PRIVACY NOTICE
Privacy Notice
How insar.sk s.r.o. processes personal data when you visit this website, submit an enquiry or choose optional analytics.
Controller and privacy contact
The controller is insar.sk s.r.o., Konštantínova 3317/3, 080 01 Prešov, Slovak Republic; Company ID 48 126 560; registered in the Commercial Register of the District Court Prešov, Section Sro, Insert 31489/P. Send privacy questions or rights requests to support@insar.sk or to the registered office. No data protection officer has been appointed.
Commercial Register (ORSR)Data we process
A normal website request may include IP address, time, requested URL, referrer, browser/device and security metadata. The contact form contains your name, work email, organisation, sector, precise area of interest, requested service, decision or question, timing, acknowledgement of this notice and language. A necessary local record stores your consent state and timestamps. If you accept analytics, GA4 receives a sanitised page URL, page title, coarse device/browser and interaction data; form fields, names, email addresses, message text, coordinates and precise areas of interest are excluded.
Enquiries — purpose and legal basis
We use enquiry data to reply, assess feasibility and prepare a requested service or cooperation. Article 6(1)(b) GDPR applies to steps requested before a contract. Article 6(1)(f) GDPR applies to other professional correspondence and to establishing, exercising or defending claims. The legitimate interests are communicating with organisations that approach us and maintaining an evidential business record.
Security and anti-abuse
Origin checks, validation, a hidden honeypot, payload limits and an in-memory IP-derived rate-limit key protect the form and service under Article 6(1)(f) GDPR. The rate-limit entry expires after 10 minutes or sooner when the runtime instance ends. The application does not intentionally write contact-form content to analytics or application logs.
Optional analytics
Google Analytics 4 is used to understand page use, navigation and broad content performance only after consent under Article 6(1)(a) GDPR. The implementation uses Basic Consent Mode: the Google library and measurement requests are blocked until acceptance. Advertising storage, Google Signals, advertising personalisation, remarketing, enhanced conversions and User-ID are disabled. Analytics runs only on the canonical insar.sk host and is excluded from private pricing routes.
Recipients and providers
Authorised insar.sk personnel receive enquiries. Vercel hosts and executes the website and may process request/security metadata. Resend delivers validated form content to the configured insar.sk mailbox. Google Ireland Limited provides GA4 after consent. These providers process data under their applicable service and data-protection terms. We do not sell personal data.
International transfers
Provider infrastructure and subprocessors may involve processing outside the EEA. Vercel's and Resend's published data-processing addenda incorporate the European Commission's 2021 Standard Contractual Clauses for transfers that lack an adequacy decision; Resend also states participation in the EU–US Data Privacy Framework. Google identifies Google Ireland Limited for European Analytics data and its terms provide the applicable adequacy or contractual safeguards for onward restricted transfers.
Vercel DPAResend DPAGoogle measurement termsRetention
Enquiry data is kept only while needed to respond, prepare or perform a contract, meet accounting or other legal duties, or establish, exercise or defend claims; the applicable purpose and statutory limitation period determine deletion. The in-memory anti-abuse entry lasts no more than 10 minutes per runtime instance. The consent record expires after 365 days or is replaced earlier. GA4 user- and event-level data is deleted according to the active production-property retention control; aggregated reports may remain without a user-level expiry. Analytics cookies expire after no more than 365 days under this site's tag configuration.
Your rights
Subject to the GDPR conditions, you may request access, correction, deletion, restriction and portability, and information about safeguards. You may object at any time to processing based on legitimate interests; we will stop unless compelling legitimate grounds or legal claims apply. Send a request to support@insar.sk. Identity may be verified proportionately before a request is fulfilled.
Consent and complaint
You may reject analytics without losing website functionality and withdraw consent at any time through Cookie settings in the footer. Withdrawal stops future analytics but does not invalidate processing before withdrawal. You may complain to the Office for Personal Data Protection of the Slovak Republic or another competent supervisory authority.
Slovak data-protection authorityCookie PolicySecurity, children and external links
We apply validation, access controls, transport encryption and provider security controls appropriate to this website, but no internet service is risk-free. The business and research service is not directed to children and we do not knowingly request children's data. External links lead to services with their own notices.
Version and changes
Version 2026-09-03, effective 3 September 2026. We review this notice when the form, analytics, providers or legal requirements materially change and publish a new version and date.