Privacy Policy Introduction – Privacy Policy

1. Basic Provisions

When filling out the contact form located on the website engul.sk (hereinafter referred to as “the website”), personal data of the user may be, or is being, processed to the extent specified in these Privacy Policy Terms.
The controller of personal data, in the sense of Article 4(7) of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”), (hereinafter referred to simply as “the controller”) is: Trade Name: Engul, s.r.o. Registered Office: Robotnícka 14, Martin 03601, Slovakia Company ID: 45378576 Contact Information:
The contact form on the website is provided to offer more detailed information in connection with the controller (hereinafter referred to as “the contact form”). Through the contact form placed on the website, the user has the opportunity to directly contact the controller in order to receive additional information regarding the company Engul.
Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or by reference to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
For the purposes of properly processing his query submitted via the contact form, the user is required to provide the controller with his personal data in the following scope: first name, last name, and e-mail address.
The controller declares that for purposes other than those stated in these Privacy Policy Terms, the user’s personal data will be obtained separately on an appropriate legal basis and will be processed and used exclusively in a manner corresponding to the purpose for which they were collected, and that such data will not be merged with personal data obtained for another purpose.
The controller further declares that personal data will be processed in accordance with good practices and in a manner that does not conflict with the GDPR or other generally binding legal regulations, nor will these regulations be circumvented.

2. Sources and Categories of Processed Personal Data

The controller processes personal data provided by the user or personal data that the controller has obtained on the basis of, or in connection with, processing the query submitted via the contact form.

3. Legal Basis and Purpose of Processing Personal Data

The user’s personal data are processed primarily for the purpose of handling the query as submitted via the contact form.
The legal basis for processing personal data is:

the user’s consent to process the personal data necessary for filling out and properly submitting the contact form pursuant to Article 6(1)(a) of the GDPR;
the user’s consent to process personal data for the purpose of providing direct marketing (in particular for sending commercial announcements, business offers, and newsletters) pursuant to Article 6(1)(a) of the GDPR.

The purposes of processing personal data are:

handling the user’s query by the controller; when filling out the contact form, the required personal data (first name, last name, e-mail) are essential for submitting the contact form—without providing these personal data, it is not possible to respond to the respective query;
sending offers.

The controller does not engage in automated individual decision-making pursuant to Article 22 of the GDPR.
The controller declares that in accordance with Article 5(1)(a) and (b) of the GDPR, the user’s personal data will be collected solely for the purposes specified in these Privacy Policy Terms.

4. Retention Period for Personal Data The controller retains personal data:

for the purpose of handling the user’s query via the contact form, or until the user withdraws consent, but in any case for a maximum of 12 months;
for as long as the consent for processing personal data for marketing purposes remains in effect, but in any case for a maximum of 12 months, provided that the personal data have been supplied based on consent.
After the retention period expires or upon withdrawal of consent for processing personal data, the controller will dispose of (delete) the personal data.

5. Recipients of Personal Data (Controller’s Subcontractors)

Recipients of personal data are persons who are: • Owners of administrative centers in the vicinity of the controller’s building; • Persons personally or financially linked to the controller; • Providers of services for operating the website and other services related to the project and the operation of the website, including any maintenance and servicing of software and hardware equipment.
The controller declares that personal data will not be transferred to a third country outside the EU or to an international organization (except when the provided personal data are stored in a storage facility whose servers, provided by the storage provider, are located in a third country).

6. User Rights

Under the conditions set forth in the GDPR, the data subject (user) has the following rights:

Right of Access: The data subject has the right to obtain a copy of the personal data that the controller holds about them, as well as information about how the controller uses such personal data. In most cases, the personal data will be provided in written form or electronically, unless the data subject requests a different method. If the data subject requests the information electronically, it will be provided in that format if technically feasible.
Right to Rectification: The controller takes appropriate measures to ensure the accuracy, completeness, and timeliness of the information held about the data subject. If the data subject believes that the data held by the controller are inaccurate, incomplete, or outdated, they have the right to request that this information be corrected, updated, or supplemented.
Right to Erasure (Right to be Forgotten): The data subject has the right to request the deletion of personal data, for instance if such personal data are no longer necessary to fulfill the original purpose of processing. However, this right must be evaluated in light of all relevant circumstances. For example, the controller may have certain legal obligations which mean that the request cannot be granted.
Right to Restrict Processing: Under certain circumstances, the data subject is entitled to request that the controller cease using the personal data. This applies, for example, in cases where the data subject believes that the personal data may be inaccurate or when they determine that the data are no longer necessary to be used. However, this right must be considered in the context of all relevant circumstances.
Right to Data Portability: Under certain circumstances, the data subject has the right to request the transfer of the provided personal data to another third party of their choice, provided that no technical or legal obstacles prevent such a transfer.
Right to Object to Processing: The data subject has the right to object to the processing of data that is based on the controller’s legitimate interests. If the controller does not have a compelling legitimate interest for processing, and the data subject lodges an objection, the personal data will no longer be processed; however, this right must be assessed in view of all relevant circumstances.
Right to Withdraw Consent: The data subject has the right to withdraw consent for the processing of personal data in writing or electronically at the address or email of the controller provided in Article 1 (withdrawal is only applicable for consent given pursuant to Article 6(1)(a) of the GDPR). Withdrawing consent does not affect the lawfulness of processing based on consent given prior to its withdrawal.

If the user believes that their personal data are being processed in violation of these conditions or unlawfully, the user has the right to file a complaint with the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27; telephone: +421/2/3231 3214; email: ; or via https://dataprotection.gov.sk. In the case of submitting a complaint electronically, it must comply with the requirements set out in § 19(1) of Act No. 71/1967 Coll. on Administrative Procedure.

7. Security Measures for Personal Data

The controller declares that it has implemented all appropriate technical and organizational measures to secure personal data. Furthermore, the controller declares that access to the personal data is restricted only to persons who have been duly authorized.

8. Cookies

The controller uses “cookies,” just like other websites, for the purpose of collecting information. A “cookie” is a small piece of information that is installed on the user’s computer and identifies the browser during the user’s activity on the website. Cookies do not include any personal data, and it is not possible to identify the user through them.
The cookies we use are divided into basic categories (although the website may not necessarily use all of these, and individual categories may become available later):

Necessary (essential) cookies – these are required for the proper functioning of the website.
Analytical cookies – these are used to collect, analyze, and report on user interaction with the website.
Functional cookies – these are used to remember information that changes the way the website behaves or appears.
Advertising (marketing) cookies – these are used to display advertisements that are most relevant to the user.

Essential Cookies: These cookies are essential for the proper operation of the website and to ensure its functionality; they are specifically aimed at enabling or facilitating communication by electronic means and are strictly necessary for providing the service. The controller does not require the user’s consent for the use of essential cookies.
Analytical Cookies: These cookies are used to collect, analyze, and report on user interaction with the website; as the user browses the website, certain cookies will be installed and made available to help the controller analyze the user’s experience—that is, they allow the controller to anonymously identify and count the number of users and to obtain information about how the website is used. These cookies are used by the controller only on the basis of the user’s consent.
Functional Cookies: These allow the website to remember information that changes the way the website behaves or appears, such as the preferred language or region in which the user is located. Functional cookies are used by the controller only on the basis of the user’s consent.
The user has the option to manage their “cookies” by configuring their browser, and they may grant or refuse consent for such processing. The website may set cookies for a specific user only if the browser’s settings allow it.
If the user sets their browser to refuse “cookies,” this may restrict their access to certain functions, pages, or areas of the website, for which the controller does not accept any liability.
Retention Period: The user’s consent to the processing of cookies is stored for six months or until the cookies are deleted by the user from the browser.

9. Information on the Processing of Personal Data and Cookie Files

In cases where, under applicable regulations, consent, notification, and the provision of information regarding the processing of personal data of the data subject (user) are required, the controller publishes the notice in this article as well as through a separate document with the following wording:

Trade Name: Engul, s.r.o. Registered Office: Robotnícka 14, Martin 03601, Slovakia Company ID: 45378576 Contact Information:

By ticking the checkbox “I agree with the processing of personal data and I have been informed about the processing of my personal data in accordance with Article 13 of the GDPR” on the website www.dentinika.sk (“the website”), you express your explicit consent for the processing of personal data pursuant to Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”), as well as in accordance with § 109(8) of Act No. 452/2021 Coll., in connection with the use of cookie files on the website. In doing so, you confirm that you have familiarized yourself with all of the information and your rights set out below. In accordance with Article 13 of the GDPR and the related regulations, the controller hereby provides you, as the data subject from whom personal data is obtained, with the following information:

Purpose of Processing:

Handling the data subject’s query as submitted through the contact form;
Presenting current offers and news (newsletter) when the data subject has explicitly chosen this option;
Ensuring the operation of the website through the use of necessary essential (technical or basic) cookies, as well as analytical, functional, and advertising cookies if the data subject has given consent for their use.

Legal Basis:

Article 6(1)(a) of the GDPR (expression of consent for processing);
Consent to the use of analytical, functional, or advertising cookies in accordance with § 109(8) of Act No. 452/2021 Coll.
Scope of Processed Personal Data:
First name, last name, and email address.
Cookie files do not involve the direct provision of any personal data, nor is it possible to identify the data subject through them; for more detailed information on cookies, please refer to the Privacy Policy.

Other Recipients of Personal Data:

Owners of administrative centers in the vicinity of the controller’s building, persons who are personally or financially linked to the controller, and the controller’s subcontractors to the extent necessary for ensuring the controller’s activities and the implementation of the Campus Galvani project (e.g., the information system administrator, the server storage provider, the manager of individual buildings).
Personal data will not be transferred to a third country outside the EU or to an international organization (except in cases where personal data are stored in a storage facility whose servers, provided by the storage provider, are located in a third country).

Provision of Personal Data:

The provision of personal data is necessary if the data subject wishes to submit the contact form;
In the case of providing personal data for the subscription to newsletters, the data subject’s consent is voluntary; if consent for receiving newsletters is not provided, the controller’s offers will not be sent to the data subject;
Consent regarding the type of cookies processed is voluntary for analytical, functional, and marketing cookies, while the use of technical cookies is necessary for the functioning of the website and does not require the data subject’s consent.

Retention Period:

Consent is granted for 12 months;
If the data subject has provided consent for the processing of marketing, functional, and analytical cookies, consent is granted for 6 months or until the cookie files are deleted from the data subject’s browser.
No automated decision-making or profiling in accordance with the GDPR takes place during processing.
Additional rights of the data subject are detailed in the Privacy Policy available on the website.

If the data subject believes that their personal data is being processed unlawfully, they may submit a complaint to the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27; phone: +421/2/3231 3214; email: ; or via https://dataprotection.gov.sk. In the case of submitting a complaint electronically, it must comply with the requirements specified in § 19(1) of Act No. 71/1967 Coll. on Administrative Procedure.

10. Final Provisions

By submitting the contact form on the website or providing consent to receive offers, the user confirms that they have read the Privacy Policy and accept it in its entirety.

The wording of the Privacy Policy may be amended or supplemented by the controller at any time. This provision does not affect the rights and obligations that arose during the period in which the previous version of the Privacy Policy was in effect.