Privacy Policy

1. Data Controller

The controller of your personal data is:

This policy explains how we process personal data when you visit our website and communicate with us by e-mail.

2. Personal Data We Process

E-mail communication

We do not use a contact form on our website. You can contact us directly using the published e-mail address.

If you write to us, we process:

  • Your e-mail address.
  • The contents of your message and any attachments.
  • Any other information you provide, such as your first name, surname, telephone number, job title or information about the company you represent.

Technical data

When you visit our website, technical data may also be processed in server logs, particularly:

  • Your IP address.
  • The date and time of access.
  • The requested page.
  • Information about your browser or operating system.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Handling enquiries and negotiations prior to entering into a contract

If you contact us as a prospective contracting party, we process the necessary data to take steps at your request prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.

General communication and dealings with company representatives

When handling enquiries and communicating with the contact persons of our business partners, we process data on the basis of our legitimate interest in maintaining business communication and business relationships, pursuant to Article 6(1)(f) GDPR.

Performance of contracts

If you are a party to a contract, we process the data necessary for its performance, pursuant to Article 6(1)(b) GDPR.

Compliance with legal obligations

Where we are required to process data, for example to comply with accounting and tax obligations, we do so pursuant to Article 6(1)(c) GDPR.

Protection of rights and website security

We process data necessary for the protection of our legal claims and the secure operation of our website on the basis of our legitimate interest, pursuant to Article 6(1)(f) GDPR.

Voluntary provision of data

Providing data by e-mail is voluntary. However, without the information necessary to handle your request, we may be unable to reply, prepare a quotation or enter into a contract.

4. Personal Data Retention Periods

We retain personal data only for as long as necessary for the purposes for which it was collected.

  • General enquiries and requests for quotations that did not result in a contract: no longer than 90 days after the communication ends, unless further retention is necessary to protect a specific legal claim.
  • Communication relating to a contractual relationship: for the duration of that relationship and subsequently for as long as necessary to protect legal claims, taking into account the applicable limitation periods.
  • Accounting and tax documents: for the periods required by applicable law.
  • Technical server logs: for 30 days. In the event of a security incident, the relevant logs may be retained for as long as necessary to investigate the incident and protect legal claims.

5. Recipients of Personal Data

Only authorised persons and service providers have access to personal data, to the extent necessary for their activities.

Recipients may include, in particular:

  • Web hosting provider: WebSupport.
  • E-mail service provider: WebSupport.
  • Providers of technical administration and security services, where we use their services.
  • Accounting, legal and other professional advisers, where necessary for the relevant purpose.
  • Public authorities, where we are legally required to disclose the data.

6. Transfers of Personal Data Outside the European Economic Area

We do not transfer personal data outside the European Economic Area.

7. Your Rights

Subject to the conditions set out in the GDPR, you have the right to:

  • Access your personal data.
  • Request the rectification of inaccurate data or the completion of incomplete data.
  • Request the erasure of personal data.
  • Request the restriction of processing.
  • Receive your data in a portable format, where the conditions for the right to data portability are met.
  • Object to processing based on legitimate interests on grounds relating to your particular situation.

How to exercise your rights

You can exercise your rights by contacting us at office@aut-on.eu.

Right to lodge a complaint

You also have the right to lodge a complaint with a supervisory authority.

For a controller established in Slovakia, the competent authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky).

You may also lodge a complaint with the competent supervisory authority in the place of your habitual residence, place of work or the alleged infringement of the GDPR.

8. Cookies and Other Technologies

Information about the use of cookies and any other technologies can be found on the page [link to the Cookie Policy].

9. Automated Decision-Making

In the processing of personal data described in this policy, we do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

10. Updates to This Policy

We may update this policy to reflect changes in the services we use or the way we process personal data. The current version is always available on this website.

Effective date: 20 October 2026

Návrat hore