Privacy Policy

1. Introduction

The protection of your personal data is our priority. This document informs you about what personal data we process, for what purpose, on what legal basis, and what rights you have. Processing is carried out in accordance with Regulation (EU) 2016/679 ("GDPR") and Act No. 18/2018 Coll. on the Protection of Personal Data.

2. Personal Data We Process and Why

2.1 Contact Form

When you submit the contact form on our website, we process:

• Full name — identification of the applicant
• Email address — communication and response
• Phone number (optional) — alternative communication
• Project description — assessment of your inquiry and preparation of a proposal

Legal basis: Art. 6(1)(b) GDPR — processing is necessary for taking steps prior to entering into a contract, at the request of the data subject.

Retention period: 24 months from the last communication, unless a contractual relationship is established. In the case of a contractual relationship, 10 years (statutory archiving obligation).

2.2 Contractual Relationship

In the context of providing Services, we process billing and contact data of the Client (name, address, company ID, email).

Legal basis: Art. 6(1)(b) GDPR — performance of a contract; Art. 6(1)(c) GDPR — legal obligation (retention of accounting documents).

Retention period: 10 years pursuant to Act No. 431/2002 Coll. on Accounting.

3. Recipients of Personal Data

To support certain processing operations, we use processors who act exclusively in accordance with our instructions and are contractually bound to protect your data:

Transfer outside the EEA: Resend, Inc. is based in the USA. The transfer is secured by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection.

We do not sell or share your personal data with third parties for marketing purposes.

4. Your Rights

In connection with the processing of your personal data, you have the following rights:

• Right of access (Art. 15 GDPR) — right to know what data we hold about you
• Right to rectification (Art. 16 GDPR) — right to correct inaccurate or incomplete data
• Right to erasure (Art. 17 GDPR) — "right to be forgotten" under conditions set by GDPR
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (www.dataprotection.gov.sk)

To exercise your rights, contact us at gdpr@ballek.sk. We will respond without undue delay, within 30 days at the latest.

5. Cookies

Our website does not use analytical or marketing cookies. We use only technical means strictly necessary for the proper functioning of the website, which do not require consent under applicable Slovak electronic communications law.

6. Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Communication on this website is secured by HTTPS.

7. Contact

For any questions regarding personal data protection, please contact us:

Nikolas Ballek – BALLEK
Vaďovce 83, 916 13 Vaďovce, Slovak Republic
Email: gdpr@ballek.sk