Privacy policy

Data protection

The operator of these pages takes the protection of your personal data very seriously. We treat your personal data as confidential and handle it in accordance with data protection legislation and this privacy statement. When you use this website, various personal data is collected. Personal data is any data by which you can be personally identified. This privacy statement explains how and for what purpose we collect data. Please note that the transfer of data over the internet (e.g. when communicating by e-mail) may have security gaps. Complete protection of your data against access by third parties is not possible. The operator of these pages does not intend to transfer your personal data to a third country outside the EU or to an international organisation unless expressly stated here.

Notice regarding the responsible controller

The controller responsible for processing data on this website is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses and similar).

Withdrawal of consent to the processing of personal data

Many data processing operations are only possible with your express consent. You can withdraw consent you have given at any time. An informal message to us by e-mail is sufficient. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

Right to lodge a complaint with the competent supervisory authority

If you believe that our processing of your personal data breaches data protection law, you have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common machine-readable format. If you request the direct transfer of the data to another controller, we will only do so where it is technically feasible.

SSL / TLS encryption

For security reasons and to protect the transmission of confidential content (such as orders or enquiries you send to us as the website operator), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser shows “https://” instead of “http://”, and by the lock icon in the browser address bar.

When SSL or TLS encryption is active, the data you send to us cannot be read by third parties.

Information, restriction, erasure

Within the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing. You also have the right to have this data corrected, restricted or erased. For this and for further questions on the subject of data protection, you can contact us at any time at the address given in the Contact section of our website.

Objection to advertising e-mails

We hereby object to the use of contact details published under our statutory obligation in the Contact section of our website for sending advertising and information material that we have not expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam e-mails.

Cookies

Cookies are small text files that a website stores in your browser. Without consent we store only necessary cookies: the CookieYes cookie remembers your choice in the cookie banner, and NEXT_LOCALE the language you chose. The Google Analytics cookies (_ga and _ga_*) are stored only with your consent. The current list of cookies with their purpose and lifetime is in the cookie settings.

You can also restrict or delete cookies in your browser settings. The website works without them.

Server log files

On every visit, the hosting provider's server processes your IP address and technical details of your browser to deliver the page. The website application logs only errors and the outcome of form submissions, without IP addresses and without form content.

To limit abuse of the forms, the server briefly keeps the sender's IP address in memory to count submissions. It does not write it to a log or to disk.

Forms on this website

The website has three forms: job applications, galvanizing quote requests and the internal reporting (whistleblowing) system. For job applications and quote requests we process your name, e-mail, phone, company if given and the message, and for quotes also the selected plant. For a report we process the name, date of birth, contact address and the content of the report. Resend delivers each message by e-mail to our mailbox: job applications to HR, quote requests to the selected plant and reports to the responsible person. The website does not store the messages.

The legal basis is our legitimate interest in handling your request (Article 6(1)(f) GDPR) and, where your request concerns a contract, steps taken at your request before entering into it (Article 6(1)(b) GDPR). Reports are processed to comply with Slovak Act No. 54/2019 Coll. on the protection of whistleblowers (Article 6(1)(c) GDPR).

We keep form data until your request is handled, but no longer than 3 months, unless we need it longer for our contractual relationship or to establish or defend legal claims. Reports are kept for as long as the whistleblower protection act requires.

The forms are protected by Cloudflare Turnstile. Its script loads with the form page and checks technical properties of the browser and device to tell people from bots. It uses no cookies and does not track visits. The legal basis is our legitimate interest in protecting the forms from abuse.

Recipients and processors

Personal data are processed, to the extent necessary, by these service providers: INTERNET CZ, a.s. (FORPSI) for website hosting, Resend, Inc. for delivering form messages, Cloudflare, Inc. for protecting the forms from bots, CookieYes Limited for the cookie banner and consent records, Google Ireland Limited for Google Tag Manager and Google Analytics (only with your consent) and the OpenStreetMap Foundation for map tiles. Our mailboxes run on our own server.

Resend, Cloudflare and Google may also process data in the USA. Transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission. CookieYes and the OpenStreetMap Foundation are based in the United Kingdom, which the European Commission recognises as providing adequate data protection.

Plant map (OpenStreetMap)

The galvanizing plant pages show a map with the plant's location. When the page is displayed, the map tiles load from OpenStreetMap Foundation servers, which receive your IP address and browser details. The map stores no cookies and does not need your location.

More on how the OpenStreetMap Foundation handles data is in its privacy policy: OSMF Privacy Policy