1. Who is responsible
Endeavour Technologies s. r. o., Lazaretská 23, 811 09 Bratislava - mestská časť Staré Mesto, Slovakia, IČO 44 715 706, is the controller of personal data processed through this website. For privacy questions or to exercise your rights, use the contact form and identify your request as a data protection matter, or write to our registered office. You do not need to submit an order to contact us about your data.
2. Data we receive
The contact form asks for your name, email address, subject and message, and lets you add your company and phone number. The order form asks for business identifiers, contact name, email, phone, requested goods and quantities, specifications, delivery details and optional notes. We also receive the chosen language, submission time, form acknowledgement and, for an order request, a reference number. Technical request data, including IP address, is used to operate and protect the website. Do not include sensitive personal data or information about other people unless it is needed and you have the right to share it.
3. Purpose and legal basis
We use enquiry and business contact details to answer requests and manage business communication, based on our legitimate interest in responding to people who contact us (Article 6(1)(f) GDPR). Where you are personally a prospective contracting party, necessary steps you request before a contract use Article 6(1)(b). Data needed to perform such a contract uses the same basis. Legal record-keeping uses Article 6(1)(c). Website security and prevention of spam use Article 6(1)(f), with the legitimate interest of keeping the service available and secure. The form acknowledgement is not consent to marketing. If a separate activity relies on consent, you can withdraw that consent without affecting earlier lawful processing.
4. Required fields and automated checks
Fields marked as required are needed to route and answer a message or assess an order request. If you do not provide them, the form cannot be sent. Optional fields can be left blank. Automated checks limit repeated requests and filter likely spam using request timing and a hidden field. We do not use this website to make automated decisions that have legal or similarly significant effects on you, or to profile you for marketing.
5. How retention is determined
Enquiry data is kept while needed to answer and follow up the enquiry. If it leads to a business relationship, necessary correspondence and order information are kept to administer that relationship and resolve claims. Records required by tax or accounting law are kept for the applicable statutory period. Security data is kept only as needed to detect abuse and investigate incidents. The relevant criteria are the status of the request, whether a contract follows, statutory duties and applicable claim periods. You can ask us for the retention period that applies to your record.
6. Service providers and other recipients
The website uses Vercel for hosting and Make to deliver form submissions to our business workflow. Where configured, Upstash Redis processes IP-based request counters to limit spam; otherwise these counters are held in server memory. People authorised to handle your request receive the details they need. If a supply is agreed, necessary data may be shared with transport providers, professional advisers or public authorities where required. We do not use the forms to sell personal data.
7. Processing outside the EEA
Hosting and automation providers may process data outside the European Economic Area, including in the United States. Vercel and Make publish data processing terms and standard contractual clauses for international transfers. The countries and safeguards relevant to a particular request depend on the services and account settings in use. Contact us to obtain information about the applicable transfer arrangements and a copy of relevant safeguards. Provider information is available at vercel.com/legal/dpa and make.com/en/privacy-and-gdpr.
8. Your rights
Subject to GDPR conditions, you can request access, correction, deletion, restriction of processing and data portability. You can object to processing based on legitimate interests for reasons related to your situation. Where processing relies on consent, you can withdraw it at any time. Send a request through the contact form or by post to the registered office. We may need information to verify your identity. We reply within one month; GDPR allows an extension of up to two further months for complex or numerous requests, and requires us to explain that extension.