Personal data protection (GDPR)

1. Operator

datatek, spol. s r. o.
ID: 54939224
Registered office: Doležalova 3424/15C, 821 04 Bratislava
Operation: Priehradná 40B, 821 07 Bratislava
E-mail: info@datatek.sk
Phone: +421 904 701 397

The company is registered in the Commercial Register of the City Court Bratislava III, section: Sro, insert no. 164268/B.

This document is information according to Art. 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act no. 18/2018 Coll. on the protection of personal data.

2. Scope

These principles apply to the processing of personal data:

• website visitors www.datatek.sk,
• persons who contact us (form, e-mail, telephone),
• representatives of clients and business partners (B2B),
• users of the support portal (Request Manager) at support.datatek.sk,
• job applicants.

As an operator, we process data about you. When providing IT services to the client, we can also be an intermediary (Art. 28 GDPR) — then we process data on behalf of the client according to the written contract / DPA.

3. Purposes, legal bases and retention periods

Purpose	Legal basis (GDPR)	Typical data	Retention period
Answer to the inquiry from the contact form / e-mail	Art. 6 par. 1 letter f) — legitimate interest (communication) or letter b) pre-contractual steps	name, e-mail, phone, company, message content	usually 6–12 months from the last communication
Fulfillment of the contract for IT services (clients)	Art. 6 par. 1 letter b)	contact and billing data, communication, access	for the duration of the contract + statutory periods
Invoicing, accounting, taxes	Art. 6 par. 1 letter c) — legal obligation	identification, billing data	according to the Accounting Act (usually 10 years)
Operation of the support portal (tickets, SLA)	Art. 6 par. 1 letter b) and f)	account, e-mail, request content, attachments	for the duration of the contract / according to the terms of the contract
IT security and incident prevention	Art. 6 par. 1 letter f) and c) (if it follows from the law / contract)	logs, access records	appropriately, typically 3–24 months depending on the type of record
Selection of employees	Art. 6 par. 1 letter b) (pre-contractual) / a) consent	CV, contact, motivation	usually 6–12 months; longer only with the consent
Cookies and analytics / marketing	Art. 6 par. 1 letter a) — consent (except necessary)	device identifiers, statistics	according to the type of cookie / until withdrawal of consent
Defense of legal claims	Art. 6 par. 1 letter f)	relevant communication and contractual documentation	until the expiration of the limitation periods

We always weigh legitimate interest against your rights. You have the right to object (Art. 21 GDPR).

4. Beneficiaries and intermediaries

We may make the data available:

• providers of hosting, cloud, e-mail and IT tools (intermediaries bound by contract according to Article 28 GDPR),
• accounting, legal and auditing advisors to the extent necessary,
• public authorities, if required by law,
• the certification body in connection with ISO/IEC 27001 (to the extent necessary).

We will provide a list of specific intermediaries upon request.

5. Transfer outside the EU / EEA

We preferentially use processing in the EU/EEA. If there is a transfer to a third country, we will provide adequate guarantees (e.g. adequacy decision, standard contractual clauses of the European Commission) according to Chapter V GDPR.

6. Your rights

You have the right to:

• access to data (Art. 15),
• correction (Art. 16),
• deletion (Art. 17) — if the conditions are met,
• restriction of processing (Art. 18),
• portability (Art. 20),
• objection to processing based on legitimate interest / marketing (Art. 21),
• revocation of consent at any time (without affecting the legality before the revocation),
• not be subject to automated decision-making with legal effects (Art. 22) — we do not make such decisions.

Send requests to info@datatek.sk. We will respond without unnecessary delay, within 1 month at the latest (in complex cases, an extension is possible according to GDPR).

7. Complaint to the supervisory authorityYou have the right to file a complaint with the Personal Data Protection Office of the Slovak Republic: www.dataprotection.gov.sk. If you are in another EU member state, you can also contact your local supervisory authority.

8. Security

We apply technical and organizational measures appropriate to the risk (access control, encryption of transmitted data, backup, monitoring, training). The information security management system is certified according to ISO/IEC 27001.

9. Changes

We may update this policy. The current version is always on this page. In the case of substantial changes, we can also inform you by e-mail or a notification on the website.

Last update: 22/07/2026