Privacy Policy
This is an English translation provided for information purposes. In the event of any discrepancy, the Slovak version prevails.
Marstein s. r. o. processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the “Regulation” or “GDPR”) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data (the “Act”).
1. Controller
Marstein s. r. o., Lermontovova 911/3, 811 05 Bratislava – Staré Mesto, Slovakia
Company ID (IČO): 57 715 807 · Tax ID (DIČ): 2122900747 · VAT ID (IČ DPH): SK2122900747
Registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, Insert No. 201034/B.
Phone: +421 915 233 354 · Email: marstein@marstein.sk
Given the nature, scope and purposes of the processing, the controller is not required to appoint a data protection officer. You can send any questions about personal data protection directly to the contact details above.
2. What data we process
- Handling enquiries. If you contact us via the contact form or by email, we process your name, email address, company name (if provided), the selected area of interest and the content of your message. We do so at your request prior to entering into a possible contract and in our legitimate interest in handling your enquiry (Article 6(1)(b) and (f) of the Regulation). We keep the data until the enquiry has been handled, for no longer than 12 months from its receipt, unless a contract is concluded.
- Concluding and performing a contract. If you enter into a contract with us, we process your identification and contact details, billing details and the data necessary to provide the service. The legal basis is the performance of a contract (Article 6(1)(b) of the Regulation). We keep the data for the duration of the contractual relationship and, after it ends, for the limitation period.
- Compliance with legal obligations. We process data contained in accounting and tax documents on the basis of a legal obligation (Article 6(1)(c) of the Regulation) for the period laid down by law, usually 10 years.
- Website operation and security. To keep the website running and to protect it against misuse, we process technical server logs (IP address, time and address of the request) and a short-term counter record when the form is submitted. The legal basis is our legitimate interest in the security and reliability of the website (Article 6(1)(f) of the Regulation). We keep technical logs for no longer than 14 days.
Providing data when submitting the form is voluntary; however, we cannot handle your enquiry without your name and email address. We do not carry out automated decision-making or profiling, and we do not process special categories of personal data. We do not use data from the form for direct marketing.
We treat data related to the provision of services to clients as confidential and do not disclose it to third parties, except in cases provided for by law or with your express consent.
3. Sources of data
We obtain data directly from you (form, email, telephone or in-person communication, contract). When performing a contract, we may verify data about the contracting party in publicly available registers.
4. Who we share data with
Data is processed by persons authorised by the controller. To ensure technical operation, we use providers of server infrastructure and email services, who process the data as processors under a data processing agreement. Data from the form is stored in our internal system (CRM), which runs on our own server. We do not transfer data to third countries.
5. Cookies and tracking
The website does not use cookies, traffic measurement tools or marketing tools, and does not store any data on your device. Fonts and scripts are part of the website and are not loaded from external servers.
6. Your rights
- the right of access to your personal data and to obtain a copy of it,
- the right to rectification of inaccurate or incomplete data,
- the right to erasure, unless a legal obligation to retain the data prevents it,
- the right to restriction of processing,
- the right to object to processing based on legitimate interest,
- the right to data portability, where processing is based on a contract and carried out by automated means,
- the right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before its withdrawal,
- the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
You can exercise your rights by email at marstein@marstein.sk or in writing at our registered office address. We will respond to your request within the time limits set by the Regulation.
7. Changes to this notice
We may update this notice. The current version is always available on this page.