Privacy Policy

In connection with the processing of your personal data as individuals whose data we will process (hereinafter referred to as "data subjects"), we hereby provide you with information that the controller is obliged to provide to the data subject pursuant to Article 13 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Controller and Its Contact Details

• Business Name: GALMM s.r.o.
• Registered Office: J.Jančeka 39, Ružomberok 034 01
• Company ID (IČO): 31579736
• Phone: +421918577417
• Email: info@galmm.sk

We take the processing of your personal data seriously and value your privacy, therefore we have taken all necessary measures to protect it and to ensure your rights related to personal data. You may contact us regarding personal data by phone, in writing, or by email at the contact details provided above.

Your personal data obtained through the contact form on our website will be processed when you send us any request or question. We process this personal data to respond to your inquiries and fulfill your potential requests. The legal basis for processing your personal data is to take steps at your request prior to entering into a contract, as well as the subsequent contractual relationship between us and you. Providing personal data is voluntary; however, without providing it, we will not be able to respond or fulfill your requests.

We will process personal data of you, our customers, clients, suppliers of goods and services - contractual partners, as necessary to conclude a contractual relationship related to our activities. We process this personal data without the consent of the contracting parties to fulfill our contractual obligations, including pre-contractual relations in the field of metal surface treatment and plating of materials, including complaints about goods and services and communication with contractual partners. Providing your personal data is voluntary, but without providing it, we could not properly fulfill the contract with you. Therefore, if you want to use our services, you are obliged to provide your correct and current personal data. Furthermore, we process them to fulfill our legal obligations arising mainly from consumer protection laws, complaints (Act No. 40/1964 Coll. Civil Code, Act No. 250/2007 Coll. on Consumer Protection), as well as legal obligations in accounting, tax administration, registry management, and similar, so processing is necessary. For these purposes, the controller processes common categories of personal data, especially title, first and last name, signature, permanent residence address, delivery address, account number, phone number, email address, and other necessary personal data. We may also process your personal data for asserting our legal claims and debt collection if necessary.

We also process personal data of persons present in our premises through a monitoring camera system, as this processing is necessary for legitimate interests, which are the need to protect property and other values, so processing personal data for this purpose is necessary and personal data are processed without the consent of the data subjects.

When communicating with you through our website and for its functionality, we process cookies and other online identifiers that may lead to individual identification. Cookies are small text files that may be sent to your internet browser when visiting websites and stored on your device (computer or other internet-enabled device such as a mobile phone or tablet). Cookies are stored in the browser's file folder. Cookies usually contain the website name, validity, and value. On your next visit, the browser reloads the cookies and sends this information back to the website that originally created the cookies. The cookies we use do not harm your computer. Information about which cookies we process is provided on our site in a separate pop-up window that opens on your first visit.

Functions and services of social networks that you can use through Facebook pages serve us to present our services. These are subject to the privacy policies of these networks; therefore, information about the rights of data subjects and options for setting parameters are provided on the pages of these social network service providers. Facebook Ireland Limited is a joint controller with us regarding the processed personal data, as it provides us with various statistics. If you use these services, we may also use personal data you provided through social network providers. As data subjects, you can familiarize yourself with the controller's addendum to the page statistics and the addendum about controllers.

Personal data processing occurs by Facebook placing cookies on your computer or other end device from which you visit our fan page. Since such personal data may also be processed by Facebook, Inc., based in the USA, these personal data may be subject to cross-border transfers to third countries under standard contractual clauses pursuant to Article 46 of the Regulation. Information on how Facebook processes cookies is provided in its cookie policy.

We do not use any Facebook tools on our website, such as "Like" or "Share" buttons, nor marketing tools like the so-called pixel.

We provide your personal data to companies that provide us with information systems and cloud platforms, providers who ensure the technical operation of our services, website, and information infrastructure exclusively for this purpose, intermediaries whom we have authorized in writing to process personal data, thus we provide them to recipients or third parties to fulfill our obligations arising from contracts, legal regulations, or when you give us your consent. We may also provide them to public authorities, companies ensuring debt collection, and other persons to assert our legal claims. We declare that we do not provide personal data to entities in third countries that do not provide an adequate level of personal data protection.

Your personal data obtained through the contact form are processed during our mutual communication and subsequently for 2 years after its termination. We process personal data of our customers for the period necessary to fulfill obligations arising from contractual relationships until the purpose for which they are processed is fulfilled, but no longer than 10 years from the fulfillment of the purpose (service contract, complaint, debt collection...), and for the period necessary to fulfill other obligations established by legal regulations forming the legal basis for personal data processing, such as regulations governing accounting and tax records, registry, etc. (accounting documents are kept for 10 years, orders for 3 years).

Records from the monitoring camera system are kept for 15 days; in case of recording an event related to property damage or other security incidents, records are kept until the matter is resolved according to applicable legal regulations. After fulfilling the processing purpose and expiration of the retention period, personal data are promptly destroyed.

Information About Your Rights

As a data subject, you have the following rights regarding the processing of your personal data:

• The right to obtain confirmation as to whether personal data concerning you are being processed, and if so, the right to access those personal data along with the information provided in this document.
• The right to have inaccurate personal data corrected without undue delay and to have incomplete personal data completed.
• The right to erasure (right to be forgotten) of your personal data if they are no longer necessary for the purposes for which they were collected or otherwise processed and the retention period has expired.
• The right to restrict the processing of your personal data if:
  • you contest the accuracy of the personal data during the verification period,
  • processing is unlawful and you object to erasure and request restriction instead,
  • we no longer need your personal data for processing purposes but you need them to establish, exercise, or defend legal claims,
  • you object to processing necessary for legitimate interests pursued by us until it is verified whether our legitimate grounds override your rights.
• The right to receive personal data concerning you which you have provided to us and the right to transmit those data to another controller if processing is carried out by automated means based on a contract or consent and technically feasible.
• The right to object to the processing of your personal data processed for our legitimate interests. If we do not demonstrate a compelling legitimate ground for processing that overrides your rights and freedoms, we will cease processing without undue delay.
• The right to withdraw your consent to personal data processing at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If you withdraw your consent and there is no other legal basis for processing, we will promptly delete your personal data.
• The right to lodge a complaint with the supervisory authority if you believe that our processing of your personal data violates data protection laws. The supervisory authority is the Office for Personal Data Protection, Hraničná 12, 820 07 Bratislava 27, phone: +421232313214, email: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk.
• If personal data were not obtained from the data subject, the data subject has the right to obtain information about the source of their personal data or whether the data come from publicly accessible sources.

You can exercise your rights personally, by sending a written request by mail or electronically to our contact details above. We will respond to your request regarding personal data processing without undue delay within one month of receipt. In special cases, the period may be extended by two months; we will inform you of the reasons for the extension within one month of receiving the request. When handling your request, we are obliged to verify your identity. We will inform you about the verification procedure when responding to your request. Information is provided free of charge. However, if your requests are manifestly unfounded or excessive, we may charge a reasonable administrative fee for handling them. If there are justified doubts about the identity of the data subject exercising their rights, the controller is entitled to verify identity, for example, by requesting additional information, summoning, or verifying identity documents or by other appropriate means.

We also declare that we do not perform automated decision-making with legal effects for data subjects without human involvement, including profiling.