Privacy policy

1. Who processes your data

The data controller is:

• ASCARI s.r.o.
• Registered office: Na hrunku 1661/95, 093 01 Vranov nad Topľou
• Company ID: 36 489 760, Tax ID: 2021762985
• Registered in the Commercial Register of the District Court Prešov, section Sro, file no. 14550/P
• E-mail: ascari@ascari.sk
• Phone: +421 918 693 835

This is an English translation provided for information. In case of any discrepancy, the Slovak version of this page prevails.

We have not appointed a data protection officer (DPO) – we do not carry out processing for which the law requires one. For data protection matters, please contact us at the e-mail address above.

2. What data we process and why

2.1 Enquiry form

When you send us an enquiry through the form, we process the data you enter: your e-mail address, the text of your message and any file you attach. If you include other data in your message yourself – for example your name or phone number – we process that too.

• Purpose: to reply to your enquiry, prepare a quote and agree the terms of a possible order.
• Legal basis: taking steps at your request prior to entering into a contract under Art. 6(1)(b) GDPR – you send us an enquiry so that we can prepare a quote. If the enquiry leads to an order, processing continues on the basis of performing the contract under the same point, and of complying with legal obligations under point (c) – in particular accounting and tax obligations.
• Providing data: your e-mail and message are necessary, otherwise we cannot reply. Attaching a file is voluntary.
• Retention period: enquiries that do not lead to an order are deleted within 12 months at the latest. Documents relating to completed orders are kept for the period required by accounting and tax regulations (usually 10 years).

Note on attachments. A logo, photo or other artwork you send us may itself contain personal data – for example a name, signature, portrait or photograph of a person. Please send only material you have the right to use. If you send us material containing personal data of a third party, we process it solely to produce the ordered embroidery and archive it with the order once completed.

2.2 Consent to publish your order

In the form you can optionally tick that you agree to the finished work being shown in the gallery on this website. Consent is voluntary, is not a condition of the order and can be withdrawn at any time by e-mail. After withdrawal we remove the photo from the gallery.

2.3 Visitor analytics

We do not use any. No Google Analytics or other measurement tool runs on this website, we do not track your behaviour and we do not profile you. The website stores a single cookie – the one that remembers your choice in the consent bar; details are on the Cookies page.

3. Who we share data with

We do not sell data or provide it to third parties for marketing purposes. Only the following recipients have access to it, as processors:

Recipient	What it processes	Where
WebCreators, s.r.o. (HostCreators), Company ID 45 329 702	Website hosting, server logs, receiving submitted forms and a temporary backup of enquiries (90 days at most)	Slovakia
Google Ireland Limited (Google Workspace)	Storage and archiving of e-mail communication	Ireland, transfer to the USA based on standard contractual clauses
GitHub, Inc.	Storage of website content (gallery photos and texts, not customer enquiries)	USA

Data may also be provided to our accountant, carrier and public authorities where required by law.

4. Transfers outside the European Union

Some recipients are based in the USA. Transfers take place on the basis of the European Commission’s adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses under Art. 46 GDPR.

5. Your rights

With regard to your data you have the right:

• of access to your data and to a copy (Art. 15),
• to rectification of inaccurate data (Art. 16),
• to erasure, i.e. the right to be forgotten (Art. 17),
• to restriction of processing (Art. 18),
• to data portability (Art. 20),
• to object to processing (Art. 21),
• to withdraw consent at any time (Art. 7(3)) – withdrawal does not affect the lawfulness of processing before withdrawal.

You can exercise your rights by e-mail or in writing to our registered office. We will reply within one month.

6. Right to lodge a complaint

If you believe we are processing your data in breach of the regulations, you can file a complaint with the supervisory authority:

• Office for Personal Data Protection of the Slovak Republic
• Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovakia
• dataprotection.gov.sk

7. Automated decision-making

We do not carry out automated decision-making or profiling with legal effects for the data subject.

8. Changes to this document

We may update this text from time to time. The current version is always available at this address; the date of the last change is shown at the top of the page.