1. Data Controller
Stanke group s. r. o.
Černyševského 10
851 01 Bratislava – Petržalka
Slovakia
Company ID: 45326541
Email: ms@stanke-group.eu
2. Personal Data We Process
When you contact us through the website form or by email, we process the information you provide, including:
- your name,
- email address,
- company name, if provided,
- the subject or area of your enquiry,
- the content of your message and any additional information you submit.
We may also process technical information necessary for secure website operation, such as IP addresses, request timestamps and server access information.
Please do not submit passwords, access credentials or confidential internal information through the contact form.
3. Purposes and Legal Bases
We process personal data for the following purposes:
Handling enquiries and business communication. We use your information to respond to enquiries, discuss requested services and prepare potential proposals. The legal basis is our legitimate interest in responding to communication initiated by you, under Article 6(1)(f) GDPR. Where processing is necessary to take pre-contractual steps requested by an individual, Article 6(1)(b) GDPR may apply.
Website security and technical operation. Necessary technical records are processed to protect against misuse, diagnose problems and maintain website functionality. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.
Compliance with legal obligations. If a business relationship is established, relevant personal data may also be processed to comply with applicable legal obligations under Article 6(1)(c) GDPR.
Submitting an enquiry does not automatically subscribe you to marketing communications.
4. Data Retention
Personal data from enquiries that do not result in a contract are generally retained for no longer than 24 months after the last relevant communication, unless further retention is necessary to protect legal claims.
Where a contractual relationship is established, related information may be retained throughout the relationship and subsequently for applicable legal obligations or the protection of legal claims.
Technical and security records are retained only for as long as necessary for website operation, diagnostics and security, generally no longer than 27 weeks (approximately six months), unless a specific security incident or legal obligation requires further retention.
Data in Google Analytics 4 is retained for no longer than 14 months and then deleted automatically by the service. Your analytics cookie preference is stored in your browser for six months.
5. Recipients of Personal Data
Personal data may be accessed, where necessary, by authorized persons involved in our operations and technical service providers, including hosting, email infrastructure, website maintenance and security providers. If you consent to analytics cookies, website usage data is also processed by the provider of Google Analytics 4 (section 7).
We do not sell personal data or provide it to third parties for their independent advertising purposes.
Information may also be disclosed to competent authorities where required by law.
6. International Data Transfers
The website and contact form are operated on a server in the Slovak Republic. Messages sent through the contact form are delivered to a mailbox on a mail server in the Slovak Republic. Apart from Google Analytics 4, which the website loads only with your consent, the website does not load fonts, scripts or other third-party services.
When Google Analytics 4 is used, data may also be processed outside the European Economic Area, in particular in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision; Google’s data processing terms also include the Standard Contractual Clauses. Details: Google Ads Data Processing Terms (which also apply to Google Analytics) and Google’s information on data transfers.
7. Google Analytics 4
If you consent to analytics cookies, we use Google Analytics 4 to collect statistics about website traffic and how visitors interact with our content.
The data processed may include pages visited, website interactions, device and browser information, and pseudonymous identifiers associated with analytics cookies.
The legal basis for this processing is your consent under Article 6(1)(a) GDPR.
Google Analytics does not run without your consent. You can withdraw your consent at any time through the “Cookie Settings” link in the website footer.
The analytics service is provided by Google. For visitors in the European Economic Area, the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes Google Analytics data on our behalf as a processor under the Google Ads Data Processing Terms. Data may also be processed in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses (section 6). The cookies in use are listed on our Cookies page.
We do not send names, email addresses or contact form messages to Analytics.
8. Your Rights
Under GDPR, depending on the circumstances, you may have the right to:
- access your personal data,
- rectify inaccurate information,
- request erasure where applicable,
- restrict processing,
- object to processing based on legitimate interests,
- data portability where applicable.
You may exercise your rights by contacting ms@stanke-group.eu.
You also have the right to lodge a complaint with the Slovak Data Protection Authority:
9. Providing Personal Data
Providing personal data through our contact form is voluntary. However, without the information required to handle your request, we may not be able to respond.
10. Automated Decision-Making
We do not use automated individual decision-making or profiling with legal or similarly significant effects when handling enquiries.
11. Changes to This Notice
We may update this notice when website operations, personal data processing or applicable legal requirements change.