Privacy Policy

Last updated: 6/3/2026

This document describes how the controller processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll.

1. Controller

The controller of the website eef.sk is:

  • EF, s.r.o.
  • Andreja SládkoviÄŤa 3967/32, 903 01 Senec, Slovakia
  • Reg. No.: 44823371 · VAT ID: SK2022842393
  • E-mail: [email protected]

A Data Protection Officer (DPO) has not been appointed — our processing does not fall within the categories of Art. 37(1) GDPR that would require it. Direct any questions about processing to the e-mail above.

2. Purposes and legal bases of processing

  • Handling inquiries from the contact form — legal basis: performance of a contract / pre-contractual steps, Art. 6(1)(b) GDPR.
  • Providing ordered services and invoicing — performance of a contract, Art. 6(1)(b), and legal obligation (accounting, VAT), Art. 6(1)(c).
  • Website analytics (if deployed) — on the basis of consent, Art. 6(1)(a), obtained via the cookie banner.
  • Protection against abuse (honeypot, logs) — legitimate interest of the controller, Art. 6(1)(f).

3. Categories of personal data

  • Identification and contact data: full name, e-mail, phone number.
  • Content of the message sent through the contact form.
  • Billing details for customers (company ID, VAT ID, address).
  • Technical data: IP address, browser type, referrer, timestamp.

4. Recipients of personal data

Your data may be disclosed to the following categories of recipients (processors):

  • Resend (Resend, Inc., USA) — delivery of e-mail messages from the contact form.
  • Hosting provider and server infrastructure operator.
  • External accounting firm — for the purposes of invoicing.
  • Public authorities, where required by specific legislation.

We do not provide data to third parties for marketing purposes and we do not sell it.

5. Transfer to third countries

In the course of providing the service, personal data may be transferred to third countries, in particular to the USA:

  • Resend, Inc. (USA) — delivery of e-mails from the contact form.
  • Potentially Google LLC (USA) if Google Analytics is deployed — only based on your consent via the cookie banner.

The transfer is covered by the EU–US Data Privacy Framework (EC decision 2023/1795 on adequate level of protection) or by Standard Contractual Clauses under Art. 46 GDPR.

6. Retention period

  • Contact form messages — at most 3 years from the last communication.
  • Contractual and billing data — 10 years (legal obligation under the Accounting Act).
  • Cookie consent — 12 months, after which we will request it again.
  • Technical logs — at most 6 months.

7. Your rights

Under Arts. 15–22 GDPR you have the right to:

  • access your personal data and obtain a copy,
  • rectify inaccurate or incomplete data,
  • erase ("right to be forgotten") within the scope of Art. 17 GDPR,
  • restrict processing,
  • data portability,
  • object to processing based on legitimate interest,
  • withdraw granted consent at any time, without affecting the lawfulness of processing prior to withdrawal.

You can exercise your rights by e-mail at [email protected].

8. Right to lodge a complaint

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:

  • Office for Personal Data Protection of the Slovak Republic
  • HraniÄŤná 12, 820 07 Bratislava 27, Slovakia
  • web: dataprotection.gov.sk

9. Automated decision-making and profiling

We do not carry out automated decision-making producing legal or similarly significant effects for the data subject within the meaning of Art. 22 GDPR, and we do not engage in profiling.

10. Cookies

We use cookies on the website. A complete list, their purpose, and how to manage them can be found on the Cookies page. You can change your consent at any time via the "Cookie settings" button in the site footer.

11. Contact

If you have any questions regarding the protection of personal data, contact us at [email protected].