Privacy Policy

Last updated: October 2026

1. Data controller

The data controller is NORMEXA – Food Safety Consulting (the "Company"). Email: info@normexa.sk.

2. What data we process

• Identification and contact data submitted via the contact and training enrollment forms (name, company, company ID, email, phone).
• Information you provide in the message body of an enquiry or enrollment.
• Technical data necessary for operating and securing the website (IP address, browser type, time of the request).

3. Purposes of processing

• Replying to enquiries and providing requested information.
• Contract preparation and performance (e.g. organising a training).
• Compliance with legal obligations (accounting, tax).
• Operating and securing the website, including protecting the forms against spam and abuse.

4. Legal basis

Depending on the context, we process personal data on the basis of (a) your consent, (b) steps taken at your request prior to entering into a contract and contract performance, (c) legal obligation and (d) our legitimate interest in operating and securing the website (Article 6(1)(a), (b), (c) and (f) GDPR).

5. Form protection

To protect the forms against automated spam, we check each submission (hidden check fields, time needed to fill in the form, a short computational task performed by your browser, the content of the message). For this purpose we temporarily process your IP address and browser identification. Technical records are kept for no longer than 14 days; the IP address is also included in the enquiry delivered to us. No third-party service is used for this protection.

6. Retention

Enquiry data is retained for the time necessary to handle the request and any subsequent business communication, generally no longer than 3 years from the last contact unless a longer retention is required by law.

7. Your rights

You have the right to access, rectify, erase or restrict the processing of your personal data, the right to data portability and the right to object. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, write to info@normexa.sk. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

8. Recipients

We do not sell or share personal data with third parties for marketing purposes. Data may be processed by trusted IT service providers (hosting, email) who act on our behalf and under appropriate contractual safeguards.

9. International transfers

Where personal data is transferred outside the EEA, we apply standard contractual clauses or rely on adequacy decisions of the European Commission.

10. Cookies

For information on cookies used on this website, see our Cookie policy.