Controller and contact
The controller is NPR Construction SK, s. r. o., Sasinková 407/53, 010 01 Žilina, Slovakia, company ID 51 939 321. Send privacy questions and rights requests to p.pobuda@npr-c.sk or our registered address.
Enquiries and callbacks
We process the name, email, phone, company, subject and message you provide to respond, prepare an offer and discuss cooperation. If you act on your own behalf, the basis is steps at your request before entering a contract under Article 6(1)(b) GDPR. For general questions and business representatives, we rely on our legitimate interest in business communication under Article 6(1)(f). Unconverted enquiries and related correspondence are kept for no more than 12 months after receipt, and deleted earlier when no longer needed.
Employment enquiries
We process your name, email, optional phone, area of work and the experience, qualifications and availability you describe. We assess your interest and discuss current opportunities as pre-contractual steps at your request under Article 6(1)(b) GDPR. Unsuccessful applications are deleted once assessment ends and no later than 6 months after receipt. This form does not enrol you in a future recruitment database. Do not provide national identity numbers, identity documents or health information.
Required information
We obtain the information directly from you. Providing it is voluntary; fields marked with an asterisk are needed to handle your request. Without contact details we cannot reply. Phone is optional for business and employment enquiries, but necessary for a callback. Acknowledging this notice is not marketing consent or the legal basis for handling your request.
Technical data and security
Server operation may generate logs containing IP address, request time, visited URL and browser information. These support delivery of the website, troubleshooting and prevention of abuse, based on legitimate interests under Article 6(1)(f). Retention is determined by the time needed to identify and resolve a fault or security incident, with regular review of whether continued retention is necessary. Logs are not used for advertising profiles.
Recipients
Authorised staff handling business enquiries and recruitment can access the data. Necessary service providers include Websupport s. r. o., company ID 36 421 928, for hosting and Microsoft through Exchange Online for email, including their contractual subprocessors. Public authorities receive information where required by law. We do not sell personal data.
Transfers and retention
Microsoft cloud services may involve transfers or access from outside the EEA. Safeguards are described in the Microsoft DPA, particularly applicable Standard Contractual Clauses. You can request information about these safeguards from our contact email. We do not claim that all processing is confined to the EU. If a contract or employment relationship results, necessary data becomes part of the corresponding contract or employment records. Legal duties or specific legal claims can require longer retention, limited to necessary information until the applicable period expires or the dispute is finally resolved.
Your rights
Subject to the GDPR conditions, you can request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your situation. Where consent is used, it can be withdrawn at any time without affecting earlier lawful processing. We respond without undue delay and at the latest within one month. Taking into account the complexity and number of requests, this period may be extended by two further months; we will inform you of any extension and the reasons within one month. You may complain to the Slovak Office for Personal Data Protection.
Decisions and updates
Form enquiries are not subject to solely automated decisions producing legal or similarly significant effects, or profiling. We update this notice if processing changes and inform you before using information for a new purpose.