Personal Data Processing Policy

1. Controller

The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the “GDPR”) is:

Dirac s.r.o.
Company ID: 50463080
Registered office: Vajnorská 77, 831 03 Bratislava
E-mail: adam.pagac[at]dirac.sk

(hereinafter referred to as the “Controller”)

2. Scope of Processed Personal Data

The Controller processes personal data only to the extent necessary to ensure the operation of the website and related services, in particular:

• technical and identification data (IP address, device type, browser, operating system),

• data on visitor behaviour on the website,

• data obtained through cookies and similar technologies.

The Controller does not process special categories of personal data pursuant to Article 9 of the GDPR.

3. Purposes of Personal Data Processing

Personal data are processed mainly for the following purposes:

• ensuring the functionality, security and optimisation of the website,

• analysing website traffic and user behaviour through analytical tools,

• displaying external content and third-party integrations,

• statistical and analytical purposes aimed at improving content and user experience.

4. Legal Basis for Processing

The legal basis for the processing of personal data is:

• the consent of the data subject pursuant to Article 6(1)(a) of the GDPR, granted via the cookie banner,

• in justified cases, the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR, in particular in ensuring the functionality and security of the website.

Consent may be withdrawn at any time via the cookie settings.

5. Use of Cookies

The website uses cookies and similar technologies to ensure its proper functioning, for analytical and statistical purposes, and for displaying external third-party content.

5.1 Essential Cookies

Essential cookies are necessary for the basic functionality, security and technical operation of the website. These cookies are processed automatically and do not require the consent of the data subject.

5.2 Other Cookies (Analytical and Functional)

The use of all cookies that are not essential is subject to the explicit consent of the website visitor.

These include, in particular, cookies related to:

• analytical and statistical tools (e.g. Google Analytics),

• displaying external content and third-party widgets (e.g. LinkedIn feed via the Elfsight service).

The Controller applies a simple consent management model under which the visitor has the option to:

• grant consent to the processing of personal data via cookies, or

• refuse consent.

If consent is not granted, non-essential cookies are not used and the relevant third-party services are not activated.

5.3 Granting and Withdrawal of Consent

Consent to the use of cookies is granted via the cookie banner displayed upon the first visit to the website.

The data subject has the right to:

• withdraw consent at any time,

• change their decision via the cookie banner or browser settings.

The withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal

5.4 Cookie Management via Browser Settings

Users may also manage cookies through the settings of their internet browser. Please note that restricting or blocking cookies may affect the functionality of certain parts of the website.

6. Third Parties and Transfer of Personal Data

The Controller uses third-party services that may process personal data as independent controllers or processors, in particular:

• Google Analytics (Google Ireland Limited) – for analytical and statistical purposes,

• Elfsight – for displaying external content and widgets, including the LinkedIn feed.

Personal data may be transferred to third countries (in particular the United States). Such transfers are carried out using appropriate safeguards in accordance with Articles 44 et seq. of the GDPR, in particular standard contractual clauses.

7. Data Retention Period

Personal data are retained only for the period necessary to fulfil the purposes of processing, for the period required by applicable legal regulations, or until consent is withdrawn.

8. Rights of Data Subjects

In accordance with the GDPR, the data subject has in particular the following rights:

• the right of access to personal data,

• the right to rectification of inaccurate or incomplete data,

• the right to erasure of personal data (the “right to be forgotten”),

• the right to restriction of processing,

• the right to data portability,

• the right to object to processing,

• the right to withdraw consent at any time,

• the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic.

9. Final Provisions

The Controller has adopted appropriate technical and organisational measures to ensure the protection of personal data in accordance with the GDPR.

These Personal Data Processing Terms are valid and effective as of the date of their publication on the website. The Controller reserves the right to update them in the event of changes in legal regulations or processing practices.