1. Data Controller
The controller of personal data is:
Exyno s.r.o.
900 54 Jablonové 479
Company ID: 57626154
E-mail: info@exyno.eu
(hereinafter “Exyno” or the “controller”).
2. What Personal Data We Process
When using the exyno.eu website, we may process the following personal data:
Contact form
If you contact us through the contact form or by email, we may process:
- first and last name,
- email address,
- phone number,
- company name,
- the content of your message or inquiry.
Technical data
When visiting the website, technical data may be processed automatically, such as:
- IP address,
- information about the device and web browser used,
- system and security logs.
3. Purposes and Legal Bases of Processing
Handling inquiries and communication
We process personal data for the purpose of:
- responding to your questions,
- preparing a price quote,
- communication prior to entering into a contractual relationship.
Legal basis: Art. 6(1)(b) GDPR (taking steps prior to entering into a contract at the request of the data subject).
Operation and security of the website
We process technical data for the purpose of:
- ensuring the operation of the website,
- protection against misuse,
- resolving technical issues,
- protecting the legitimate interests of the controller.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller).
4. Data Retention Period
We retain personal data only for the period necessary to fulfil the purpose for which it was obtained.
- Data from contact forms is generally retained for a maximum of 24 months from the last communication.
- Data required to fulfil legal obligations is retained for the periods laid down by legal regulations.
- Technical logs are retained only for the period necessary to ensure the security and operation of the website.
5. Recipients of Personal Data
Your personal data may be made available to trusted partners who help us ensure the operation of the website or communication with customers, in particular:
- hosting providers,
- email service providers,
- technical support providers.
These partners process the data solely on the basis of our instructions and in compliance with applicable legal regulations.
6. Transfer of Personal Data Outside the European Economic Area
We process personal data primarily in the countries of the European Economic Area (EEA).
If, in the future, we were to use services of providers established outside the EEA, we will ensure an adequate level of protection of personal data through the mechanisms required by applicable legal regulations, in particular under the GDPR.
7. Cookies
The website uses strictly necessary cookies that are required for its proper functioning.
The analytics tool we use is configured without cookies and without local storage (see section 8), so no cookie bar is required for analytics. Should we deploy marketing tools or cookie-based analytics in the future, visitors will be informed through a cookie bar and the relevant consent settings.
8. Website Analytics
We measure website traffic using PostHog (PostHog, Inc.) on PostHog Cloud EU, whose data centres are located in the European Union. Analytics data therefore does not leave the European Economic Area.
Purpose: to understand how the website is used — how many people visit it, where they come from, which elements they click, and how quickly pages load for them. We use this information solely to improve the content, clarity and performance of the website.
Legal basis: Article 6(1)(f) GDPR (the controller’s legitimate interest in improving its own website).
What is processed: the page visited, the page language and domain, the source of the visit (referring page and any campaign parameters in the address), technical parameters of the browser and device, clicks on page elements, and page-load performance metrics. The tool uses the IP address only for approximate location and does not store it in full.
No cookies. The tool is configured to store no cookies and no local storage (localStorage) data in your browser. The measurement therefore creates no persistent identifier that would track you across visits — which is precisely why the website needs no cookie bar for analytics.
No direct identifiers. We do not link analytics data to your name, e-mail address, company name, or the content of messages you send us through the forms. The measurement may include a recording of on-page activity; in it, all input fields (input, textarea, select) are masked automatically, so text you type into forms is not recorded. The data described above — such as the IP address or the technical parameters of your device — is personal data under the GDPR, and we process it only for the purpose and to the extent set out in this section.
Retention period: we keep analytics events for a maximum of 12 months and on-page activity recordings for a maximum of 1 month. They are deleted automatically once that period expires.
How to opt out. If your browser has Do Not Track or Global Privacy Control enabled, the measurement does not start at all and no data is sent to the tool. Nothing else needs to be configured.
9. Rights of Data Subjects
In connection with the processing of personal data, you have the right to:
- request access to your personal data,
- request the correction of inaccurate or outdated data,
- request the erasure of personal data,
- request the restriction of processing,
- object to processing,
- request data portability, if the legal conditions are met,
- lodge a complaint with the supervisory authority.
10. Supervisory Authority
If you believe that your rights have been violated in the processing of your personal data, you may lodge a complaint with:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Slovak Republic
Website: https://dataprotection.gov.sk
11. Contact
If you have questions regarding the protection of personal data or wish to exercise your rights, you can contact us at:
12. Changes to This Policy
Exyno reserves the right to update or amend this policy as appropriate.
The current version of the Privacy Policy is always available on the exyno.eu website.