1.Data Controller
The controller responsible for processing personal data is:
OLDPINE s.r.o.
Registered office: Tročany 12, 086 41 Tročany
Company registration number: 51872633
Email: info@oldpine.sk
Website: www.oldpine.sk
Hereinafter referred to as the “Company” or “Controller”.
2.Personal Data We Collect
When you use our contact form, we may process:
- Full name.
- Email address.
- Telephone number.
- Product of interest.
- Message content and any additional information you voluntarily provide.
Our hosting providers may also process technical information, including IP addresses and server request data, as part of operating the website.
3.Purposes and Legal Bases
Handling business inquiries
We process your information to respond to product inquiries, prepare quotations, and take steps before entering into a contract.
Legal basis: Article 6(1)(b) GDPR, where processing is necessary to take pre-contractual steps at your request and this legal basis applies to the inquiry.
General communication
For inquiries unrelated to entering into a contract, we process personal data to respond to your messages.
Legal basis: Article 6(1)(f) GDPR — our legitimate interest in handling incoming communications.
Establishment, exercise or defence of legal claims
Where necessary, we may retain relevant communications to establish, exercise or defend legal claims.
Legal basis: Article 6(1)(f) GDPR.
We do not use contact form submissions to send automated marketing emails.
4.Data Retention
We generally retain personal data collected through our contact form for 12 months following the last communication.
If an inquiry leads to a business relationship, legal dispute or another circumstance requiring longer retention, relevant information may be retained for the necessary period in accordance with applicable law.
After the applicable retention period, data will be deleted or anonymised unless another lawful basis for continued processing exists.
5.Recipients of Personal Data
We use external service providers to operate our website and process inquiries, including:
- Netlify — website hosting, contact form processing and submission storage.
- Websupport — receiving form notifications and communicating with customers.
These providers may process personal data to the extent necessary to deliver their services.
We do not sell personal data to third parties.
6.International Data Transfers
Some of our service providers may process or transfer personal data outside the European Union or European Economic Area.
Where such transfers occur, we ensure that they comply with Chapter V of the GDPR, for example through an adequacy decision or appropriate contractual safeguards.
Further information about applicable safeguards is available upon request.
7.Your Rights
Subject to the conditions set out in the GDPR, you have the right to:
- Request access to your personal data.
- Request correction of inaccurate data.
- Request erasure of personal data.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Request data portability where applicable.
- Lodge a complaint with a supervisory authority.
You can exercise your rights by contacting us using the email address provided in Section 1.
We will respond within the time limits established by the GDPR.
9.Providing Personal Data
Providing personal data through our contact form is voluntary.
However, your name, email address, telephone number and message are required to submit the form and allow us to process your inquiry.
Without this information, the form cannot be submitted.
11.Automated Decision-Making
We do not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR.
12.Changes to This Policy
We may update this Privacy Policy to reflect changes in applicable law or our data processing practices.
The latest version will always be available on this website.