Privaatsuspoliitika

1. Purposes of Personal Data Processing

We process your personal data exclusively for the following purposes:

a) Contact Form

When you send us a message through the contact form, we process your name, email address and the text of your message in order to respond to your enquiry.

• Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — responding to inquiries from prospective clients
• Retention period: 12 months from the last communication

b) Website Analytics (Google Analytics 4)

We use Google Analytics 4 with IP anonymization to measure website traffic. This data helps us improve our content.

• Legal basis: Consent (Art. 6(1)(a) GDPR) — granted via the cookie banner
• Retention period: 14 months (Google Analytics setting)

c) Contract Performance

If you become our client, we process the data necessary for the performance of the contract (name, company, address, email, phone, billing information).

• Legal basis: Performance of the contract (Art. 6(1)(b) GDPR)
• Retention period: Duration of the contract + 5 years (statutory archiving period)

2. Recipients of the Data

Your personal data may be shared with the following categories of recipients:

• Google LLC — analytics cookies (Google Analytics 4), only with consent
• Hosting provider — technical server infrastructure
• Accounting firm — processing of billing data

We do not transfer data to third countries outside the EU/EEA. Google Analytics uses EU servers.

3. Your Rights

Under the GDPR, you have the following rights:

• Right of access — you may request a copy of your data
• Right to rectification — we will correct inaccurate data
• Right to erasure — you may request deletion of your data (unless it is needed for the performance of the contract or for legal obligations)
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal
• Right to lodge a complaint — with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk). Data subjects residing in another EU/EEA Member State may alternatively lodge a complaint with the competent supervisory authority in their country of residence or place of the alleged infringement.

To exercise your rights, contact us at info@nobamo.org. We will respond to your request within 30 days.

4. Data Security

To protect your data, we use:

• HTTPS encryption across the entire website
• CSRF protection on the contact form
• Rate limiting (protection against automated attacks)
• Honeypot anti-spam protection
• Regular security audits