Privacy Policy

In providing our products and services, we work with some of your personal data. We understand the importance of protecting your data, so we handle it responsibly and strictly in accordance with applicable legislation.

In line with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and Council, hereafter referred to as the 'Regulation'), we would like to inform you about the personal data we collect, the purposes for which we use it, to whom we disclose it, your rights regarding the processing of your data, and how you can exercise those rights with us.

Our contact information regarding data protection

Our company (Exteco s.r.o., ID: 46547894) acts as a data controller. Therefore, we are obligated to inform you of a number of details about how we handle your data. If you still have any questions or wish to exercise your rights regarding data processing, please contact our Data Protection Officer:

What personal data do we process?

• identification data (company, or your name and surname, company ID, VAT number, tax ID, our generated ID)
• address data (especially business address, region, your email address, phone number, and potentially the address of your website)
• descriptive data (particularly job title, academic degree)

Purposes of using personal data

• To evaluate the submitted offer on our portal
• For communication purposes with our users
• For marketing purposes and future selection procedures

Cookies usage can be found at the following link

Personal data that we obtain indirectly

As part of joint campaigns, we may process your personal data for campaign purposes or for proper contract fulfillment, and we may combine it. If your personal data is transferred to another entity, we will inform you in advance, including specifying to whom the data is transferred. Similarly, if someone transfers your personal data to us, they must also inform you in advance.

Transfer of personal data to third countries

We process personal data in the Slovak Republic or in EU member states. We do not transfer personal data to third countries outside the EU.

Your rights regarding the processing of your personal data

We process your personal data fairly and transparently, in compliance with legal regulations. Below are your rights related to the processing of your personal data.

Right of access to personal data

You have the right to access personal data concerning you as a data subject. You also have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and if so, you may request a copy of this personal data.

Any copies of personal data may be provided to you electronically in a commonly used format. For the purpose of verifying the identity of the person requesting access to the personal data, we must insist on measures to verify your identity.

Right to correct personal data

If you believe that the personal data we process about you is inaccurate or incomplete, you have the right to ask us to correct or complete it.

Right to erasure (‘right to be forgotten’)

You have the right to request that we erase your personal data without undue delay, provided that one of the following conditions is met:

• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed (see the specific purposes of processing mentioned in chapter 3);
• you have withdrawn your consent, on the basis of which the data was processed, and there is no other legal basis for processing it (e.g., our obligation to process the personal data in a manner required by law);
• you have objected to the processing and it has been determined that we have no sufficient legitimate interests for which we would have the right to process the data;
• the personal data has been unlawfully processed, or it must be erased to comply with a legal obligation that applies to us.

Right to restrict processing

You have the right to restrict processing in one of the following cases:

• if you contest the accuracy of the personal data (in this case, we recommend using the right to correction instead);
• processing is unlawful, but you oppose the erasure of your personal data;
• if you request it, we may process selected personal data after it is no longer necessary for the purpose you provided it to us for (e.g., in connection with legal claims for which processed personal data is needed);
• if you have objected to processing and it is unclear whether our legitimate interest prevails over your legitimate interests.

Right to data portability

You have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format and, if applicable, the right to transfer this data to another entity without hindrance from us. You also have the right to ask us to transfer your personal data to another data controller if technically feasible.

Right to withdraw consent to personal data processing

If you have given us consent to process personal data for purposes that require consent, you have the right to withdraw that consent at any time.

Right to lodge a complaint with a supervisory authority

If you believe that we are processing your personal data unlawfully, you also have the right to lodge a complaint with the Office for Personal Data Protection. However, we would prefer if you addressed any issues with us first. You can always easily contact us via our contact details.

How you can exercise your rights

You can exercise your personal data protection rights either in writing or electronically. Please note that to verify your identity, we will take into account requests sent via registered mail or emails sent from an address directly associated with your account.

Information about processing requests, objections, and actions taken

We will respond to your requests, objections, and other submissions as soon as possible, but no later than one month after receiving your request or objection. We will inform you of the measures taken or why your request or objection was not satisfied. If processing is particularly complex or we receive a large number of requests, we may extend this period by up to two months, which we must inform you of within the first month, including the reasons for the delay.