Data protection
GDPR·01
Privacy Policy
How we process the personal data you provide through the contact form or in direct communication, and what rights you have.
- Effective from
- Version
- 1.0
- Document
- GDPR·01
01Who processes your data
The controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) is:
- Company name
- CHEMARTE s.r.o.
- Registered office
- Estónska 5202/28, 821 06 Bratislava, Podunajské Biskupice, Slovakia
- Company ID (IČO)
- 55013376
- Registration
- Commercial Register of the Municipal Court Bratislava III, section Sro, insert no. 164987/B
- robert.brna@chemarte.sk
- Phone
- 0908 748 041
Given the scope and nature of our processing, we are not legally required to appoint a data protection officer. Please address all data protection requests and questions directly to the email or postal address above.
02What data we process
We process only the data you provide to us yourself, plus the technical data generated by operating the website. We do not acquire data from third parties or public databases for marketing purposes.
Category
Scope of data
- Contact form
- Name or company name, email address, phone number (optional), and the text of your message.
- Direct communication
- Data you send us by email or tell us by phone. Typically name, contact details, company, job title, and the content of the communication.
- Technical operating data
- IP address, browser type and language, time and address of the request. These arise automatically in the hosting provider's operating logs and serve website security and diagnostics.
We do not process special categories of data (such as health or biometric data), and this website is not directed at children under 16.
03Purpose, legal basis and retention
Purpose of processing
Legal basis and retention period
- Responding to your enquiry and communication prior to a possible contract
- Article 6(1)(b) GDPR: steps taken at your request prior to entering into a contract. Otherwise Article 6(1)(f) GDPR: our legitimate interest in responding to a business enquiry. Retained for 3 years from the last communication.
- Operating, securing and protecting the website against misuse
- Article 6(1)(f) GDPR: legitimate interest in secure and functional operation. Operating logs are retained for a maximum of 30 days.
- Compliance with legal obligations where an enquiry leads to a business relationship
- Article 6(1)(c) GDPR: in particular accounting and tax legislation. The retention period follows directly from the law, generally 10 years.
- Establishing, exercising or defending legal claims
- Article 6(1)(f) GDPR: legitimate interest. For the duration of the applicable limitation periods.
Providing your data is voluntary. It is neither a statutory nor a contractual requirement. Without a name, email address and message, however, we cannot reply to you, as the form serves no other function.
Once these periods expire, we erase or anonymise the data unless specific legislation requires us to retain it for longer.
04Who we share data with
We do not sell, rent, or disclose your data to third parties for advertising purposes. We share it only with service providers who technically operate the website and deliver messages for us, acting as processors under Article 28 GDPR:
Provider
Purpose of processing
- Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA
- Website hosting and delivery, operating logs.
- Resend (Plus Five Five, Inc.), 2261 Market Street, San Francisco, CA 94114, USA
- Delivery of contact form messages to our mailbox.
- Provider of email services and company mailboxes
- Storing the received message and making it available to our team.
We may also disclose data to public authorities where required by law, and to our legal or accounting advisors to the extent necessary for them to perform their work.
The providers listed above are established in the United States. Transfers outside the European Economic Area are safeguarded by standard contractual clauses approved by the European Commission under Article 46(2)(c) GDPR, or by certification under the EU-U.S. Data Privacy Framework pursuant to Article 45 GDPR.
05Your rights
In relation to your personal data, the GDPR grants you the following rights:
Right
What it means
- Right of access (Art. 15)
- You may request confirmation of whether we process your data and obtain a copy of it.
- Right to rectification (Art. 16)
- You may request that inaccurate data be corrected and incomplete data completed.
- Right to erasure (Art. 17)
- You may request erasure where the data is no longer necessary for the purpose it was collected for, or was processed unlawfully.
- Right to restriction (Art. 18)
- You may request that we only store the data and otherwise refrain from processing it.
- Right to data portability (Art. 20)
- Where we process data by automated means on the basis of a contract or consent, you may request it in a machine-readable format.
- Right to object (Art. 21)
- You may object at any time to processing based on our legitimate interest. Unless we demonstrate compelling legitimate grounds, we will stop the processing.
- Right to withdraw consent (Art. 7(3))
- Should we ever process data on the basis of your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out beforehand.
To exercise these rights, email robert.brna@chemarte.sk or write to our registered office. We respond within one month of receiving the request at the latest; in justified cases we may extend this period by a further two months and will notify you in advance.
06Complaint to the supervisory authority
If you believe our processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority. We would appreciate it if you contacted us first, as most matters can be resolved right away.
- Supervisory authority
- Office for Personal Data Protection of the Slovak Republic
- Address
- Hraničná 12, 820 07 Bratislava 27
- Phone
- +421 2 3231 3214
- statny.dozor@pdp.gov.sk
- Web
- www.dataprotection.gov.sk
07Automated decision-making and profiling
We do not carry out automated individual decision-making, including profiling, within the meaning of Article 22 GDPR. We do not use your data to build profiles, target advertising, or evaluate personal aspects.
09Changes to this document
We may update this document if our processing practices or the applicable legislation change. The current wording is always available at this address; the effective date and version number appear in the document header.
A question about this document?
Write to us. Requests concerning personal data are answered within one month of receipt at the latest.
Send an emailRelated documents
