Personal Data Protection
Processing and protection of personal data at Alpha Safety s.r.o. in accordance with the GDPR and Act No. 18/2018 Coll.
Last updated: 5 July 2026
For the purpose of cooperation with your company and the persons acting on its behalf, or cooperation directly with you as a natural person, Alpha Safety s.r.o. processes the personal data of natural persons provided to it. When processing the data, we proceed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the protection of personal data.
1. Controller
Alpha Safety s.r.o., Jeleňova 4154/9, 036 01 Martin, Slovakia
Company ID: 54610982, Tax ID: 2121731810, VAT ID: SK2121731810
Phone: +421 952 352 669
Email: office@alphasafety.sk
Web: www.alphasafety.sk
We have no legal obligation to appoint a data protection officer (DPO). For personal data protection matters, contact us at office@alphasafety.sk.
2. Purposes of processing and legal basis
We process personal data for the following purposes and on the following legal bases pursuant to Art. 6 GDPR:
| Purpose of processing | Legal basis (Art. 6 GDPR) |
|---|---|
| Provision of occupational safety and health (OSH), fire protection, occupational health service and inspection services (performance of a contract, orders) | Art. 6(1)(b) — performance of a contract |
| Fulfilment of legal obligations in the provision of services (in particular Acts No. 124/2006, 314/2001, 355/2007 Coll.) | Art. 6(1)(c) — legal obligation |
| Handling an inquiry from the contact form | Art. 6(1)(b) / (f) — pre-contractual relations / legitimate interest |
| Sending the newsletter and marketing emails | Art. 6(1)(a) — consent |
| Analytical and marketing cookies | Art. 6(1)(a) — consent (+ Section 109 of Act No. 452/2021 Coll.) |
| Photographs and video recordings from public events and training sessions for promotional purposes | Art. 6(1)(f) — legitimate interest (with the right to object) |
| Keeping of accounts and archiving of documents | Art. 6(1)(c) — legal obligation |
If we process data on the basis of consent, you may withdraw it at any time; the withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
3. Personal data processed
Depending on the purpose, we process in particular the following categories of personal data:
- first name, surname, title
- date of birth, birth number
- permanent residence address
- email address, telephone
- signature, medical fitness assessment
- photograph
- marital status, citizenship, nationality
- number of dependent children
- job position, name of employer, etc.
- when visiting the website — IP address and web logs
We process the birth number only where a special law requires or permits us to do so (Section 78(5) of Act No. 18/2018 Coll.), for example in the case of medical fitness assessments.
4. Recipients and processors
Personal data may be disclosed to third parties where required by a special regulation or where necessary for the performance of a contract. The following processors (Art. 28 GDPR), with whom we have concluded data processing agreements, are involved in the processing:
| Processor | Purpose | Location |
|---|---|---|
| Google Ireland / Google LLC | Analytics (Google Analytics 4) and advertising (only with consent) | EU / USA |
| Vercel Inc. | Hosting and operation of the website | USA |
| Resend | Sending emails from forms | USA |
| Supabase | Database (internal system) | EU (Frankfurt) |
| Trustindex | Displaying Google reviews | EU |
| Meta Platforms (only with consent) | Advertising and remarketing | USA |
If you are signed in to your Google account and have ads personalisation enabled there, Google may link your visits across devices and browsers when measuring traffic and advertising (the Google signals feature). This happens solely on the basis of your marketing consent — if you do not grant it, or you withdraw it, no such linking takes place. It does not give us your name, e-mail or any other direct identifiers; we receive only aggregated statistics and audience lists.
We may also remind our clients and people who have contacted us (e.g. via the enquiry form or by e-mail) of our services using Google's Customer Match feature: the e-mail address is irreversibly hashed before being transferred, and Google uses it solely to show our ads to that person within its services (e.g. Search, YouTube, Gmail); it does not use it for any other purpose or share it with third parties. The legal basis is our legitimate interest in direct marketing towards existing clients and prospects (Art. 6(1)(f) GDPR, Recital 47). You may object to this processing at any time at office@alphasafety.sk — we will remove you from the list without delay.
We do not sell personal data.
5. Transfer to a third country
Some of the processors are based in the USA (Google, Vercel, Resend, Meta). The transfer to the USA is secured on the basis of the European Commission's adequacy decision under the EU-U.S. Data Privacy Framework and/or standard contractual clauses (SCC) pursuant to Art. 46 GDPR, as governed by the data processing agreements concluded with the individual providers. We operate the database within the EU (Supabase, Frankfurt).
6. Retention period
We retain personal data only for the period necessary to achieve the purpose, or for the period stipulated by special regulations (Art. 5(1)(e) GDPR):
- Contractual and accounting documents – for the period stipulated by special regulations (in particular the Accounting Act and archiving regulations)
- OSH / fire protection / occupational health service documentation – for the period required by the relevant regulations (e.g. Acts No. 124/2006, 355/2007 Coll.)
- Inquiry from the contact form – until the inquiry is handled; if no contractual relationship arises, only for a reasonable period thereafter
- Consent (marketing, cookies) – until the consent is withdrawn, or for the validity period of the individual cookies
7. Security of personal data
We have adopted appropriate technical and organisational measures pursuant to Art. 32 GDPR (access management, encrypted transmission, backups, instruction of authorised persons) so as to ensure an appropriate level of personal data protection.
8. Automated decision-making and profiling
We do not carry out automated decision-making, including profiling, with legal or similarly significant effects on data subjects pursuant to Art. 22 GDPR.
9. Rights of the data subject
As a data subject, you have the right:
- Right of access – to request access to the personal data processed and a copy thereof.
- Right to rectification – to request the correction of inaccurate data or the completion of incomplete data.
- Right to erasure – to request the erasure of personal data (the "right to be forgotten").
- Right to restriction of processing – to request the restriction of processing.
- Right to data portability – to obtain the data in a structured, commonly used and machine-readable format.
- Right to object – to object to processing based on legitimate interest or to direct marketing.
- Right to withdraw consent – to withdraw the consent granted at any time, without affecting prior processing.
We will handle the request without undue delay, at the latest within one month of receipt (Art. 12(3) GDPR; in justified cases the period may be extended by a further two months). Contact: office@alphasafety.sk.
If you believe that the processing is in breach of the law, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic. Supervision over cookies is exercised by the Regulatory Authority for Electronic Communications and Postal Services.
10. Cookies
The use of cookies and similar technologies is governed by a separate Cookie Policy (Section 109 of Act No. 452/2021 Coll.). You can change or withdraw your cookie consent at any time in the cookie settings.
11. Contact
If you have any questions about the processing of personal data, contact us:
Alpha Safety s.r.o., Jeleňova 4154/9, 036 01 Martin, Slovakia
Email: office@alphasafety.sk
Phone: +421 952 352 669
12. Final provisions
We may update this policy from time to time. The version currently published on this page always prevails. In case of any discrepancy between language versions, the Slovak version prevails.