Privacy notice
We explain what personal data we process, why it is needed, how long it is retained and how you can exercise your rights. The public website uses no analytics or marketing cookies.
This English translation is provided for convenience. The Slovak version and applicable Slovak and EU law prevail where interpretation differs. Slovenská verzia
1. Controller and contact
TRANS–it, s. r. o., Jablonec 375, 900 86 Jablonec, Slovak Republic, Company ID 44 693 524, VAT ID SK2022798151. Privacy contact: it@trans-it.sk.
2. Scope, purposes, legal bases and retention
| Situation and data | Purpose and legal basis | Retention |
|---|---|---|
| Email or telephone enquiries: name, contact details, request and follow-up communication. | Handling the request and pre-contractual steps — Art. 6(1)(b) GDPR; legitimate interest in documenting business communication — Art. 6(1)(f). | Normally 12 months after closure if no contract is formed; otherwise under contractual retention rules. |
| Customers, suppliers and contact persons: identification, contact, contractual, invoicing and payment data. | Contract performance — Art. 6(1)(b); legal obligations — Art. 6(1)(c); protection of legal claims — Art. 6(1)(f). | For the relationship and subsequent statutory or limitation periods; accounting records for the legally required period. |
| Technical logs: IP address, time, requested URL, response status, browser and device type. | Secure and reliable website operation, attack prevention and incident handling — Art. 6(1)(f). | Only as necessary; ordinary operational logs normally up to 30 days, incident evidence for the investigation and related claims. |
| Gallery administration: username, role, login time and IP, changes and security audit. | Access control, accountability and system protection — Art. 6(1)(f) and employment-related obligations. | Account for the authorised period; audit events normally 12 months, longer only for an incident or legal claim. |
| Company activity photographs: image and, depending on content, a face, registration number or location. | Presentation of work and references, based on consent under Art. 6(1)(a) or a balanced legitimate interest under Art. 6(1)(f). | For the publication purpose, with periodic review. Consent may be withdrawn at any time. |
3. Photographs and privacy
Employee uploads are not published automatically. They first require internal approval. Identifiable persons and other identifiers are checked for a valid legal basis and proportionality; otherwise the image is not published or identifying elements are adjusted. Requests concerning a published image may be sent to it@trans-it.sk with a link or description.
4. Recipients
Data is disclosed only as necessary to authorised staff and IT administrators, required technical providers, accounting, tax or legal advisers, and public authorities where law requires it. Personal data is not sold. We do not currently intend transfers outside the EEA; a lawful transfer mechanism and an updated notice would be used if that changed.
5. Sources and requirement to provide data
Data comes directly from you, the organisation you represent, contractual relationships, the photographer or our own operational documentation. Enquiry information is voluntary, but without the necessary details we may be unable to respond. Data required by contract or law is necessary for contracting, performance and billing.
6. Your rights
- access and information about processing
- rectification and completion
- erasure and restriction
- data portability where applicable
- withdrawal of consent
- objection to processing based on legitimate interest
- a complaint to the Slovak Data Protection Authority
Send requests to it@trans-it.sk or the registered address. We respond without undue delay, normally within one month; GDPR permits an extension for complex requests. Identity may be reasonably verified to protect your data.
Úrad na ochranu osobných údajov Slovenskej republiky, Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk.
7. Cookies and local storage
The public presentation website uses no analytics or marketing cookies and therefore needs no consent banner. The protected employee administration uses only cookies strictly necessary for the requested service:
| Cookie | Purpose and legal basis | Retention |
|---|---|---|
| transit_session | Secure login; HttpOnly, Secure and SameSite=Strict. | Browser session with server authorisation for up to 8 hours; up to 30 days if “Remember this device” is expressly selected. The session can be revoked at any time. |
| transit_csrf | Protection against forged administration requests; Secure and SameSite=Strict. | Browser session with server authorisation for up to 8 hours; up to 30 days if “Remember this device” is expressly selected. The session can be revoked at any time. |
| transit_language | Stores the selected administration language in browser local storage. | Until the user clears local storage; it contains no account identifier. |
8. Security and automated decision-making
We use proportionate technical and organisational controls including roles and access management, encrypted transport, security logs, upload validation, managed updates and risk-based recovery measures. Personal data is not used for automated decisions or profiling with legal or similarly significant effects.
9. Legal framework and updates
This notice is based primarily on Regulation (EU) 2016/679 (GDPR), Slovak Act No. 18/2018 and, for cookies, Act No. 452/2021. The notice is updated when purposes, technology or legal requirements change.
Version 2.2 — last updated 12 August 2026