Skip to content

Chemistry becomes art.

Bratislava, Slovakia

Data protection

GDPR·01

Privacy Policy

How we process the personal data you provide through the contact form or in direct communication, and what rights you have.

Effective from
Version
1.0
Document
GDPR·01

01Who processes your data

The controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) is:

Company name
CHEMARTE s.r.o.
Registered office
Estónska 5202/28, 821 06 Bratislava, Podunajské Biskupice, Slovakia
Company ID (IČO)
55013376
Registration
Commercial Register of the Municipal Court Bratislava III, section Sro, insert no. 164987/B
Email
robert.brna@chemarte.sk
Phone
0908 748 041

Given the scope and nature of our processing, we are not legally required to appoint a data protection officer. Please address all data protection requests and questions directly to the email or postal address above.

02What data we process

We process only the data you provide to us yourself, plus the technical data generated by operating the website. We do not acquire data from third parties or public databases for marketing purposes.

Contact form
Name or company name, email address, phone number (optional), and the text of your message.
Direct communication
Data you send us by email or tell us by phone. Typically name, contact details, company, job title, and the content of the communication.
Technical operating data
IP address, browser type and language, time and address of the request. These arise automatically in the hosting provider's operating logs and serve website security and diagnostics.

We do not process special categories of data (such as health or biometric data), and this website is not directed at children under 16.

03Purpose, legal basis and retention

Responding to your enquiry and communication prior to a possible contract
Article 6(1)(b) GDPR: steps taken at your request prior to entering into a contract. Otherwise Article 6(1)(f) GDPR: our legitimate interest in responding to a business enquiry. Retained for 3 years from the last communication.
Operating, securing and protecting the website against misuse
Article 6(1)(f) GDPR: legitimate interest in secure and functional operation. Operating logs are retained for a maximum of 30 days.
Compliance with legal obligations where an enquiry leads to a business relationship
Article 6(1)(c) GDPR: in particular accounting and tax legislation. The retention period follows directly from the law, generally 10 years.
Establishing, exercising or defending legal claims
Article 6(1)(f) GDPR: legitimate interest. For the duration of the applicable limitation periods.

Providing your data is voluntary. It is neither a statutory nor a contractual requirement. Without a name, email address and message, however, we cannot reply to you, as the form serves no other function.

Once these periods expire, we erase or anonymise the data unless specific legislation requires us to retain it for longer.

04Who we share data with

We do not sell, rent, or disclose your data to third parties for advertising purposes. We share it only with service providers who technically operate the website and deliver messages for us, acting as processors under Article 28 GDPR:

Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA
Website hosting and delivery, operating logs.
Resend (Plus Five Five, Inc.), 2261 Market Street, San Francisco, CA 94114, USA
Delivery of contact form messages to our mailbox.
Provider of email services and company mailboxes
Storing the received message and making it available to our team.

We may also disclose data to public authorities where required by law, and to our legal or accounting advisors to the extent necessary for them to perform their work.

The providers listed above are established in the United States. Transfers outside the European Economic Area are safeguarded by standard contractual clauses approved by the European Commission under Article 46(2)(c) GDPR, or by certification under the EU-U.S. Data Privacy Framework pursuant to Article 45 GDPR.

05Your rights

In relation to your personal data, the GDPR grants you the following rights:

Right of access (Art. 15)
You may request confirmation of whether we process your data and obtain a copy of it.
Right to rectification (Art. 16)
You may request that inaccurate data be corrected and incomplete data completed.
Right to erasure (Art. 17)
You may request erasure where the data is no longer necessary for the purpose it was collected for, or was processed unlawfully.
Right to restriction (Art. 18)
You may request that we only store the data and otherwise refrain from processing it.
Right to data portability (Art. 20)
Where we process data by automated means on the basis of a contract or consent, you may request it in a machine-readable format.
Right to object (Art. 21)
You may object at any time to processing based on our legitimate interest. Unless we demonstrate compelling legitimate grounds, we will stop the processing.
Right to withdraw consent (Art. 7(3))
Should we ever process data on the basis of your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out beforehand.

To exercise these rights, email robert.brna@chemarte.sk or write to our registered office. We respond within one month of receiving the request at the latest; in justified cases we may extend this period by a further two months and will notify you in advance.

06Complaint to the supervisory authority

If you believe our processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority. We would appreciate it if you contacted us first, as most matters can be resolved right away.

Supervisory authority
Office for Personal Data Protection of the Slovak Republic
Address
Hraničná 12, 820 07 Bratislava 27
Phone
+421 2 3231 3214
Email
statny.dozor@pdp.gov.sk
Web
www.dataprotection.gov.sk

07Automated decision-making and profiling

We do not carry out automated individual decision-making, including profiling, within the meaning of Article 22 GDPR. We do not use your data to build profiles, target advertising, or evaluate personal aspects.

08Cookies and tracking technologies

This website uses no analytics, marketing or profiling cookies. A detailed overview is set out in our separate document on Cookies.

09Changes to this document

We may update this document if our processing practices or the applicable legislation change. The current wording is always available at this address; the effective date and version number appear in the document header.

A question about this document?

Write to us. Requests concerning personal data are answered within one month of receipt at the latest.

Send an email