Durasius s. r. o. respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect, why, how long we keep it, and what rights you have.
1. Data Controller
Durasius s. r. o.
Bajkalská 18831/45G
821 05 Bratislava — mestská časť Ružinov
Slovak Republic
Business ID (IČO): 56575335
VAT ID (IČ DPH): SK2122349889
Registered in the Commercial Register of the Slovak Republic maintained by the Municipal Court Bratislava III, Section: Sro, File No. 182228/B
Email: legal@durasius.com
2. What Data We Collect
a) Email and other direct correspondence
If you email us or contact us on LinkedIn, we process the content of that correspondence and the contact details you provide, so we can reply and — where you ask us to — discuss a possible engagement.
b) Analytics
With your consent, we use Google Analytics 4 to understand how the website is used. This may include pages visited, time on page, device and browser type, and approximate location at country or region level. We do not use analytics data to identify you.
We do not collect special categories of personal data, and we do not carry out automated decision-making or profiling.
3. Legal Basis for Processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your enquiry and preparing a quotation | Steps taken at your request prior to entering a contract — Art. 6(1)(b) |
| Performing a website engagement | Contractual necessity — Art. 6(1)(b) |
| Operating and securing the website | Legitimate interests — Art. 6(1)(f) |
| Analytics | Consent — Art. 6(1)(a) |
| Keeping records required by Slovak accounting and tax law | Legal obligation — Art. 6(1)(c) |
4. Who We Share Data With
We do not sell your data and we do not share it for marketing purposes. We use the following processors, each under a data processing agreement:
- Vercel Inc. — website hosting and delivery
- Resend (Plus Five Five, Inc.) — transactional email delivery where used
- Google Ireland Ltd. — analytics, only with your consent
- Our accountant — where an engagement proceeds and invoicing is required
Some of these providers may process data outside the European Economic Area, including in the United States. Where that happens, transfers are made under the European Commission's Standard Contractual Clauses or an equivalent safeguard.
5. How Long We Keep Data
- Enquiries that do not proceed: 12 months from last contact, then deleted
- Enquiries that become clients: for the duration of the engagement and 10 years afterwards, as required by Slovak accounting law
- Correspondence: until the matter is resolved, then up to 12 months
- Analytics data: as configured in Google Analytics 4, currently 14 months
6. Cookies
We use cookies for essential functionality and, with your consent, for analytics. You can withdraw consent at any time using the cookie settings link in the footer. See our Cookie Policy for detail.
7. Your Rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Request erasure, where no legal obligation requires us to keep it
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting processing carried out before withdrawal
- Lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk) or the authority in your country of residence
To exercise any of these, email legal@durasius.com. We respond within one month.
8. Data Security
We use reputable providers, encrypted transport, access controls and the principle of least privilege. No system is perfectly secure, but we take reasonable and appropriate measures.
9. Changes
We may update this policy. The date at the top reflects the current version.