of the cookie choice. Optional analytics and external content follow the user's choice. Details, the service list and the option to change your choice are available on the Cookies page and through the Cookie settings button in the footer.