Personal Data Protection

Last updated: 13 September 2026

1. Controller

Alpha Safety s.r.o., Jeleňova 4154/9, 036 01 Martin, Slovakia
Company ID: 54610982, Tax ID: 2121731810, VAT ID: SK2121731810
Phone: +421 952 352 669
Email: office@alphasafety.sk
Web: www.alphasafety.sk

2. Purposes of processing and legal basis

We process personal data for the following purposes and on the following legal bases pursuant to Art. 6 GDPR:

Providing data when ordering a service is a contractual requirement — without it we can neither conclude nor perform the contract. For OSH, fire protection and occupational health documentation it is a statutory requirement. Data in the contact form is provided voluntarily; without it, however, we cannot reply to you.

If we process data on the basis of consent, you may withdraw it at any time; the withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

3. Personal data processed

Depending on the purpose, we process in particular the following categories of personal data:

• first name, surname, title
• date of birth
• permanent residence address
• email address, telephone
• signature, medical fitness assessment
• photograph
• marital status, citizenship, nationality
• number of dependent children
• job position, name of employer, etc.
• when visiting the website — IP address and web logs
• when a price quotation is accepted online — IP address and browser details

4. Recipients and processors

Personal data may be disclosed to third parties where required by a special regulation or where necessary for the performance of a contract. The following processors (Art. 28 GDPR), with whom we have concluded data processing agreements, are involved in the processing:

If you are signed in to your Google account and have ads personalisation enabled there, Google may link your visits across devices (Google Signals). This happens solely on the basis of your marketing consent.

We may remind clients and enquirers who have contacted us of our services through Google Customer Match: the e-mail address is irreversibly hashed before it is handed over. The legal basis is our legitimate interest in direct marketing (Art. 6(1)(f) GDPR). You may object at office@alphasafety.sk.

5. Transfer to a third country

Some of the processors are based in the USA (Google, Vercel, Resend, Meta). The transfer to the USA is secured on the basis of the European Commission's adequacy decision under the EU-U.S. Data Privacy Framework and/or standard contractual clauses (SCC) pursuant to Art. 46 GDPR, as governed by the data processing agreements concluded with the individual providers. We operate the database within the EU (Supabase, Frankfurt).

6. Retention period

We retain personal data only for the period necessary to achieve the purpose, or for the period stipulated by special regulations (Art. 5(1)(e) GDPR):

• Contractual and accounting documents – 10 years following the year to which they relate (Section 35(3) of Act No. 431/2002 Coll. on Accounting)
• OSH and fire protection documentation – 5 years from the last entry made in it (Section 6(1)(n) of Act No. 124/2006 Coll.)
• Medical fitness assessments for risk work – 20 years from the end of that risk work (Section 30(1)(h) of Act No. 355/2007 Coll.); 40 years for exposure to carcinogens and mutagens (Government Regulation No. 121/2024 Coll.)
• Inquiry from the contact form – until the inquiry is handled; if no contractual relationship arises, no more than 12 months
• Acceptance of a price quotation (IP address, browser) – 12 months from acceptance; the quotation and its acceptance remain as the basis of the contract
• Activity records in our internal system – 24 months (evidence of who worked with the data — Art. 5(2) GDPR)
• Proof of cookie consent – 4 years from the consent being given or withdrawn
• Consent (marketing, cookies) – until the consent is withdrawn, or for the validity period of the individual cookies

7. Automated decision-making and profiling

We do not carry out automated decision-making, including profiling, with legal or similarly significant effects on data subjects pursuant to Art. 22 GDPR.

8. Rights of the data subject

As a data subject, you have the right:

• Right of access – to request access to the personal data processed and a copy thereof.
• Right to rectification – to request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure – to request the erasure of personal data (the "right to be forgotten").
• Right to restriction of processing – to request the restriction of processing.
• Right to data portability – to obtain the data in a structured, commonly used and machine-readable format.
• Right to object – to object to processing based on legitimate interest or to direct marketing.
• Right to withdraw consent – to withdraw the consent granted at any time, without affecting prior processing.

We will handle the request without undue delay, at the latest within one month of receipt (Art. 12(3) GDPR; in justified cases the period may be extended by a further two months). Contact: office@alphasafety.sk.

If you believe that the processing is in breach of the law, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic. Supervision over cookies is exercised by the Regulatory Authority for Electronic Communications and Postal Services.

9. Cookies

The use of cookies and similar technologies is governed by a separate Cookie Policy (Section 109 of Act No. 452/2021 Coll.). You can change or withdraw your cookie consent at any time in the cookie settings.

10. Final provisions

We may update this policy from time to time. The version currently published on this page always prevails. In case of any discrepancy between language versions, the Slovak version prevails.