How we handle your data

This document explains what personal data we process in connection with this website, why we process it and what rights you have in this respect. The processing is governed by Regulation (EU) 2016/679 (GDPR) and by zákon č. 18/2018 Z. z. o ochrane osobných údajov (the Slovak Personal Data Protection Act).

1. Who is the controller

M&J BUSINESS, s. r. o., Stará Kremnička 13, 965 01 Žiar nad Hronom, IČO: 45433747, DIČ: 2022980674, IČ DPH: SK2022980674.

E-mail: adamovic@mjbusiness.sk, telephone: +421 917 164 429. Please use these details to contact us in matters of data protection.

2. What data we process

Data from the contact form

If you write to us through the form on this website, we process:

• your first name and surname — mandatory, so that we know whom we are replying to,
• your e-mail address — mandatory, in order to deliver our reply,
• your company name — optional,
• your telephone number — optional, if you would like us to contact you by telephone as well,
• your annual timber volume — optional, so that we can prepare a suitable demonstration,
• the subject of the message — mandatory, it determines who receives the enquiry on our side (sales or investors),
• the text of your message — mandatory.

Together with the message we also receive the language in which you filled in the form, so that we can reply to you in the same language.

Technical operating data

The web server records ordinary operating data — the IP address, the date and time of the request, the page address and the browser type. They serve solely to operate and secure the website, we do not link them to your identity and we do not use them to track behaviour.

When a form is submitted, the server additionally remembers your IP address for a short time in order to recognise repeated and automated submissions. This serves solely to protect the form against misuse.

3. Legal basis and purpose

Replying to an enquiry. Article 6(1)(a) GDPR — your consent, which you give by ticking the box in the form, and point (b) — steps taken prior to entering into a contract at your request.

Operation and security of the website. Article 6(1)(f) GDPR — our legitimate interest in a secure and functioning website and in protecting the form against misuse.

Business cooperation. If you become a customer or a business partner, we process the data on the basis of a contract (point (b)) and of legal obligations (point (c)), in particular accounting and tax obligations.

4. How long we keep the data

• An enquiry that did not lead to cooperation — no more than 6 months from the last communication, after which we delete the message.
• Server operating logs — no more than 30 days.
• The record of a form submission kept to protect against misuse — no more than 1 hour.
• Data of customers and partners — for the duration of the contract and of the periods laid down by law.

5. Whom we disclose the data to

We do not sell your data and we do not use it for advertising. We disclose it only to the entities without which the website and e-mail would not work:

• the server hosting provider (Hetzner Online GmbH, Germany) — operation of the website and processing of the form,
• the e-mail service provider (Microsoft Ireland Operations Limited) — delivery of the message to our mailbox.

Both act as processors under Article 28 GDPR and are bound by a data processing agreement. We disclose the data further only where the law requires us to do so (for example to law enforcement authorities).

6. Transfers outside the European Union

The website itself transfers nothing. It loads no content from third-party servers — fonts, images and scripts are stored directly with us, so your IP address does not reach any third party while you browse.

The message from the form is delivered by the Microsoft e-mail service. Its operation may involve a transfer of data to the USA; Microsoft relies on standard contractual clauses and on the EU–US Data Privacy Framework.

7. Cookies and tracking

This website does not set any cookies. We do not use analytics, advertising or remarketing tools and we do not track your behaviour. Browsing the website and submitting the form both work without us storing anything in your browser.

The details are set out in the cookie policy.

8. Your rights

In relation to your data you have the right:

• of access — to learn what we process about you (Article 15),
• to rectification of inaccurate data (Article 16),
• to erasure, where the data is no longer necessary (Article 17),
• to restriction of processing (Article 18),
• to data portability (Article 20),
• to object to processing based on a legitimate interest (Article 21),
• to withdraw your consent at any time (Article 7(3)),
• to lodge a complaint with a supervisory authority (Article 77).

You can exercise them by e-mail or in writing at the address given in point 1. We will reply within one month at the latest.

9. Supervisory authority

Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

10. Automated decision-making

We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR. Every enquiry is handled by a person.

11. Changes to this document

If the processing changes, we will update this document and change the effective date given in the introduction.