IMPRINT / PRIVACY / COOKIES
Company identification, website terms, personal-data processing and cookie choices for the implemented service stack.
insar.sk s.r.o., Konštantínova 3317/3, 080 01 Prešov, Slovak Republic. Company ID 48 126 560; Tax ID 2120069446; VAT ID SK2120069446. Commercial Register of the District Court Prešov, Section Sro, Insert 31489/P.
Commercial Register (ORSR)RPVS partner 14344SK CRISEffective 27 August 2026. We review this notice when the form, analytics, providers or legal requirements change. A material update will be identified here by a new effective date.
insar.sk s.r.o. is the controller for website enquiries and consent records. Privacy questions and rights requests may be sent to support@insar.sk or by post to the registered office. Production release remains subject to owner confirmation that this mailbox is actively monitored.
The form processes name, work email, organisation, sector, precise area of interest, package interest, decision or question, timeline, consent and URL locale. A hidden empty honeypot helps reject automated submissions. The endpoint also uses transient request metadata, including an IP-derived in-memory rate-limit key; it does not log the message body or send form fields to analytics.
We use an enquiry to answer the sender and assess a requested service or cooperation. Article 6(1)(b) GDPR applies where the sender asks for pre-contractual steps. Article 6(1)(f) supports other professional correspondence, abuse prevention and service security. Optional aggregate analytics uses Article 6(1)(a) consent and remains off until a choice is granted.
The implemented production design uses Vercel to host and execute the site, Resend to deliver a validated enquiry to the configured insar.sk recipient, and Google Analytics 4 only after opt-in. The company and its authorised personnel receive enquiries. We do not sell personal data, and contact-form fields are excluded from analytics and application logs.
Vercel, Resend or Google may process data outside the EEA under their applicable processing terms. Where a transfer requires a safeguard, the relevant provider terms may rely on an adequacy decision such as the EU–US Data Privacy Framework or Standard Contractual Clauses. The production account configuration and current provider coverage require owner verification before release.
Enquiries are kept for up to 12 months after the last substantive exchange unless a contract, legal duty or dispute requires a different period. The application rate-limit counter expires after 10 minutes or when its runtime instance ends. Optional GA4 event data is intended to be retained for up to 14 months, subject to production-property confirmation. The local consent choice expires after 365 days or is replaced earlier by a new choice.
Data subjects may request access, correction, deletion, restriction and, where applicable, portability; they may object to legitimate-interest processing and withdraw analytics consent at any time through Cookie preferences. Requests go to support@insar.sk. A complaint may be lodged with the Office for Personal Data Protection of the Slovak Republic.
Slovak data-protection authorityThis business and research service is not directed to children, and we do not knowingly seek children’s data. We use validation, origin checks, request limits and provider controls, but no internet transmission is risk-free. External links open third-party services governed by their own notices and terms.
Website content is general information, not engineering certification, a structural-safety conclusion, insurance advice or a binding offer. Project scope, deliverables and liability require a written contract. A website vulnerability report should use a minimal, non-destructive reproduction and may be sent to support@insar.sk.