Privacy Policy

The data controller is nolimeo s. r. o., registered at Brekov, Slovak Republic, Company ID: 53518390, registered in the Commercial Register of the District Court Prešov, Section: Sro, Insert No. 41437/P (hereinafter "nolimeo" or "we"). Contact email for data protection inquiries: [email protected]

We collect the following categories of personal data: • Contact data - name, email address, phone number, and message content provided via our contact form or email. • Technical data - IP address (anonymized), browser type, operating system, language, screen resolution, and referrer URL. • Cookies and analytics data - cookie identifiers (e.g. _ga, _gid), page visit and interaction data, if you have consented to analytics cookies. • Consent data - your cookie banner choices, consent ID, timestamp, and version.

We process personal data based on: • Art. 6(1)(a) GDPR - consent (analytics and marketing cookies). • Art. 6(1)(b) GDPR - contract performance or pre-contractual measures (processing inquiries from the contact form). • Art. 6(1)(f) GDPR - legitimate interest (technical operation and security of the website, abuse prevention).

We use your data to: • Respond to your inquiries and communicate with you. • Improve our website and services based on analytics data. • Ensure technical operation and security of the website. • Comply with legal obligations. • Maintain consent records in compliance with GDPR.

On our website we use: • Necessary cookies - required for the website to function (e.g. cookie_consent_v1). • Google Analytics 4 - for anonymous traffic analysis (only with consent). All analytics and marketing cookies are only activated after your explicit consent via the cookie banner. We implement Google Consent Mode v2, ensuring no data is collected without your consent.

Detailed information about cookies can be found on the About Cookies page.

We do not sell your personal data to third parties. Data may be shared with: • Google LLC - as part of Google Analytics (if you consented). Data is processed in the EU/EEA under standard contractual clauses. • Supabase Inc. - database hosting for consent records (data is anonymized and encrypted). • Hosting providers - for website operation.

• Contact data from forms - maximum 2 years from last communication. • Analytics cookies - per cookie type (see About Cookies page). • Consent records - 3 years (legal requirement to demonstrate consent). • Technical logs - maximum 90 days.

Under GDPR, you have the right to: • Access your personal data. • Rectify inaccurate data. • Erasure ("right to be forgotten"). • Restrict processing. • Data portability. • Object to processing. • Withdraw consent at any time (withdrawal does not affect lawfulness of prior processing). To exercise your rights, contact us at [email protected]. We will respond within 30 days.

If you believe your rights have been violated, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (https://dataprotection.gov.sk).

We may update this policy. We will inform you of significant changes via a notice on the website.