Privacy
policy

1. Who we are and why we process personal data

The controller of personal data is BKL Group s.r.o., trading as BKL Forge. We process personal data only to the extent necessary to perform a contract, pursue a legitimate interest or based on your consent, in accordance with GDPR and applicable Slovak data-protection law.

2. What personal data we process

When you contact us by form or email:

• Name and surname
• Email address
• Telephone number
• Message content (project description and requirements)

When entering into a contract / placing an order:

• Billing details (name/company name, address, company ID, tax ID)
• Bank details (for bank transfer)
• Project address (installation location)

Website visit:

• IP address (processed automatically by the server, without identifying the person)
• Cookies — see section 7

3. Purpose and legal basis of processing

• Handling an enquiry / quotation — legal basis: legitimate interest (Art. 6(1)(f) GDPR)
• Performance of a contract — legal basis: performance of a contract (Art. 6(1)(b) GDPR)
• Accounting and statutory obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR)
• Sending offer information (only with consent) — legal basis: consent (Art. 6(1)(a) GDPR)

4. Recipients of personal data

We do not sell, rent or otherwise provide your personal data to third parties for commercial purposes. We may share data only with:

• Accountants or tax advisers — as necessary for accounting
• Carriers — when delivering an order (name, address)
• Websupport, s.r.o. (websupport.sk) — website hosting, domain and technical infrastructure required to operate the site and store data
• Google Workspace (Google Ireland Limited / relevant Google group companies) — email provider used for receiving and sending business email
• Public authorities — where required by law

5. Retention period

• Enquiries without an order: 12 months from the last communication
• Contracts and invoices: 10 years from issue, as required by law
• Marketing consent: until consent is withdrawn
• Technical security records and server logs: only as long as necessary for security, incident handling and legal obligations

5a. Processors and data transfers

We use the providers listed in section 4 to operate the website. With providers processing personal data on behalf of BKL, we have or will put in place the required contractual terms under Article 28 GDPR. Google Workspace may use subcontractors within the Google group and may process data outside the European Economic Area; where this occurs, the safeguards required under Chapter V GDPR apply.

6. Your rights

Under the GDPR, you have the right to:

• Access — to know what data we process about you
• Rectification — to request correction of inaccurate data
• Erasure — the right to be forgotten where no reason for further processing exists
• Restriction of processing — in certain cases
• Data portability — to receive your data in a machine-readable format
• Objection — to processing based on legitimate interest
• Withdrawal of consent — at any time and without giving a reason

You may submit a request by email to info@bklforge.eu or in writing to the controller. We will respond within 30 days.

You also have the right to lodge a complaint with the Slovak Office for Personal Data Protection, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

7. Cookies

The bklforge.eu website uses necessary technical cookies, mainly to remember language settings and support secure administration. Cookie consent choices are stored in the browser local storage. At the time of this update, we do not use active third-party analytics or advertising cookies. If this changes, they will be enabled only after prior consent and this policy will be updated.

8. Data security

We have adopted appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. Data sent through the contact form is encrypted using HTTPS.

9. Changes to this document

We may update this policy from time to time. The current version is always available on this page. We will inform you of material changes by email if we have your contact details.

This document has been prepared in accordance with GDPR (EU) 2016/679 and applicable Slovak data-protection legislation, as amended.