Updated: 9 September 2026
Who is responsible for your data
The data controller is SERBAS s.r.o., Poľovnícka 5338/22, 919 34 Biely Kostol, company ID: 47 432 276. You can send questions and requests about personal data to serbas@serbas.sk, to the postal address above, or contact us on +421 905 213 969.
Contact form and business communication
We process the name and company, email address, optional phone number, selected product or service and message you provide. We use them to respond, prepare a quote and follow up. Please do not send sensitive data or information we do not need to handle your enquiry.
If you request a quote or enter into a contract as an individual, the legal basis is steps prior to a contract and performance of a contract under Article 6(1)(b) GDPR. When communicating with a company representative or responding to a general question, we rely on our legitimate interest in handling the request and conducting business communication under Article 6(1)(f) GDPR. You may object to this processing.
Required fields allow us to identify and handle your enquiry; the form cannot be submitted without them. Providing a phone number is optional. You can also contact us by email or phone. Submitting the form is not consent to advertising and does not require allowing videos or maps.
Website operation and recipients
Hosting and form submission are provided by Netlify, Inc. Your enquiry is stored in Netlify Forms and a notification is sent to the SERBAS mailbox. Data is available as necessary to authorised people handling enquiries or providing technical administration, and to hosting and email service providers. We may disclose data to public authorities where required by law.
When you connect, the server also processes technical data such as your IP address, request time, requested URL and browser information. This is used to deliver the website, prevent abuse and resolve errors. The legal basis is our legitimate interest in secure, functional operation under Article 6(1)(f) GDPR.
Netlify uses international infrastructure; data may also be processed outside the EEA, including in the USA. Its data processing agreement sets out data protection and international transfer mechanisms, including standard contractual clauses. See also the Netlify subprocessor list. You can request information about these safeguards or a copy using our contact details.
Videos, maps and storing your preferences
YouTube and Google Maps are blocked by default. We load them only with your consent under Article 6(1)(a) GDPR. The provider for EEA users is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may process technical data, use cookies and transfer data outside the EEA under its privacy policy.
The available choices, their validity and how to withdraw consent are described in our cookies and external services policy. We do not use advertising tracking on this website. SERBAS does not carry out automated individual decision-making or profiling on this website.
Visitor analytics
Visitor analytics Umami is a separate optional service. It loads only after your explicit consent to analytics. After consent, the tracker may send visit data, such as the visited URL, referring page and browser technical data, to the server umami.matase.sk. Before consent, the tracker does not load; after consent is withdrawn, it is removed and further sending is blocked.
The Umami service configuration determines the specific retention period for analytics data. We will provide information about the current settings at the contact address. We do not use analytics for advertising profiling or automated individual decision-making.
How long we retain data
We retain enquiry data while handling the enquiry and any subsequent negotiations. Further retention depends on whether a contractual relationship arises, there is a legal obligation to retain relevant documents, or data is needed to establish and protect legal claims. In that case, we retain only what is needed for the purpose during the applicable statutory or limitation period. Once these reasons no longer apply, we delete the data, including stored enquiries and email copies.
Technical records are retained according to security and diagnostic purposes and the hosting provider's policies. Your browser privacy choice is valid for 180 days, or until changed or the website's data is cleared.
Your rights
Subject to the GDPR, you have rights of access, rectification, erasure and restriction of processing. For automated processing based on consent or a contract, you may exercise the right to data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation.
You may withdraw consent at any time without affecting the lawfulness of earlier processing. We normally handle requests within one month; if a lawful extension is needed, we will explain why. Where necessary to protect data, we will take proportionate steps to verify the requester's identity.
You have the right to lodge a complaint or request proceedings with the Office for Personal Data Protection of the Slovak Republic.