HERMSTAV

Privacy Policy

Protecting your personal data matters to us. This document explains what personal data we process, why, how long we retain it, and what rights you have under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection.

1. Data Controller

HERMSTAV s.r.o., Závodská cesta 3911/24, 010 01 Žilina, Slovenská republika, IČO: 54 386 926, DIČ: 2121652621, IČ DPH: SK2121652621
Email: info@hermstavsro.sk
Phone: +421 948 763 639

2. What Data We Process and Why

Contact form

When you send an inquiry via the contact form, we process your name, email address, phone number (if provided), and the content of your message. The purpose is handling your inquiry and communicating with you. The legal basis is the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with prospective clients (Art. 6(1)(f) GDPR).

Subcontractor registration

When you register as a subcontractor, we process the identification and contact details of the company and its contact person (company name, company ID, address, name, email, phone) and any further details you provide (services, certifications, references, pricing and payment terms). The purpose is keeping a register of potential subcontractors and establishing business cooperation. The legal basis is pre-contractual measures (Art. 6(1)(b) GDPR).

Cookies

Non-essential cookies (analytics, marketing) are used solely based on your consent (Art. 6(1)(a) GDPR). See our Cookie Policy for details.

Operational and security logs

When you visit the website, server logs may briefly process your IP address and browser data. The purpose is operating the site and protecting it against attacks and spam. The legal basis is our legitimate interest in website security (Art. 6(1)(f) GDPR).

3. Retention Periods

  • Contact form inquiries — for the time needed to handle the inquiry and up to 3 years thereafter.
  • Subcontractor registrations — for the duration of interest in cooperation, up to 3 years from the last communication.
  • Accounting and contractual records — for the periods required by law (generally 10 years).
  • Cookies — according to the validity periods listed in the Cookie Policy.

4. Data Recipients

We do not sell your personal data or share it with third parties for marketing purposes. To operate the website and email communication, we use vetted processors (web hosting and email service providers) who process data solely on our instructions. Data may be disclosed to public authorities where required by law.

5. Transfers to Third Countries

Your personal data is processed within the European Union. Should any service involve a transfer to a third country, it will be carried out in accordance with Chapter V of the GDPR (e.g. standard contractual clauses).

6. Your Rights

  • the right of access to your personal data (Art. 15 GDPR),
  • the right to rectification of inaccurate or incomplete data (Art. 16 GDPR),
  • the right to erasure (“right to be forgotten”, Art. 17 GDPR),
  • the right to restriction of processing (Art. 18 GDPR),
  • the right to data portability (Art. 20 GDPR),
  • the right to object to processing based on legitimate interest (Art. 21 GDPR),
  • the right to withdraw consent at any time — withdrawal does not affect the lawfulness of processing before withdrawal,
  • the right to lodge a complaint with the supervisory authority — Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

You can exercise your rights by emailing info@hermstavsro.sk. We will respond within one month at the latest.

7. Data Security

We have implemented appropriate technical and organisational measures — encrypted data transfer (HTTPS), a secured server, anti-abuse protection of forms, and access to data restricted to authorised persons only.

8. Final Provisions

We may update this policy from time to time; the current version is always published on this page. Effective from: 30 July 2026.