1. Who processes your data
This English version is a translation for convenience. In case of any discrepancy, the Slovak version prevails.
The controller of personal data under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data is the operator of oxivy.eu (“we” or “Oxivy”):
- Operator
- Oxivy
- contact@oxivy.eu
Full identification details (business name, registered office and company ID) are provided in our quote and on request by e-mail.
We have not appointed a data protection officer, as the law does not require us to. Please contact us directly by e-mail with any data protection questions.
2. What data, why and for how long
We only process the data we need. For each purpose we state the legal basis and the retention period.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to an enquiry from the contact form or e-mail and preparing a quote | name and company, phone or e-mail, what you need, message, confirmation that you have read this policy (with date and time) | steps taken at your request prior to entering into a contract – Art. 6(1)(b) GDPR | 12 months after the last communication if no contract is concluded |
| Concluding and performing a contract, project communication | identification and contact details, billing details, project materials | performance of a contract – Art. 6(1)(b) GDPR | for the duration of the contract and then until limitation periods expire (usually 4 years) |
| Accounting and tax | data on invoices and accounting documents | legal obligation – Art. 6(1)(c) GDPR, Act No. 431/2002 Coll. on accounting | 10 years from the end of the year the documents relate to |
| Visitor analytics (Google Analytics 4) | online identifiers (cookies), device and browser data, approximate location, interactions on the site | your consent to analytics cookies – Art. 6(1)(a) GDPR and Section 109(8) of Act No. 452/2021 Coll. | up to 14 months (Google Analytics retention setting) |
| Ad measurement and targeting (Meta Pixel, Google Ads), if used | online identifiers (cookies), information about your visit and actions on the site | your consent to marketing cookies – Art. 6(1)(a) GDPR and Section 109(8) of Act No. 452/2021 Coll. | according to the cookie lifetimes in the Cookie policy |
| Storing your cookie choice | record of the cookie categories you allowed and the date of your choice | legal obligation to demonstrate consent – Art. 6(1)(c) and Art. 7(1) GDPR | 12 months, after which we ask again |
| Website security and operation (server logs at the hosting provider) | IP address, access time, requested page, browser type | legitimate interest in secure operation – Art. 6(1)(f) GDPR | for the period set by the hosting provider, usually a few weeks |
| Establishing and defending legal claims | data needed to prove a claim | legitimate interest – Art. 6(1)(f) GDPR | until the dispute ends or the limitation period expires |
Providing data in the form is voluntary, but without a contact (phone or e-mail) we cannot reply. We do not carry out automated decision-making or profiling with legal effects.
3. Who we share data with
We do not sell your data. We only make it available to trusted suppliers (processors) who help us run the website and our services, and only to the extent necessary:
- Web3Forms (Web3Creative, India) – delivers messages from the contact form to our mailbox, using sub-processors such as Amazon Web Services, Cloudflare and Hetzner. Transfers to third countries are safeguarded by the European Commission’s standard contractual clauses (Art. 46 GDPR). See the Web3Forms privacy policy.
- Google Ireland Limited (Ireland) – Google Analytics 4 and possibly Google Ads, only if you allowed the relevant cookies. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). See Google’s privacy policy.
- Meta Platforms Ireland Limited (Ireland) – Meta Pixel for measuring ads on Facebook and Instagram, only if you allowed marketing cookies. Data may be transferred to Meta Platforms, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework. See Meta’s privacy policy.
- web hosting and mailbox provider – stores the website files, server logs and our e-mail communication.
- accountant or accounting firm – if you enter into a contract with us, to process invoices.
- public authorities – only where required by law.
Fonts, images and scripts are served from our own server, so an ordinary visit does not contact third-party servers (such as Google Fonts) without your consent.
4. Your rights
With regard to the processing of your personal data you have the right:
- of access to your data and to a copy of it (Art. 15 GDPR),
- to rectification of inaccurate or completion of incomplete data (Art. 16 GDPR),
- to erasure when the data is no longer needed or you withdraw consent (Art. 17 GDPR),
- to restriction of processing (Art. 18 GDPR),
- to data portability for data you provided based on consent or a contract (Art. 20 GDPR),
- to object to processing based on legitimate interest (Art. 21 GDPR),
- to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal. You can change your cookie consent via “Cookie settings” in the website footer.
Send your request to the e-mail address above. We will reply without undue delay and within one month at the latest. To make sure we do not disclose your data to someone else, we may ask you to verify your identity.
If you believe we handle your data incorrectly, you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava, e-mail statny.dozor@pdp.gov.sk, tel. +421 2 32 31 32 14, dataprotection.gov.sk.
5. Security
We take appropriate technical and organisational measures to protect data. The website runs exclusively over encrypted HTTPS, data is accessible only to people who need it to handle your request, and we choose suppliers that provide sufficient data protection guarantees.
6. Changes to this policy
We may update this policy, for example when we add a new tool or the law changes. The current version is always on this page with its effective date at the top. We will inform you about significant changes that affect you.