Privacy Policy

Information on the processing of personal data under the GDPR and Act No. 18/2018 Coll.

Last updated: 01.01.2026

MP-UNI, s.r.o.,
with registered office at 9. mája 745/16, 083 01 Sabinov,
Company ID: 36818682,
registered in the Commercial Register of the District Court Prešov, insert number: 18977/P,
e-mail: info@mp-uni.sk,
telephone: +421 948 287 877
(hereinafter referred to as the “controller”) processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on personal data protection. The information on this page is provided in a concise, transparent and understandable manner.
Controller’s representative: not appointed.
Data Protection Officer: the controller has not appointed a Data Protection Officer.

What personal data we process

We process only the personal data that you provide to us or that is necessary for the operation of the website and the provision of our services, in particular:

  • first name and surname
  • telephone number
  • e-mail address
  • address
  • billing details
  • content of the message sent via the contact form, e-mail, telephone, or through communication platforms used by the controller when communicating with customers
  • necessary technical data processed as part of the operation and security of the website by the hosting provider, in particular IP address and basic technical and log data to the extent necessary for the operation, protection and delivery of the website through the Vercel platform

We process personal data only to an adequate, relevant and necessary extent. In its privacy policy, Vercel states that when using its services, it may process IP addresses, log files, diagnostic data and website traffic data.

For what purposes we use the data

We process your personal data mainly for the following purposes:

1. Handling an inquiry or contact request

If you contact us by e-mail, telephone or through communication platforms, we process your data for the purpose of handling your request or responding to your inquiry.

Scope of data: name, e-mail, telephone, message content

Legal basis: pre-contractual relations or performance of a contract under Article 6(1)(b) GDPR

Retention period: 6 months

2. Provision of a service or delivery of an order

If you become our customer, we process your data for the purpose of concluding and performing a contract.

Scope of data: first name, surname, address, telephone, e-mail, billing details

Legal basis: performance of a contract under Article 6(1)(b) GDPR

Retention period: for the duration of the contractual relationship and subsequently as required by applicable legal regulations

3. Accounting and compliance with legal obligations

Some personal data must be processed due to compliance with obligations under specific legal regulations.

Scope of data: billing and identification data

Legal basis: compliance with a legal obligation under Article 6(1)(c) GDPR

Retention period: in accordance with applicable legislation

4. Operation and security of the website

When visiting the website, necessary technical data may be processed as part of hosting and technical operation to ensure availability, security, protection against misuse and proper delivery of the website content.

Scope of data: IP address, basic technical and log data, data necessary for the delivery and security of the website

Legal basis: legitimate interest of the controller under Article 6(1)(f) GDPR

Legitimate interest: ensuring the functionality, availability and security of the website

Retention period: for the period necessary under the hosting provider’s settings, the controller’s internal security rules and applicable legal regulations

The European Commission states that the user should also be informed about the purpose, legal basis, recipients and retention period or the criteria used to determine it.

Obligation to provide data and consequences of not providing it

Providing personal data when contacting the controller is voluntary; however, without the necessary contact data, it may not be possible to respond to your inquiry.

Providing personal data when placing an order or concluding a contract is a contractual requirement. Without the necessary data, it is not possible to conclude the contract or provide the service.

Providing billing and identification data may be a legal requirement. Without such data, it may not be possible to issue an accounting or tax document.

Who the data may be disclosed to

Personal data may be disclosed to our contractual partners and processors who provide individual services for us, in particular:

  • provider of web hosting and cloud infrastructure Vercel
  • website administrator or IT service provider
  • e-mail service provider
  • external accounting company
  • lawyer
  • providers of communication platforms, if used by the controller when communicating with customers

Personal data may also be disclosed to public authorities if required by law. The GDPR also requires information about who may receive the data or to whom it may be disclosed.

Transfer to third countries

In connection with the use of the Vercel hosting and cloud platform, personal data may be transferred outside the European Union or the European Economic Area. Vercel states that for such transfers it uses standard contractual clauses or other appropriate legal mechanisms and also states its participation in the EU-U.S. Data Privacy Framework.

How long we retain the data

We retain personal data for the period necessary to fulfil the purpose of processing, but no longer than the period resulting from applicable legal regulations, contractual obligations, legitimate needs to protect legal claims and rules of secure technical operation.

Specific retention periods for the individual purposes of processing are stated above, where known. If the exact period cannot be determined in advance, we determine it according to the purpose of processing, the nature of the data, legal obligations and the need to protect the controller’s rights. The Commission states that either a specific retention period or at least the criteria for determining it should be stated.

What rights you have

As a data subject, you have the right to:

  • request access to your personal data
  • request correction of incorrect or outdated data
  • request deletion of personal data if there is a valid reason
  • request restriction of processing
  • object to processing
  • data portability, if processing is carried out automatically and based on consent or a contract
  • withdraw consent at any time if the processing is based on consent
  • lodge a complaint with a supervisory authority

How to exercise your rights

You may exercise your rights by e-mail at or in writing to the registered office address of the controller.info@mp-uni.sk or in writing to the registered office address of the controller.

Supervisory authority

If you believe that the processing of your personal data is contrary to legal regulations, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic
Park one building
Námestie 1. mája 18
811 06 Bratislava
E-mail: statny.dozor@pdp.gov.sk

Cookies and technical storage

We do not use analytical, marketing or profiling cookies on our website.

We only use necessary technical localStorage to remember the confirmation of the information notice during the first visit to the website so that this notice is not displayed repeatedly during each visit.

Under Section 109(8) of the Electronic Communications Act, consent is generally required for storing or accessing information on the user’s terminal device; however, this requirement does not apply to technical storage or access whose sole purpose is the transmission or facilitation of the transmission of a message, or if it is strictly necessary for providing a service explicitly requested by the user. The Office for Regulation of Electronic Communications also states in its opinion that consent is not required for necessary cookies.

Technical storage used on this website:

  • name: confirmation of the information notice
  • type: localStorage
  • purpose: remembering the confirmation of the notice on the use of technical storage
  • retention period: until the user deletes the data in the browser

Automated decision-making and profiling

When processing personal data, no automated individual decision-making or profiling takes place that would produce legal effects concerning you or similarly significantly affect you. The Commission states that if such decision-making is used, the user must be informed about it.

Security of personal data

We have adopted appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

Changes to this page

We may update this privacy policy from time to time. The current version is always published on this page.