Privacy Policy

1. Introduction

Your privacy matters to us. This page explains what personal data we collect, why we collect it and how we use it. We process personal data in accordance with the GDPR (EU) 2016/679 and Slovak Act No. 18/2018 Coll. on personal data protection.

2. What data do we collect?

We collect only the data you voluntarily provide when filling in the contact form:

• First and last name
• Email address
• Phone number (optional)
• Company or website name (optional)
• Type of cooperation you are interested in
• Sites you are interested in, or the address of your current website (optional)
• Message content

You send us this data yourself by submitting the form. Together with your message we also record your IP address and the time of submission – this serves solely to protect the form against abuse and spam.

Like every web server, ours automatically writes a technical record (log) each time a page is opened: IP address, time, address of the page opened, where you came from, and browser type. The records serve only for security (for example, automatically blocking addresses that try to attack the server) and for aggregate traffic statistics, which we evaluate directly on our own server. We do not use them for profiling and we do not send them to anyone.

On this website we do not use Google Analytics or any other third-party analytics or advertising tools. The only thing we track is the aggregate number of visitors for our own statistics: we use a cookie for this only with your consent; if you decline, we simply add an anonymous unit – without profiling (so that the count cannot be artificially inflated, the server remembers only an irreversible fingerprint of the IP address for 24 hours). You can find details in the Cookie Policy.

The traffic figures for our websites that we give on the home page and in the media kit come from the aggregate statistics of the individual websites (Google Analytics), not from this website. Each of these websites has its own privacy policy.

3. Why do we collect data?

We process personal data from the contact form solely for the purpose of:

• replying to your message or question,
• establishing business cooperation, if you are interested,
• preparing an offer and a contract for advertising or for website development and management.

Legal basis for processing: legitimate interest (Art. 6(1)(f) GDPR) and performance of a contract (Art. 6(1)(b) GDPR). We process technical server logs on the basis of our legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR).

4. How long do we keep data?

We keep personal data for the period necessary to handle your request, but for a maximum of 3 years from the last communication. After that it is securely deleted. If an enquiry leads to a contract, we keep the contract and accounting documents for 10 years, as required by the accounting and VAT laws. Technical server logs are deleted automatically after 400 days at the latest, error logs after 30 days.

5. Who do we share data with?

We do not sell or provide your personal data to third parties for marketing purposes. The data may be processed by the following processors:

• Hosting provider – Hetzner Online GmbH, Germany. In its data centre in the European Union is the server on which this website runs and through which the email from the contact form passes.

We have no other processors. The website does not load any content from external servers – fonts and all other files are stored directly on polac.sk, so your IP address is not passed to anyone else while you browse. The exception is the YouTube thumbnail tool, which, after you paste a video link, downloads the preview directly from the YouTube server (i.ytimg.com).

6. Websites we build for clients

We also offer website development, revival and management. For this service we process data in two roles:

• Data about you as a client (name, company, email, billing details, address of your website) we process as the controller, in order to prepare an offer, perform the contract and issue an invoice.
• Data of your website's visitors (for example messages from a contact form or server logs), where the website runs on our server: you are the controller. We process it only as a processor under Art. 28 GDPR, on the basis of a data processing agreement that we conclude with you together with the website management contract, and only on your instructions.

Client websites run on our server in the data centre of Hetzner Online GmbH in Germany (European Union). Backups serve only to restore the website. When the cooperation ends, we hand over the files and the database to you and delete our copies within the period agreed in the contract.

7. Your rights

Under the GDPR you have the following rights:

• Right of access – you can request a copy of your data.
• Right to rectification – you can request correction of inaccurate data.
• Right to erasure – you can request deletion of your data.
• Right to restriction of processing – you can ask us to temporarily stop using your data, for example while we verify its accuracy.
• Right to data portability – you can request your data in a machine-readable format.
• Right to object – you can object to processing based on legitimate interest.
• Right to withdraw consent – if processing is based on consent, you can withdraw it at any time.

To exercise your rights, contact us at info@polac.sk. We will handle your request within 30 days.

8. Complaints

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic: dataprotection.gov.sk.

9. Changes to this policy

We may update this policy from time to time. We will inform you of changes through this page. We recommend checking it regularly.

10. Contact

If you have any questions about personal data protection, contact us at info@polac.sk.