KINETRA

Privacy Policy (GDPR)

Last updated: 9. augusta 2026

Information on the Processing of Personal Data

Information for the data subject pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

Controller: Kinetra s. r. o. Registered office: J. Martáka 3795/19, 036 08 Martin Company ID (IČO): 48 079 049 · Tax ID (DIČ): 2120038184 · VAT ID (IČ DPH): SK2120038184 Registration: Commercial Register of the District Court Žilina, Section Sro, File No. 63441/L Contact for exercising your rights: info@kinetra.sk

The Controller is not obliged to designate a data protection officer (DPO); data subjects should address all requests directly to the contact stated above.

1. Contact Form and Cost Calculator (PNO)

Data processed: name, e-mail address, telephone number, company name, the content of your message and the values you enter into the cost calculator. Together with your enquiry, we also store information on the source of your visit (for example campaign UTM parameters) so that we can evaluate the effectiveness of our marketing.

Legal basis: Article 6(1)(b) GDPR, pre-contractual measures taken at the request of the data subject (responding to your enquiry). Information on the source of the visit: the Controller's legitimate interest under Article 6(1)(f) GDPR in measuring marketing effectiveness.

Recipients: authorised persons of the Controller, the hosting provider.

Retention period: 2 years from the last communication.

Voluntary nature: The provision of data is voluntary. However, without the mandatory fields of the form we are unable to respond to your enquiry.

2. Client Zone

Data processed: e-mail address, name, company, history of PNO calculations and an overview of purchased content.

Legal basis: Article 6(1)(b) GDPR, performance of a contract (maintenance of the user account).

Recipients: authorised persons of the Controller, the hosting provider.

Retention period: for the duration of the account; no more than 1 year after its cancellation.

3. Orders of Digital Content and Payments

Data processed: identification and billing data, data concerning the order and the payment status. Payments are processed by the GoPay payment gateway; the Controller does not see or store payment card data.

Legal basis: Article 6(1)(b) GDPR, performance of a contract.

Recipients: authorised persons of the Controller, GoPay s.r.o. (payment gateway), the hosting provider.

Retention period: 3 years from the last order (except for data that must be retained for a longer period under point 4).

4. Accounting Records

Legal basis: Article 6(1)(c) GDPR, legal obligation (the Accounting Act and tax regulations).

Recipients: authorised persons of the Controller, the processor providing accounting services, financial administration authorities.

Retention period: 10 years.

Obligation to provide data: the provision of data is a statutory requirement.

5. Cookies, Analytics and Advertising Measurement

Essential (technical) cookies required for the operation of the website are processed on the basis of the Controller's legitimate interest under Article 6(1)(f) GDPR.

Analytics, marketing and preference cookies are used solely with your consent under Article 6(1)(a) GDPR, which you grant in the cookie banner on your first visit. You may change or withdraw your consent at any time via "Cookie Settings" in the website footer. The website uses Google Consent Mode v2; without your consent, no analytics or marketing tools are activated.

Recipients: Google Ireland Limited (Google Analytics, Google Ads), Meta Platforms Ireland Limited (Meta Pixel, Conversions API), the hosting provider.

Transfers to third countries: when the Google and Meta tools are used, data may be transferred to the USA on the basis of the EU-US Data Privacy Framework adequacy decision.

Retention period: according to the lifetime of the individual cookies, no more than 2 years. A detailed list is available in the Cookie Policy.

Your Rights

Under the EU Regulation, you have the right to:

  • access to personal data (Article 15); access must not adversely affect the rights of other persons,
  • rectification and completion of personal data (Article 16),
  • erasure, the right to be forgotten (Article 17): in respect of data that are no longer necessary, are processed unlawfully, are processed for direct marketing purposes, or after withdrawal of consent where no other legal basis exists; this right does not apply where the data are necessary for the establishment and exercise of legal claims or for compliance with legal obligations,
  • restriction of processing (Article 18): while inaccurate data are being rectified, while an objection is being assessed, where you contest erasure and request restriction instead, or where you need the data for the exercise of a legal claim,
  • data portability in respect of data processed by automated means on the basis of consent or a contract (Article 20),
  • object to processing (Article 21): where processing is based on legitimate interest; if you object to direct marketing, we will cease the processing immediately,
  • withdraw your consent at any time where consent is the legal basis; withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The Controller may restrict the scope of these rights pursuant to Article 23 of the EU Regulation where this is necessary to protect the rights of the data subject or of other persons and to enforce civil-law claims.

You may exercise your rights by e-mail using the contact stated above. We will respond within one month at the latest.

Complaint to the Supervisory Authority

You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

Automated Decision-Making

The Controller does not carry out automated individual decision-making or profiling producing legal effects concerning the data subject.

Version effective from 11 July 2026.