Privacy Policy

Controller Name: Roland Nagy - STREDEX STUDIO

Registered office/Address: Trstená na Ostrove

Registration number (IČO): 57917655

Tax identification number (DIČ): 112 899 1380

Email address: studio@stredex.com

Phone number: +421 904 898 821

Website: stredex.com

Name:
Processing of contact requests and quotation inquiries. Legal basis: GDPR Article 6(1)(b) – steps taken prior to entering into a contract.

Email address:
Providing responses to inquiries and ensuring communication. Legal basis: GDPR Article 6(1)(b) – steps taken prior to entering into a contract.

Phone number:
Communication regarding the quotation request and possible provision of services. Legal basis: GDPR Article 6(1)(b) – steps taken prior to entering into a contract.

Message content:
Understanding the customer’s requirements, preparing a quotation, and providing the appropriate service. Legal basis: GDPR Article 6(1)(b) – steps taken prior to entering into a contract.

IP address and technical data:
Ensuring the secure operation of the website, detecting technical issues, and preventing misuse. Legal basis: GDPR Article 6(1)(f) – legitimate interest.

Cookies and Google Analytics data:
Analyzing website traffic, measuring performance, and improving the website. Legal basis: GDPR Article 6(1)(a) – consent of the data subject.

Personal data provided through the quotation request form (name, email address, phone number, and message content) is retained for the period necessary to process the request and communicate with the interested party, but for no longer than 12 months. After this retention period expires, the data is permanently deleted.

If a contractual relationship is established following the quotation request, personal data provided through the quotation request form is processed for the period necessary for contract performance, communication, and management of the business relationship. Data required for invoicing, accounting, and compliance with other legal obligations is retained for the period defined by applicable legal regulations.

Technical data generated during the operation of the website (for example, IP address and server logs) is processed for the purpose of ensuring the secure operation of the website, detecting technical errors, and preventing misuse. The retention period of server logs is determined by the technical and security policies of the hosting provider used.

Cookies and statistical data collected by Google Analytics are processed exclusively based on the prior consent of the data subject. The retention period of cookies depends on the specific type and settings of each cookie, while the retention period of data collected by Google Analytics is determined by the data retention settings configured within the Google Analytics service.

Access to the provided personal data is limited exclusively to the Data Controller and persons whose processing of the data is necessary for handling quotation requests, communication, and providing services.

Personal data is processed and stored by the Data Controller in its own systems. We do not sell personal data to third parties, provide it for marketing purposes, or use it for purposes other than those for which it was provided by the data subject.

During the operation of the website, certain technical data, such as the IP address, may be automatically transmitted in order to ensure the functionality, security, and stability of the system. IP addresses are not used to identify data subjects and are not stored in a separate database.

We may use the Google Analytics service to analyze website traffic. When using this service, certain technical and usage data may be processed within Google’s systems. Google Analytics is activated only after obtaining the visitor’s prior consent.

When using Google Analytics and other external services, data processing is carried out in accordance with the privacy policies of the respective service providers.

In cases where required by law, we are entitled to provide personal data to the relevant authorities.

Under the GDPR and applicable Slovak data protection legislation, data subjects have the following rights:

Right of access to personal data
The data subject has the right to request information on whether their personal data is being processed and has the right to access their processed personal data.

Right to rectification
The data subject has the right to request the correction or completion of inaccurate or incomplete personal data.

Right to erasure
The data subject has the right to request the deletion of their personal data where there is no legal basis for further processing.

Right to restriction of processing
The data subject has the right to request the restriction of the processing of their personal data in certain cases defined by applicable legislation.

Right to data portability
The data subject has the right to receive their personal data, which they have provided, in a structured, commonly used, and machine-readable format, and may request the transfer of such data to another data controller where the legal conditions are met.

Right to object
The data subject has the right to object to the processing of their personal data where the legal basis for processing allows such an objection.

Right to withdraw consent
Where the processing of personal data is based on consent, the data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to lodge a complaint
The data subject has the right to lodge a complaint with the supervisory authority responsible for personal data protection, particularly with the Slovak Office for Personal Data Protection:

Office for Personal Data Protection of the Slovak Republic

Website:
https://dataprotection.gov.sk/