Politica de confidențialitate

1. Purposes of Personal Data Processing

We process your personal data exclusively for the following purposes:

a) Contact Form

When you send us a message through the contact form, we process your name, email and message text in order to respond to your request.

• Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — responding to potential client inquiries
• Retention period: 12 months from last communication

b) Website Analytics (Google Analytics 4)

We use Google Analytics 4 with IP anonymization to measure website traffic. This data helps us improve our content.

• Legal basis: Consent (Art. 6(1)(a) GDPR) — granted via cookie banner
• Retention period: 14 months (Google Analytics setting)

c) Contract Performance

If you become our client, we process data necessary for contract performance (name, company, address, email, phone, billing information).

• Legal basis: Contract performance (Art. 6(1)(b) GDPR)
• Retention period: Duration of the contract + 5 years (statutory archiving period)

2. Data Recipients

Your personal data may be shared with the following categories of recipients:

• Google LLC — analytics cookies (Google Analytics 4), only with consent
• Hosting provider — technical server infrastructure
• Accounting company — processing of billing data

We do not transfer data to third countries outside the EU/EEA. Google Analytics uses EU servers.

3. Your Rights

Under GDPR, you have the following rights:

• Right of access — you may request a copy of your data
• Right to rectification — we will correct inaccurate data
• Right to erasure — request deletion of data (unless needed for contract performance or legal obligations)
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal
• Right to lodge a complaint — with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk)

To exercise your rights, contact us at info@nobamo.org. We will respond to your request within 30 days.

4. Data Security

To protect your data, we use:

• HTTPS encryption across the entire website
• CSRF protection for the contact form
• Rate limiting (protection against automated attacks)
• Honeypot anti-spam protection
• Regular security audits