1. Data Controller
The Data Controller is SMC Slovensko a.s., with registered office at Karadzicova 8/a, 82109 Bratislava - Slovak Republic, VAT No. SK2022701285, contactable at the email address info@smcsk.com.
2. Types of data collected
The website collects and processes the following personal data:
- Browsing data (IP address, browser information, session data)
- Data voluntarily provided by the user (e.g., by filling in contact forms or sending emails)
- Any usage data from cookies or similar technologies (see Cookies policy)
3. Purposes and legal basis of processing
Personal data is processed for the following purposes:
- Provision of the services requested by the user (legal basis: performance of a contract or pre-contractual measures)
- Management of information requests (legal basis: performance of a contract or pre-contractual measures)
- Compliance with legal and regulatory obligations (legal basis: legal obligation)
- Any direct marketing purposes (subject to explicit consent)
4. Processing methods
Data will be processed lawfully, fairly, and transparently, mainly using IT and electronic tools, adopting adequate security measures to guarantee confidentiality and integrity.
5. Retention period
Personal data will be retained:
- For the time necessary to respond to the user's requests
- To fulfil contractual or legal obligations
- If consent is given for marketing purposes, until consent is withdrawn
6. Data recipients
Data may be communicated to:
- Technical and IT service providers acting as Data Processors
- Competent authorities, where provided by current legislation
- Third parties only with the user's prior consent
7. Transfer of data to third countries
The main processing of personal data takes place within the European Union, with servers located in France and registered office in the Slovak Republic and operational office in Italy. However, in the context of business activities, data may also be accessible from secondary offices located in non-EU countries, such as Peru and Brazil.
In such cases, the Controller ensures that transfers take place in compliance with the safeguards established by EU Regulation 2016/679 (GDPR), including:
- Standard contractual clauses approved by the European Commission to regulate relations with foreign offices and ensure an adequate level of protection.
- Appropriate technical and organizational security measures to protect data (e.g., encryption, access limitation, management policies).
The user can obtain more information on the safeguards adopted or a copy of the standard contractual clauses by contacting the Controller at the above contacts.
8. Data Subject Rights
The user can exercise the following rights:
- Access their personal data
- Rectification or update
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Object to processing
- Withdraw consent (without affecting the lawfulness of processing before withdrawal)
9. Right to lodge a complaint
10. Changes to this Privacy Policy
The Controller reserves the right to modify this notice at any time. The updated version will always be published on this page with the date of update.