Privacy and cookies
Návrh na právnu kontrolu / Draft for legal review. This text is a starting point. Have it reviewed by a lawyer and fill in the highlighted brackets before publishing. Remove this notice before launch.
01Who is the controller
The controller of personal data processed on oxidra.com is OXIDRA s.r.o., Černyševského 10, 851 01 Bratislava, Slovak Republic, Reg. No. 52443701, Tax No. 2121034036 (“we”).
Contact for data protection matters: show email, tel. +421 905 654 046. Processing is governed by Regulation (EU) 2016/679 (GDPR) and the Slovak Act No. 18/2018 Coll. on personal data protection. Cookies are governed by Section 109(8) of Slovak Act No. 452/2021 Coll. on electronic communications.
02What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Handling enquiries and communication (contact form, email, phone) | name, email, company (optional), topic, message content, site language | Art. 6(1)(b) and (f) GDPR (pre-contractual steps, legitimate interest) | for the duration of the matter and then for the limitation period, generally 3 years |
| Protecting the form against spam | one-off browser check (proof-of-work, no cookies and no third-party services), time of submission, a short-lived irreversible hash of the IP address to limit the number of submissions | Art. 6(1)(f) GDPR (legitimate interest in preventing abuse) | up to 24 hours |
| Site security and operation (server logs) | IP address, access time, requested page, browser type | Art. 6(1)(f) GDPR (legitimate interest in security) | [to be completed per hosting provider, typically up to 90 days] |
| Proof of your cookie choice | choice, date, settings version | Art. 6(1)(f) GDPR and Art. 7(1) GDPR (duty to demonstrate consent) | 12 months |
| Traffic statistics (Google Analytics 4, Metricool) | online identifier, device and browser data, pages visited, time, approximate location | Art. 6(1)(a) GDPR and Section 109(8) of Act 452/2021 (consent) | cookie 13 months; data in Google Analytics [set to 14 months in the GA4 admin] |
A message from the contact form is sent by email to our mailbox. We do not use reCAPTCHA or other third-party services to protect it.
Providing data is voluntary. Without the data from your message we cannot reply. We do not use automated decision-making or profiling with legal effects.
03Cookies and similar technologies
On your first visit we ask for your choice. Before you consent we store nothing on your device except a record of your choice, and we load no analytics tools. Rejecting does not limit your use of the site.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| oxidra_consent | oxidra.com (browser storage) | stores your cookie choice | 12 months | essential |
| _ga | Google Ireland Ltd. | distinguishes visitors for statistics | 13 months | analytics |
| _ga_<ID> | Google Ireland Ltd. | keeps session state | 13 months | analytics |
| Metricool tracker | Metricool | measures visits and pages viewed; according to the provider it does not use cookies | – | analytics (loaded only after consent) |
How to change or withdraw consent: at any time through “Cookie settings” in the footer. Withdrawing is as easy as giving consent and does not affect the lawfulness of processing before withdrawal. After withdrawal we remove analytics cookies and measurement stops.
04Recipients and transfers to third countries
Data may be received by our processors: hosting provider [add name], email provider [add name], Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for Google Analytics, and Metricool (provider in Spain, [add exact legal name from the terms of service]) for visit measurement.
Google may transfer data to the USA. The transfer relies on the European Commission’s adequacy decision (EU–US Data Privacy Framework) and, where needed, standard contractual clauses. If this basis changes, we will use another suitable mechanism or switch analytics off.
05Your rights
- right of access and to a copy (Art. 15 GDPR),
- right to rectification (Art. 16) and erasure (Art. 17),
- right to restriction of processing (Art. 18) and data portability (Art. 20),
- right to object to processing based on legitimate interest (Art. 21),
- right to withdraw consent at any time (Art. 7(3)), for example via “Cookie settings”.
Exercise your rights by email at show email. We will reply within one month.
06Complaint to the supervisory authority
If you believe we infringe the law when processing your data, you may lodge a complaint or a request to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, tel. +421 2 3231 3214, statny.dozor@pdp.gov.sk, dataprotection.gov.sk.
Compliance with the cookie rules is supervised by the Regulatory Authority for Electronic Communications and Postal Services, Továrenská 7, P. O. BOX 40, 828 55 Bratislava 24.
07Changes to this document
We may update this document, for example when tools or legislation change. The current version is always on this page. If purposes change materially, we will ask for your consent again.