Instagram

Privacy policy

Privacy Policy

1. Controller and general information

This Privacy Policy (the “Policy”) contains information about the processing of your personal data by M-EXPRES SPED spol. s r.o., with its registered office at Pri kalvárii 5897/20, 917 01 Trnava, Slovakia, Company ID (IČO): 34106537, Tax ID (DIČ): 2020392814, VAT ID: SK2020392814, registered in the Commercial Register of the District Court of Trnava, Section: Sro, Insert No.: [complete] (the “Controller”, “we”, “us” or “our”), which takes place when you use the website www.m-expressped.sk (the “website”), when you communicate with us and when we cooperate with our customers.

In this Policy, we inform you why and how we process your personal data, how long we keep it, to whom we disclose it, what rights you have, and other relevant information. In doing so, we fulfil our information obligation under Articles 13 and 14 of the Regulation towards all data subjects, regardless of whether we obtained the personal data directly from you or from another source.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “Regulation” or “GDPR”), Act No. 18/2018 Coll. on the Protection of Personal Data (the “Act”), Act No. 452/2021 Coll. on Electronic Communications and other related legislation.

You can contact us regarding personal data protection:

  • by e-mail: kevin@m-expressped.sk
  • by post: M-EXPRES SPED spol. s r.o., Pri kalvárii 5897/20, 917 01 Trnava, Slovakia

The Controller has not appointed a Data Protection Officer (DPO), as it is not legally required to do so.

2. Purposes, legal bases, scope of data and retention period

We process personal data only for specific and legitimate purposes, only to the extent necessary and only for the necessary period (data minimisation principle). We process only ordinary personal data; we do not process special categories of personal data (e.g. health data). After the retention period expires, we delete personal data unless a specific regulation provides otherwise.

a) Responding to enquiries and messages sent via the contact form, e-mail, telephone or social media

  • Legal basis: Art. 6(1)(b) of the Regulation – taking steps at your request prior to entering into a contract (e.g. a request for a price quote); in other cases Art. 6(1)(f) of the Regulation – the Controller’s legitimate interest in responding to received messages and conducting business communication
  • Data: for the website contact form – first name, surname, e-mail address, telephone number and message content; for other communication – the data you provide to us yourself
  • Retention period: until the enquiry is handled, at most 1 year from the last communication; if the enquiry leads to cooperation, we further process the data for the purposes under points b) and c)

b) Records of customers and contact persons of customers – legal entities

  • Legal basis: Art. 6(1)(b) of the Regulation – performance of a contract (where the customer is a self-employed natural person); Art. 6(1)(f) of the Regulation – legitimate interest in communicating with the customer, internal control and the establishment and defence of legal claims (for contact persons of legal entities)
  • Data: first name, surname, position/role, company, billing address, telephone, e-mail
  • Retention period: for the duration of the contractual relationship and after its termination until the expiry of the limitation periods

c) Processing of accounting and tax documents

  • Legal basis: Art. 6(1)(c) of the Regulation – compliance with legal obligations (in particular Act No. 431/2002 Coll. on Accounting and Act No. 222/2004 Coll. on Value Added Tax)
  • Data: first name, surname, address / place of business / billing address, Company ID, Tax ID, VAT ID, contact details, bank details
  • Retention period: 10 years following the year to which they relate

d) Handling and recording of data subjects’ requests

  • Legal basis: Art. 6(1)(c) of the Regulation (handling the request); Art. 6(1)(f) of the Regulation – legitimate interest in demonstrating compliance with obligations (records)
  • Data: data stated in the request
  • Retention period: until the request is handled; records for 5 years from the exercise of the right

e) Website traffic measurement and ad targeting (analytics and marketing cookies)

  • Legal basis: Art. 6(1)(a) of the Regulation – consent, in conjunction with Section 109(8) of the Act on Electronic Communications
  • Data: IP address, device and browser identifiers, data on behaviour on the website
  • Retention period: depending on the type of cookie (see the Cookie Policy below), at most 2 years or until consent is withdrawn

f) Management of social media profiles (Facebook, Instagram, [LinkedIn])

  • Legal basis: Art. 6(1)(f) of the Regulation – legitimate interest in presenting our services and communicating with the public
  • Data: name/profile name, public profile data, content of comments and messages
  • Retention period: for as long as our profile exists or until the content is removed by you or by us

g) [Optional – if you publish references, photographs of persons or partner logos] Publication of references and photographs

  • Legal basis: Art. 6(1)(a) of the Regulation – consent
  • Data: first name, surname, company, position, reference, photograph
  • Retention period: 3 years from the granting of consent or until its withdrawal, whichever occurs first

h) [Optional – if you accept CVs / recruit drivers via the website] Recruitment

  • Legal basis: Art. 6(1)(b) of the Regulation – steps prior to entering into an employment contract
  • Data: data stated in the CV and application
  • Retention period: until the end of the recruitment process; longer only with your consent (at most 1 year)

i) [Optional] Sending information about our services to existing customers

  • Legal basis: Art. 6(1)(f) of the Regulation – legitimate interest in informing existing customers about similar services (Section 116(15) of the Act on Electronic Communications)
  • Data: first name, surname, company, position, e-mail
  • Retention period: 3 years from the last provision of a service or until unsubscribing, whichever occurs first

To protect personal data, we have adopted appropriate technical and organisational measures (e.g. encrypted HTTPS connection, restricted access to data, regular system updates).

3. Source of personal data

We obtain personal data directly from you – when you send us a message via the contact form, e-mail or social media, call us or visit the website. If a company of which you are an employee or contact person cooperates with us, that company may be the source of your data.

Providing data is voluntary. However, without it we may not be able to respond to your enquiry, prepare an offer or conclude and perform a contract.

4. Recipients of personal data

Your personal data may be disclosed to the following recipients:

Processors (process data on our behalf under a contract that obliges them to protect the data):

  • Websupport s.r.o., Karadžičova 12, 821 08 Bratislava, Slovakia – website hosting and e-mail services
  • accounting services provider [complete the name, or leave general]
  • marketing services provider – management of the website, social media and online campaigns [complete the name, or leave general]

Other recipients:

  • Google Ireland Limited and Meta Platforms Ireland Limited – if you consent to analytics or marketing cookies
  • Meta Platforms Ireland Limited as a joint controller – when communicating with us on Facebook or Instagram and for our page statistics (Art. 26 of the Regulation)
  • public authorities (courts, law enforcement authorities, tax office, etc.) where required by law

5. Transfers to third countries

When using services provided by Google and Meta, personal data may be transferred to the USA. Such transfers are safeguarded by the European Commission’s adequacy decision (EU-US Data Privacy Framework) for certified companies, or by standard contractual clauses approved by the European Commission, which form part of the terms of these services.

6. Profiling and automated decision-making

When processing your personal data, we do not carry out automated individual decision-making that would produce legal effects concerning you or similarly significantly affect you. Marketing cookies (if you consent to them) enable Google and Meta to show you advertisements tailored to your interests.

7. Your rights

  • Right of access – you have the right to obtain confirmation as to whether we process your personal data and, if so, to access it and obtain a copy (Art. 15 of the Regulation).
  • Right to rectification – you have the right to have inaccurate data corrected and incomplete data completed.
  • Right to erasure (“right to be forgotten”) – you have the right to have your data erased if the conditions of Art. 17 of the Regulation are met (e.g. the data is no longer necessary). Erasure may be prevented by a legal obligation, e.g. to retain accounting documents.
  • Right to restriction of processing – e.g. if you contest the accuracy of the data or need it for the establishment of legal claims.
  • Right to data portability – for data processed by automated means on the basis of consent or a contract.
  • Right to object – to processing based on legitimate interest. We will then no longer process the data unless we demonstrate compelling legitimate grounds. You may object to direct marketing at any time without giving a reason.
  • Right to withdraw consent – you may withdraw your consent at any time (for cookies via the cookie settings on the website, otherwise by e-mail). Withdrawal does not affect the lawfulness of processing before its withdrawal.
  • Right to lodge a complaint – if you believe that we process your data in breach of the regulations, you may contact the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk, tel.: +421 2 3231 3214, e-mail: statny.dozor@pdp.gov.sk.

You can exercise your rights at kevin@m-expressped.sk or by post to our registered office. We will respond free of charge within 1 month of receiving your request. In exceptional cases (complexity or number of requests), we may extend this period by up to 2 months, of which we will inform you. In the case of a manifestly unfounded or excessive (in particular repetitive) request, we may charge a reasonable fee or refuse the request.

8. Social media and links to other websites

The website contains links to our social media profiles [and embedded content, e.g. YouTube videos or Google Maps]. After clicking a link and moving to another website, the processing of your data is governed by the rules of its operator:

Embedded content from other websites behaves in the same way as if you visited that website directly – it may store cookies and collect data. We load such content only after you consent to cookies of the relevant category.

9. Validity

This Policy is valid and effective from 24 September 2026. We may update the Policy from time to time; the current version is always published on this page.

Cookie Policy

1. Controller

Cookies on the website www.m-expressped.sk are used by M-EXPRES SPED spol. s r.o., Pri kalvárii 5897/20, 917 01 Trnava, Slovakia, Company ID (IČO): 34106537 (the “Controller”).

2. What are cookies

Cookies are small text files that a website stores on your device through your browser. They are used to ensure the website works, remember your choices, measure traffic and display relevant advertising.

3. Types of cookies and consent

  • Necessary (functional) – ensure the basic functioning of the website and remember your choice in the cookie banner. We store them without consent (Section 109(8) of the Act on Electronic Communications).
  • Analytics – measure traffic and visitor behaviour (e.g. Google Analytics). We store them only with your consent.
  • Marketing – used to measure and target advertising (e.g. Meta Pixel, Google Ads). We store them only with your consent.

You give your consent via the cookie banner on your first visit. Until you give consent, we store only necessary cookies. You can change or withdraw your consent at any time by clicking [“Cookie settings” in the website footer]. You can also delete or block cookies in your browser settings; some website features may then not work properly.

4. Overview of cookies used

Necessary

  • www.cookie-yes.com – stores your consent choices – Controller – 1 year
  • wordpress_test_cookie, wordpress_logged_in_* – login to the administration (website administrators only) – Controller – until the browser is closed / 14 days

5. Validity

This Cookie Policy is valid and effective from 24 September 2026. The Controller may update it; the current version is always published on this page.

Sledujte nás na sociálnych sieťach:
Instagram