Cookies

This policy explains how we use cookies and similar technologies on the SWIDA Innovative website, the purposes they serve and how you can decide on their use. Technologies that are not strictly necessary may only be used after your prior consent for the respective purpose. You can change your choice later in the cookie settings available on the website.

1 Who is responsible for the use of cookies

The operator of the website and the controller of the personal data processed for our purposes is SWIDA Innovative s.r.o., with its registered office at Popradská 155/56, 040 01 Košice – mestská časť Západ, Slovak Republic, Company ID (IČO) 36 194 328 (hereinafter “SWIDA” or “we”). You can contact us at info@swida.sk or by post at our registered office address, marked “Personal Data Protection”.

Data Protection Officer contact: Ing. Monika Tajblik Löfflerová, monika.lofflerova@swida.sk, phone +421 915 931 186.

2 Scope of this policy

This policy applies to the corporate website on the swida.sk domain and to its language versions and subdomains on which it is made available and on which the use of technologies described here takes place. The same rules apply regardless of the interface language.

The separate InstaCarrier environment at instacarrier.eu and SWIDA App are governed by the information and settings of the respective service. A choice made on the corporate website cannot automatically be regarded as consent for another application or for other purposes. If consent is to be shared across several environments, its territorial and material scope must be clearly stated before it is given and must be technically respected in each of them.

This policy supplements the Privacy Policy available in the website footer, which explains further data processing, recipients, retention and your rights. A link to an external website, such as a job portal or a map service, differs from content embedded directly in our website: with a plain link, the connection to the target website is made once the link is opened; with embedded content, it may be made as soon as the content is loaded.

3 What cookies and similar technologies are

Cookies are small files stored in your browser or on your device that make it possible, for example, to remember your consent choice or to recognise your browser on your next visit. Other browser storage, identifiers, tracking pixels and scripts that store information on the device or gain access to it may serve a similar role. The rules are not assessed solely on the basis of whether a technology is called a cookie.

Session cookies generally expire when the browser session ends. Persistent cookies remain until the set period expires or until they are deleted earlier. Some settings may renew their validity on a subsequent visit; this must be taken into account when providing information about their actual lifespan.

Cookies may be set for the domain of our website or for another domain. A cookie on the swida.sk domain may also serve a tool of an external provider. The domain on which a cookie is stored does not in itself determine to whom data are sent or whether consent is required.

Data associated with the use of these technologies may include a browser identifier, IP address, technical information about the device, time of visit, pages visited, interactions and the selected scope of consent. Even data without a name or e-mail address may be personal data if they allow a person to be identified directly or indirectly.

4 When your consent is required

Under Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications, as amended, information may be stored on a device or accessed on it, as a rule, only with the demonstrable consent of the user. This protection applies even where the information itself is not personal data.

Consent is not required for technical storage or access whose sole purpose is the transmission or facilitation of the transmission of a communication over a network, or where it is strictly necessary to provide an information society service that you have explicitly requested. The exemption is assessed according to the actual function and necessity of the technology; labelling a tool as functional or statistical is not enough for the exemption to apply.

Where personal data are also processed, Regulation (EU) 2016/679 (the “GDPR”) and the relevant provisions of Act No. 18/2018 Coll., as amended, also apply. For optional analytics and advertising, the legal basis is consent under Article 6(1)(a) GDPR. Necessary processing for the operation and security of the website may rely on Article 6(1)(f) GDPR; the legitimate interest is the secure and reliable operation of the website. We process the records needed to demonstrate consent to comply with the obligation under Article 7(1) GDPR in conjunction with Article 6(1)(c) GDPR. These legal bases do not replace consent to access to the device where such consent is required.

5 What purposes we use technologies for

Strictly necessary technologies and choice management

We use technologies needed for the requested features to work and to remember and apply your consent choice. Choice management is provided by CookieScript. The cookie storing your choice may remain active even if you reject the optional categories, so that the website is able to respect your rejection. The exemption applies only to the data and operations necessary for this purpose, not to any further tracking.

Analytics

We use Google Analytics to evaluate traffic and interactions with the website so that we understand how the pages are used and can improve them. Analytics may work with online identifiers and data about the device, visits and events on the website. Analytics cookies and related optional measurement are activated on the basis of consent to analytics; without consent, they must not be run merely because their output is a statistical report.

Advertising and measuring its performance

Google Ads may be used to measure advertising performance and, depending on the features enabled, also to build audiences and personalise advertising. These features may involve the processing of advertising identifiers and data on interaction with the website or advertising. Evaluating interests and assigning users to audiences may constitute profiling. Consent to advertising purposes is separate from consent to analytics; merely visiting the website or submitting an enquiry does not replace it.

Map content

Google Maps makes it possible to display a map and the location of our premises. With an embedded map, its provider may receive your IP address, technical data about the device and the request and, depending on the implementation, other identifiers. If loading the map involves technologies that require consent, the content is loaded only after the relevant choice has been made. Rejecting the optional map feature does not prevent the display of the contact details in text form. Consent to loading the map does not automatically cover determining the precise location of your device.

Tag management and reports

Google Tag Manager is used to manage tags and for the technical deployment of other tools. It is not a separate purpose of processing, and its use does not entitle us to run a tag before the necessary consent has been given. The actual behaviour of the container and of the individual tags is also decisive.

Data Studio, also known as Looker Studio, is used to create reports from connected sources. Semrush is used to analyse and optimise the website’s search visibility and for marketing evaluation. The mere use of a tool in the administration does not mean that cookies are separately stored on the visitor’s device. If a specific integration involves visitor tracking or a further transfer of personal data, it must be included in the relevant category and in the information on processing. Creating a report does not make it possible to circumvent the original consent choice.

Forms and newsletter

Submitting the contact form via Mailgun, adding a newsletter contact to MailerLite and transferring an enquiry to InstaCarrier are data flows described in the Privacy Policy. The mere use of an API does not demonstrate the use of cookies in the browser. If an embedded form includes another technology, it is assessed according to its actual purpose. Consent to the newsletter subscription is separate; a choice made in the cookie banner does not replace subscribing, and subscribing does not automatically cover individual tracking of opens or clicks.

6 Overview of specific cookies

The specific cookies and other technologies used are listed in the detailed overview in the cookie settings. The overview should include their name or identifier, provider, purpose, domain and storage period, and, where their validity is renewed, this fact as well. A technology that is not a cookie is not omitted from the overview if it accesses the device or is part of measurement about which you need information.

The available scan of the swida.sk detected the following cookies:

Neither the name of a cookie nor its automatic classification by a scanner determines whether consent is required. The analytics cookies listed in the table are subject to consent even when they are stored under the swida.sk domain. The lifespan recorded in the scan does not represent a universal statutory period or the retention period of analytics data on servers.

7 How to express and change your choice

In the cookie banner, you can accept all optional purposes, reject them or adjust individual categories. Strictly necessary technologies cannot be switched off through consent, provided they meet the statutory conditions of the exemption. Optional categories must not be pre-selected. Not giving consent means that the respective optional technology must not be activated.

Continuing to browse, scrolling the page, closing the banner or inactivity do not constitute consent. Your choice must be based on an active action on your part. Rejecting analytics or advertising does not prevent you from using the basic content of the website or from contacting SWIDA.

You can change your choice or withdraw consent at any time by opening the cookie settings via the relevant link or control on the website. Withdrawing consent should be as easy as giving it. After withdrawal, further use of technologies for the purpose concerned stops; the lawfulness of processing before withdrawal is not affected.

Withdrawing consent does not mean the automatic deletion of all data already processed on another valid legal basis. You can request erasure or exercise your other rights as described in the Privacy Policy. Cookies can also be deleted in your browser; deleting them does not necessarily notify providers of the withdrawal of consent or delete data from their systems.

Your choice may be tied to a specific browser and device. In another browser or on another device, after the record of your choice has been deleted or after it has expired, you may need to make your choice again. A change of purpose or an extension of the scope requiring consent must not rely solely on your original choice.

8 How long information is kept

The storage period of each cookie is set out in the current detailed overview in the cookie settings. It is different from the retention period of data obtained using the cookie, from the validity period of consent and from the retention period of proof that consent was given or withdrawn. The expiry of a cookie’s lifespan does not in itself mean that the data in the analytics or advertising service have also been deleted.

We keep records of consent and of its withdrawal to the extent necessary to demonstrate compliance with our obligations. We do not use them as a substitute for marketing consent. The four-year period under Section 116 of the Electronic Communications Act governing proof of consent to direct marketing does not automatically apply to cookie consents.

9 Providers and data transfers

The providers of CookieScript and of the relevant Google services, as well as our providers of technical website administration, may be involved in managing consents and providing the activated features. The extent of access depends on the features actually activated and on your choice. In some activities a provider may act as a processor and, for its own purposes, as an independent controller; its role is assessed according to the specific processing.

The use of international services may involve the transfer of, or remote access to, personal data outside the European Economic Area, in particular to the USA. The conditions for such a transfer are governed by Articles 44 to 49 GDPR. Cookie consent is not in itself a safeguard or a general authorisation for such a transfer. The specific recipients or their categories, the destination countries and the mechanism used, together with how to obtain a copy of the safeguards, are set out in the section on transfers in the Privacy Policy.

10 Browser settings and your rights

Browsers allow you to delete stored cookies, block them or adjust the rules for individual websites. You can find out how in your browser’s privacy settings or help section. Blocking strictly necessary cookies may limit features that depend on them. Browser settings do not replace the website’s obligation to respect your choice and cannot turn inactivity into consent.

Where we process your personal data, you have, under the conditions of the GDPR, the right of access, rectification, erasure, restriction of processing and portability and, where processing is based on legitimate interest, the right to object on grounds relating to your particular situation. You can object to direct marketing, including related profiling, at any time and without giving reasons. Consent can be withdrawn at any time. Details and the procedure for handling requests are set out in the Privacy Policy.

You can lodge a complaint with the competent supervisory authority, in particular in the state of your habitual residence, place of work or place of the alleged infringement. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic, Námestie 1. mája 18, 811 06 Bratislava, https://dataprotection.gov.sk. This is without prejudice to the remedies available under the Electronic Communications Act or to the right to judicial protection.

11 Updates to this policy

This policy applies from the date of its publication for the respective version of the website. When the technologies used change, we update the detailed overview and, where necessary, this policy as well. If a change requires new consent, neither the publication of the new text nor continued use of the website replaces it.