Legal information

Privacy policy

This document explains what personal data we process, on what legal basis, who we share it with and how long we keep it. It is written to be read without a lawyer.

In force since 31 August 2026. This English text is a translation of the Slovak original; where the two differ, the Slovak version applies.

Who processes your data

The controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (the GDPR) and of Act No. 18/2018 Coll. on personal data protection is:

Details of the controller
Company name	Vendinvest Slovakia s.r.o.
Registered office	Dlhá 166/10, 925 22 Veľké Úľany, Slovak Republic
Company ID	52 538 681
Tax ID	2121079939
VAT ID	SK2121079939, VAT registered since 11 November 2019
Registration	Commercial Register of the District Court Trnava, section Sro, file no. 45005/T
Date of registration	3 August 2019
Email	info@vendinvest.sk
Phone	+421 948 160 447

For data protection matters contact us at info@vendinvest.sk or in writing at the registered office. We did not have to appoint a data protection officer under Article 37 GDPR, because we neither process data on a large scale nor systematically monitor data subjects.

For what purposes and on what legal basis

We process only the data you give us yourself and the data that arises from running the site technically. We do not trade in data and do not sell it to third parties.

Overview of the processing
Purpose	Which data	Legal basis
Answering an enquiry from the contact form	name, email, phone, the text of the message	Article 6(1)(b) GDPR, steps at your request prior to entering into a contract
Preparing and sending a quote	name, company, email, phone, description of the operation	Article 6(1)(b) GDPR
Sending news by email	email address	Article 6(1)(a) GDPR, your consent
Analytics cookies and traffic measurement	an identifier in a cookie, behaviour on the site	Article 6(1)(a) GDPR and Section 109(8) of Act No. 452/2021 Coll.
Operation, security and protection of the forms against abuse	IP address, browser type, time of access	Article 6(1)(f) GDPR, legitimate interest in running the site securely
Accounting and tax documents once business is concluded	billing and identification data	Article 6(1)(c) GDPR, legal obligation

What is voluntary

Filling in a form is voluntary. Without a name and a contact we cannot reply or prepare a quote, which is why those fields are required. You can withdraw your consent to analytics cookies and to the newsletter at any time, without affecting the lawfulness of processing before the withdrawal.

Cookies and similar technologies

A cookie is a small file that a site stores in your browser. The rules for them are set by Section 109(8) of Act No. 452/2021 Coll. on electronic communications.

The wording of the provision

"Anyone who stores information on a user's terminal equipment, or gains access to information stored there, may do so only where the user has given demonstrable consent meeting the requirements of a special regulation. [...] This does not prevent technical storage of or access to data for the sole purpose of transmitting a communication over a network or facilitating such transmission, or where it is strictly necessary for a provider of an information society service to provide the service explicitly requested by the user." (unofficial translation)

Section 109(8) of Act No. 452/2021 Coll. on electronic communications

That is what our approach follows from. We set necessary cookies without consent, because the site does not work without them. Everything else is set only once you allow it in the consent dialogue. Refusing is as easy as consenting and nothing is ticked in advance.

The full list of cookies and the option to change your decision are on the page Cookie settings.

Server logs

On every visit the web server records technical data: the IP address, the date and time of access, the address requested, the browser and operating system type, and the referring page. These logs arise automatically and are not linked to you as a person.

We use them to keep the site running, to find faults and to defend the forms against attacks. The legal basis is legitimate interest under Article 6(1)(f) GDPR. You can object to this processing, see the section on your rights.

Who we share data with

We do not sell personal data and do not share it for third party advertising. We share it only with those without whom the site and our reply would not work.

The web hosting provider, on whose servers the site runs and where the server logs and the messages from the forms arrive.
The analytics provider, if you allowed analytics cookies. The particular tool is named in the list on the Cookie settings page.
The email service provider, through which we reply to you.
The accountants and the tax adviser, if the enquiry turns into business and an accounting document with it.
Public authorities, where the law requires it.

With providers who process data for us we have a contract under Article 28 GDPR. We will email you the current list of processors on request.

Transfers outside the European Union

We process data primarily within the European Union. If any service involves a transfer to a third country, it takes place on the basis of a European Commission adequacy decision or of standard contractual clauses under Article 46 GDPR. We will document the current position on request.

How long we keep data

We keep data only as long as it is needed for the purpose we obtained it for.

Retention periods
Category	Period	Why that long
An enquiry that did not lead to business	3 years from the last correspondence	so we can pick up an earlier quote and defend ourselves in any dispute
Contract documentation	for the term of the contract and then for the limitation periods	bringing and defending legal claims
Accounting and tax documents	for the period set by the Accounting Act and tax legislation	a legal obligation, we cannot shorten the period
An email address in the newsletter list	until consent is withdrawn	consent is the only basis for this processing
Server logs	briefly, usually a matter of weeks	keeping them longer no longer serves security
The record of your cookie decision	12 months	so we do not ask on every visit and can demonstrate the consent

Your rights

As a data subject you have the following rights towards us. You can exercise them by email at info@vendinvest.sk or in writing at the registered office. We reply within one month of receiving the request at the latest.

01
The right of access. You can ask for confirmation of whether we process data about you and for a copy of that data.
02
The right to rectification. We will correct or complete data that is wrong or incomplete.
03
The right to erasure. We will erase data once it is no longer needed, if you withdraw consent, or if we processed it unlawfully. This does not cover documents we have to keep by law.
04
The right to restriction of processing. While we check whether the data is accurate or an objection is justified, we restrict the processing.
05
The right to data portability. Data you gave us on the basis of consent or a contract will be provided in a common machine readable format.
06
The right to object. You can object at any time to processing based on legitimate interest. Unless we demonstrate compelling legitimate grounds, we will stop the processing.
07
The right to withdraw consent. You can change your cookie consent in cookie settings, and withdraw newsletter consent through the unsubscribe link in the footer of any email.

Complaint to the supervisory authority

If you believe that our processing of your data breaches the law, you have the right to lodge a complaint with the supervisory authority. In Slovakia that is:

Supervisory authority
Name	Office for Personal Data Protection of the Slovak Republic
Address	Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava
Phone	+421 2 32 31 32 14
Website	dataprotection.gov.sk

We would rather you came to us first. Most misunderstandings can be sorted out directly and more quickly.

Security and automated decision making

The site is available only over an encrypted HTTPS connection. The forms are protected against automated abuse and only authorised staff have access to the messages received.

We carry out no automated decision making or profiling with legal effects under Article 22 GDPR. No algorithm assesses your data and decides about you without a person involved.

The site links to third party websites, for example a mapping service or social networks. We are not responsible for how data is processed on those sites and we recommend reading their own terms.

Changes to this document

We may change this document if the scope of the processing, the tools used or the law changes. We will publish the new wording on this page together with the date it takes effect. If a change requires fresh consent, we will ask for it separately.

This wording is in force from 31 August 2026 and replaces all earlier versions, including the text published for the Hungarian part of the group before the GDPR took effect.

Where to next