Personal data protection

The controller is DANAU, s.r.o., registered office Doležalova 15/C, 821 04 Bratislava, Slovakia, Company ID (IČO) 54 908 159, registered in the Commercial Register of the Bratislava III Municipal Court, Section Sro, File No. 164139/B.

For questions about personal data protection and to exercise your rights, you can contact us at info@danau.sk or by phone at +421 948 222 666.

We mainly process identification and contact details that you provide to us in an enquiry, during project preparation, in contractual communication or in ongoing cooperation. We always tie the scope of the data to a specific purpose:

• Contact form, email and phone – we process your full name, organisation, email address, phone number and the content of your message to reply to you and arrange an initial consultation. The legal basis is your consent (Art. 6(1)(a) GDPR) and, where the enquiry leads towards a contract, steps taken before entering into it (Art. 6(1)(b) GDPR).
• Offers and contractual cooperation – we process the identification and contact details of contact persons to prepare an offer, perform a contract and communicate about it (Art. 6(1)(b) GDPR) and to meet our legal obligations, for example in accounting (Art. 6(1)(c) GDPR).
• Website analytics – only with your consent, we use Google Analytics 4 (Art. 6(1)(a) GDPR). See the Cookie policy for details.
• Website operation and security – when you visit the website, the server may record technical data such as your IP address, the time of access and the address visited, to keep the website available and protected against misuse (legitimate interest, Art. 6(1)(f) GDPR).

We make personal data available only to the extent necessary: to providers who host our website and email for us as processors and, for website analytics, to Google Ireland Limited. We also disclose data to public authorities where the law requires us to.

Google may also process Google Analytics data in the USA. Google LLC is certified under the EU–US Data Privacy Framework, which is covered by the European Commission’s adequacy decision.

We keep data from enquiries while we deal with them and the communication that follows. If no cooperation results, we delete the data once it is no longer needed for the purpose for which it was collected, or when you withdraw your consent.

We keep data from contractual cooperation for the duration of the contract and afterwards for as long as the law requires, for example accounting records for 10 years under Act No. 431/2002 Coll. on Accounting.

Data in Google Analytics is kept for at most 14 months, and analytics cookies expire after at most 2 years.

In connection with the processing of your personal data, you have the right:

• to request access to your personal data (Art. 15 GDPR),
• to request its rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
• to request restriction of processing (Art. 18 GDPR),
• to data portability (Art. 20 GDPR),
• to object to processing based on legitimate interest (Art. 21 GDPR),
• to withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal (Art. 7(3) GDPR).

If you believe that we are handling your data incorrectly, you can contact us directly, and you also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.

Providing data in the contact form is voluntary. Without your name and email address, however, we cannot reply to you. We do not carry out automated individual decision-making or profiling.