Privacy Policy

Last updated: 14 October 2026

This policy explains how personal data is processed when you visit haliscak.sk or contact me through the contact form, in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.

1. Data controller

Daniel Hališčák
Phone: +421 918 042 604
Contact form: haliscak.sk/#contact

No Data Protection Officer has been appointed, as it is not required. Contact me directly with any questions.

2. What data I process and why

Contact form

  • Data: your email address and the content of your message.
  • Purpose: to reply to your inquiry and, if you request it, to prepare an offer.
  • Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering messages sent to me (Art. 6(1)(f) GDPR).
  • Retention: as long as needed to handle your inquiry, then at most 2 years, unless a contract follows (in which case statutory retention periods apply).
  • Providing the data is voluntary, but without an email address I cannot reply to you.

Server logs

  • Data: IP address, date and time of access, requested page, browser type.
  • Purpose: secure and reliable operation of the website and protection against abuse.
  • Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Retention: logs are kept by the hosting provider for a limited period and then deleted automatically.

3. Cookies

This website uses only strictly necessary cookies required for it to function. They do not track you and therefore do not require your consent. No analytics, advertising or social media tracking cookies are used.

Cookie Purpose Expiry
haliscaksk_session Keeps your session, required for the contact form to work. 120 minutes
XSRF-TOKEN Security token protecting forms against cross-site request forgery. 120 minutes

Your choice to dismiss the cookie notice is stored in your browser's local storage, not in a cookie. You can delete cookies at any time in your browser settings; the website may then not work correctly.

4. Recipients of data

Your data is not sold or shared for marketing. It may be processed by these service providers acting on my behalf:

  • the web hosting provider (stores the website and server logs),
  • the email service provider (delivers and stores contact form messages),
  • public authorities, only where required by law.

Fonts are loaded from Bunny Fonts (BunnyWay d.o.o., Slovenia, EU), which does not use cookies or log IP addresses. Links to Facebook, Instagram and LinkedIn are plain links; no data is sent to these networks unless you click them, after which their own privacy policies apply.

Personal data is not transferred outside the European Union / European Economic Area.

5. Your rights

Under the GDPR you have the right to:

  • access your personal data (Art. 15),
  • rectification of inaccurate data (Art. 16),
  • erasure (Art. 17),
  • restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interest (Art. 21).

To exercise these rights, call me or send a request via the contact form. I will respond without undue delay, at the latest within one month.

You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

6. Automated decision-making

No automated decision-making or profiling takes place.

7. Changes to this policy

This policy may be updated from time to time. The current version is always available on this page.