Privacy notice

Who is responsible

The controller of your personal data is Natlea s. r. o., Ulica Mihálya Marczella 6156/35, 929 01 Dunajská Streda, Company ID (IČO) 57 143 200, registered in the Commercial Register of the District Court Trnava, section Sro, insert no. 60325/T.

For any question about your personal data, write to hello@natlea.sk.

What we process, why and on what legal basis

When you contact us through the form or by email, we process your email address, your message and — if you provide it — your name. To deliver and protect the website, Cloudflare also processes technical data such as your IP address, browser details and the time of the request.

Inquiries from individuals acting on their own behalf. If you contact us as a private person and ask us to take steps before entering into a contract (for example to prepare an offer), or if your message concerns a contract you are a party to, the legal basis is Art. 6(1)(b) GDPR.

Business inquiries. If you write to us as a representative or contact person of a company or another organisation, we process your contact details and message to handle the inquiry and to communicate with that organisation. Legal basis: our legitimate interest in handling business inquiries and communicating with our business contacts (Art. 6(1)(f) GDPR).

Protection against spam and abuse. To protect the website and the contact form, Cloudflare processes the technical data mentioned above; when you use the form, the Cloudflare Turnstile check also processes your IP address and browser signals. Legal basis: our legitimate interest in protecting the website and the form against spam and abuse (Art. 6(1)(f) GDPR).

Legal obligations. Only where a specific legal obligation requires us to keep or process certain data do we rely on Art. 6(1)(c) GDPR — and only for the data and the period that obligation covers.

We rely on legitimate interest only where the processing is necessary for the purpose, limited to what that purpose requires, and not overridden by your interests or fundamental rights and freedoms. You can object to it at any time (see “Your rights”).

We do not use your data for newsletters or other marketing, we do not sell it, and we do not use automated decision-making or profiling.

Who processes data for us

Cloudflare, Inc. (USA) — hosting and delivery of the website, protection against attacks, the Turnstile security check and the server function that processes the contact form. Cloudflare’s data processing agreement is part of its terms of service. For improving Turnstile itself, Cloudflare processes the Turnstile signals as an independent controller under its Turnstile privacy notice.

Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA — sends the messages from the contact form to our mailbox, from the domain send.natlea.sk. Resend’s data processing agreement applies from registration. Resend stores the data in the USA; the European sending region (Ireland) only affects how messages are sent, not where data is stored.

Zoho Corporation B.V. (Netherlands) — operates our mailbox hello@natlea.sk in Zoho’s EU data centre.

Transfers outside the EU

Cloudflare: data may be processed in the USA. Cloudflare is certified under the EU–US Data Privacy Framework; its data processing agreement also contains the EU standard contractual clauses.

Resend: data is stored in the USA. Transfers rely on the EU standard contractual clauses; the EU–US Data Privacy Framework is an additional mechanism.

Zoho: the mailbox is stored in the EU. In rare cases, staff of Zoho Corporation Private Limited (India) may access data to provide technical support, on the basis of the EU standard contractual clauses.

How long we keep it

Inquiries that do not lead to a contract: at most 12 months from the last relevant communication. After that we delete them, unless another legitimate or legal reason requires us to keep them longer.

Correspondence relating to a concluded contract is not covered by this period: we keep it for as long as it is needed for that contract and, where a specific legal obligation applies, for the period that obligation sets.

Resend keeps sent messages and delivery logs for 30 days. The contact form’s server function does not store messages or logs; Cloudflare keeps technical data according to its own policies.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on legitimate interest. Write to hello@natlea.sk.

You can also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk).

Providing your details is voluntary, but without an email address we cannot reply.

Cookies and browser storage

This website does not set cookies and does not use analytics, advertising or tracking. Fonts are served from our own domain.

Only when you start filling in the contact form does the Cloudflare Turnstile security check load. It stores a technical entry in your browser’s storage, within Cloudflare’s own security frame, which is strictly necessary to protect the form you are using. If we start using other services that store data in your browser, we will list them here.

Changes

If we change how we process personal data, we will update this page and the date above.