Privacy Policy

Controller

The controller processing your personal data is:

Autoservis
Vojtaššákova 612
027 44 Tvrdošín

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.

What data we process and why

Booking through the form

When you book through the form on the Contact page, we process the data you enter:

your first name and surname,
your phone number,
your e-mail address, if you give it,
the vehicle and its type,
the services you are interested in and a date that would suit you,
the pick-up address, if you want us to collect and return the car,
a description of the problem.

We need this data to call you, agree on a date and prepare the repair. The legal basis is taking steps at your request prior to entering into a contract and the performance of a contract (Art. 6(1)(b) GDPR). Name, phone and vehicle are required – without them we cannot handle the booking.

We store the form data in the website's database, which runs on our web hosting provider's server. The garage is told about a new booking by a text message with a short summary (name, phone, vehicle, services and preferred date) and by an e-mail with all the data. Both contain a link to the stored booking with a random code that cannot be guessed; the link works for 30 days after the booking was sent.

Phone call or e-mail

When you call or write to us, we process the data you tell us – mainly your name, phone number and vehicle details – so that we can advise you and arrange the repair. The legal basis is the same as for the form (Art. 6(1)(b) GDPR).

Invoices and accounting documents

For the repair we issue an invoice or another accounting document with the details the law requires on it. We process them because the law obliges us to (Art. 6(1)(c) GDPR in conjunction with Slovak Act No. 431/2002 Coll. on accounting).

Protecting the form against misuse

To stop automated bots from flooding the form, it is protected by a picture check (captcha) that runs on our own server and needs a technical session cookie (see Cookies). In addition, the server remembers for at most one hour how many bookings came from your IP address, so that the form cannot be sent endlessly from one address. The legal basis is our legitimate interest in protecting the website and the garage's mailbox against spam (Art. 6(1)(f) GDPR).

Running and securing the website

The web hosting provider's server records technical data on every visit – IP address, time, the address visited and the browser identification. If an error occurs on the website, our error monitoring records the page address and a technical description of the error, without your IP address. We use this data only to keep the website secure and to fix errors, based on our legitimate interest (Art. 6(1)(f) GDPR).

How long we keep the data

The booking stored in the website's database – one year after it was sent; then it is deleted automatically. The link to it that the garage receives by text message and e-mail stops working after 30 days.
The booking e-mail and our communication with you – until the booking and the repair are completed and while the periods for claims for defects run; then we delete them.
Invoices and other accounting documents – 10 years after the year they relate to, as the Accounting Act requires.
Session cookie – until you close the browser.
The count of bookings from one IP address – at most one hour.
Server logs and error records – only as long as they are needed for security and fixing errors; after that they are deleted on an ongoing basis.

Who receives the data

We do not sell your data or use it for marketing. Only those who help us run the website and the garage have access to it, and only to the extent necessary:

the web hosting provider whose server runs the website,
the e-mail service provider that delivers bookings from the form to our mailbox,
the operator of the SmsManager SMS gateway, through which we send the garage a text message about a new booking (name, phone, vehicle, services, preferred date and the link to the booking),
the website's developer, who looks after its operation and error monitoring,
the accountant who processes our accounting documents,
public authorities, where the law requires it (for example the tax office).

Cookies

The regular pages of this website use no cookies at all. We use no analytics or advertising tools that would track how you move around the website.

The only exception is the booking form. When it loads on the Contact page, the spam protection stores a technical session cookie named PHPSESSID in your browser. It holds only a random identifier that lets the server recognise that the check was solved by your browser, and it expires when you close the browser. The form cannot be sent without it, so we do not need your consent for it.

Fonts and icons are loaded from our own server, not from third parties. We do not embed a map: the route links lead to Google Maps or Mapy.com, and those services only learn about you once you click the link – from then on their own privacy rules apply.

Your rights

Under the GDPR you have the right:

of access to the data we process about you (Art. 15),
to rectification of inaccurate data (Art. 16),
to erasure of data we no longer need or process unlawfully (Art. 17),
to restriction of processing (Art. 18),
to data portability for the data you gave us when booking (Art. 20),
to object to processing based on our legitimate interest (Art. 21).

Just call or write to us – you will find the contact details below. We will reply without undue delay and within one month at the latest.

We do not carry out automated decision-making or profiling.

If you believe that we handle your data in breach of the law, you have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection of the Slovak Republic:

Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12
820 07 Bratislava 27

Contact for personal data matters

For questions about your data and to exercise your rights, contact us:

Phone: 0903 395 114, 0940 499 902
By post: Autoservis, Vojtaššákova 612, 027 44 Tvrdošín