Legal document
Effective from 04/08/2026
This document explains what personal data we process in connection with the brunec.sk website, why we process it, how long we keep it, and what rights you have. It is written to be readable — if anything is still unclear, write to us.
The brunec.sk website is operated by Vratka s. r. o., registered office at Chorvátska 8, 811 08 Bratislava, Slovak Republic, company ID: 56067968, VAT ID: 2122179224. This company is the controller within the meaning of the GDPR.
You can reach us by e-mail at kontakt@brunec.sk or by phone at +421 918 848 720. We have not appointed a Data Protection Officer because the law does not require us to — your questions are handled directly at the contacts above.
Contact form data. If you write to us through the form, we process your first and last name, e-mail address, phone number (if you provide one), the text of your message, and optional details about the intended project — project type, budget range, and expected timeline.
Technical data. On every visit our server records ordinary operational data: IP address, date and time of access, the address of the requested page, and browser details. This serves operation, security, and troubleshooting.
Usage data. Our own measurement tracks in aggregate which parts of the site visitors open and which buttons they use. These counts are kept without identifiers that would lead to a specific person, and are not linked to your IP address or to the contents of the form.
Analytics data. If you allow analytics cookies, we load Google Tag Manager, which in its current configuration manages Google Analytics 4. Google processes a random identifier, device and browser type, approximate location, pages visited and interactions. It uses the IP address when receiving the request to derive approximate location and discards it before logging.
Marketing data. If we configure Google Ads and you allow marketing cookies, we load it directly as a separate tool. It processes online identifiers, IP address, device details, pages visited and interactions to measure campaigns and create advertising audiences. Only a tool listed in the Cookie Policy is active.
Data stored in your browser. These are cookies, local storage and similar technologies. Their purpose and lifetime are described in the Cookie Policy.
Answering your message and preparing a collaboration — processing is necessary for steps taken at your request prior to entering into a contract, under Art. 6(1)(b) GDPR.
Performing a contract with a client — delivering the ordered services and the related communication, likewise under Art. 6(1)(b) GDPR.
Operating and securing the website against abuse — our legitimate interest in keeping the site working and free of abuse, under Art. 6(1)(f) GDPR.
Improving the content and usability of the website — aggregate view and click counts from our own measurement, which we do not link to any individual. Should such a count be considered personal data at all, we rely on our legitimate interest under Art. 6(1)(f) GDPR.
Complying with legal obligations — in particular accounting and tax obligations, under Art. 6(1)(c) GDPR.
Optional cookies (analytics and marketing) — solely on the basis of your consent under Art. 6(1)(a) GDPR. Consent is voluntary and you may withdraw it at any time.
Providing your first name, last name and e-mail address in the contact form is necessary so we can identify and answer your enquiry. The form cannot be submitted without them. Your phone number, message and project details are optional; not providing them has no consequence other than making our first answer potentially less specific. Providing the data is neither a statutory nor a contractual obligation.
A record submitted through the contact form: at most 2 years from submission. If a collaboration begins, the necessary contractual and client data is recorded separately.
Contractual and client data: during the collaboration and afterwards for the period necessary to protect legal claims. We keep accounting and tax documents for 10 years where the law requires it.
Server operational logs: usually 90 days, unless needed longer to investigate a security incident.
Aggregate data from our own measurement: without a time limit, as it does not allow anyone to be identified.
User-level and event-level data in Google Analytics 4: according to the service setting, at most 14 months. Aggregate reports that no longer allow identification may remain longer.
Marketing data in Google Ads: for the specific campaign and afterwards according to the relevant advertising account setting, only while necessary to measure and evaluate that campaign.
The record of your cookie choice: 12 months from when it was given, or until you change it sooner.
Once these periods expire we delete the data or anonymise it so that it can no longer identify anyone.
We do not sell your data. We share it only with those without whom the website, our work and our advertising would not function:
the provider of the server space the website runs on,
the provider of the e-mail service we reply to you through,
Google Ireland Limited — Google Tag Manager and Google Analytics 4 after analytics cookies are allowed; Google Ads only after it is configured and marketing cookies are allowed,
our accountant and, where necessary, our legal counsel,
public authorities, where the law obliges us to.
The hosting, e-mail and accounting providers act as our processors and are contractually bound to protect the data at least as well as we do.
Google Ireland Limited may involve its parent company in the United States. Transfers to certified US companies rely on the European Commission adequacy decision for the EU–U.S. Data Privacy Framework. Where that framework does not apply to a particular transfer, the provider uses the European Commission Standard Contractual Clauses. You may request a copy or further information about the applicable safeguards at kontakt@brunec.sk. If you do not allow optional cookies, no transfer takes place through these analytics and marketing tools.
We do not make automated decisions about you that would produce legal effects concerning you or similarly significantly affect you.
If you allow marketing cookies, the advertising tools listed above place you into interest groups based on your behaviour so they can show you more relevant advertising. This is profiling for advertising purposes only, and you stop it at any time by withdrawing your consent.
In relation to your personal data you have the following rights:
Right of access — to learn whether we process data about you and to receive a copy of it.
Right to rectification — to have inaccurate data corrected or incomplete data completed.
Right to erasure — to have your data deleted where a GDPR condition is met and no statutory exception applies.
Right to restriction of processing — to request a temporary restriction in the circumstances set out by the GDPR.
Right to data portability — to receive data you provided in a machine-readable format where we process it automatically on the basis of consent or a contract.
Right to object — to object, on grounds relating to your particular situation, to processing based on our legitimate interest.
Right to withdraw consent — at any time and without giving a reason, without affecting the lawfulness of processing before withdrawal.
Simply send your request to kontakt@brunec.sk. We will reply within one month of receiving it at the latest; in justified cases we will tell you within that period that it is being extended.
If you believe we process your data unlawfully, you may initiate data-protection proceedings with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic. You may also complain to the supervisory authority in the country of your habitual residence or workplace.
The website runs exclusively over an encrypted HTTPS connection. Only authorised people can reach the administration through individual accounts; two-factor authentication is also available. We keep the system updated, limit access to what is needed and back the data up.
We may adjust this wording over time — for example when a new feature is added to the website or the law changes. The current version is always available on this page and its effective date is shown at the top. If a change affects the scope of cookies you consented to, we will ask for your consent again.
Legal document
Write to us and we will reply within one month of receiving your request at the latest.