Privacy and cookie policy

This policy explains how APIS spol. s r.o. processes the personal data of visitors to this website and which cookies we use. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection.

Controller

APIS spol. s r.o. Kynceľovská cesta 9/12, 974 01 Banská Bystrica, Slovakia Company ID (IČO): 30222575 · Tax ID (DIČ): 2020451807 · VAT ID: SK2020451807 E-mail: obchod@apis.sk · Tel.: +421 905 796 728

What data we process

• Contact form data: your first and last name, e-mail, phone number, number of employees, message, the product you are interested in, how you heard about us and your consent to processing. Together with the enquiry we store the page you sent the form from, campaign parameters (utm_source, utm_medium, utm_campaign, utm_content) and the Google Ads click ID (gclid, gbraid, wbraid) if you came from an ad. The enquiry is stored in our content management system and e-mailed to our sales team. Campaign parameters are remembered only while the browser window is open (session storage).
• Analytics and advertising data: collected through analytics and marketing cookies (Google Analytics, Google Ads, Meta Pixel), and only if you grant your consent. See the Cookies section below.

Purpose and legal basis for processing

• Handling your enquiry: to take steps prior to entering into a contract (Art. 6(1)(b) GDPR).
• Campaign data in the enquiry: to evaluate which ad the enquiry came from, based on our legitimate interest (Art. 6(1)(f) GDPR).
• Analytics and advertising: solely on the basis of the consent you grant through the cookie banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before it.

Retention period

We keep enquiry data for as long as is necessary to handle it and for the follow-up business communication, or for the duration of the business relationship, and thereafter in line with statutory retention periods. Cookie lifetimes are listed below.

Recipients and data transfers

We do not sell your data. For analytics and advertising we use Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for Google Analytics and Google Ads, and Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) for Meta Pixel, only with your cookie consent. Google and Meta may also process data in the USA. Such transfers rely on the European Commission adequacy decision for the EU-US Data Privacy Framework, under which Google LLC and Meta Platforms, Inc. are certified, and on standard contractual clauses. More in the Google privacy policy and the Meta privacy policy.

Cookies

Cookies are small files that the website stores in your browser. We also use the browser's local storage. We use two categories.

Essential cookies

These ensure the basic functioning of the site and protect forms. They are always active and are based on our legitimate interest (Art. 6(1)(f) GDPR):

• apis-cms-session: visit session, 2 hours
• XSRF-TOKEN: protects forms against misuse, 2 hours
• apis_locale: remembers the language version of the site, 1 year
• apis_cookie_consent (local storage): your cookie banner choice, until you change it or clear your browser data

Analytics and marketing cookies

These are set only after your consent. On your first visit the "Cookie consent" banner offers "Accept all" and "Essential only". Until you consent, Google and Meta store no cookies in your browser. In this mode (Consent Mode) Google may only receive anonymous signals without cookies and without a visitor identifier.

• Google Analytics 4 (Google Ireland Limited): measures site traffic, such as pages viewed, traffic source, device type and contact form submissions. Cookies _ga and _ga_18ME0RP4TX, 400 days.
• Google Ads (Google Ireland Limited): conversion measurement, i.e. whether a visit from a Google ad led to an enquiry. If you come from an ad, the page address contains a click ID (gclid, gbraid or wbraid). After your consent we store it in the cookie apis_ads_click (90 days), and Google stores it in the cookie _gcl_aw (90 days) and in local storage (_gcl_ls). When you submit a form we also use enhanced conversions: your browser hashes your e-mail address and phone number with the one-way SHA-256 function before sending them to Google, and Google uses them to match the enquiry to the ad click. Enhanced conversions are sent only if you have consented. Google may also use this data to personalise ads.
• Meta Pixel (Meta Platforms Ireland Limited): measures the effectiveness of ads on Facebook and Instagram, i.e. page views (PageView) and enquiries (Lead). Cookies _fbp (90 days) and _fbc (90 days, if you come from a Meta ad). Meta may also use this data to optimise and target ads.

You can change or withdraw your consent at any time via the Cookie settings link in the page footer, or by clearing the cookies in your browser.

Your rights

In connection with the processing of personal data, you have the right to:

• access and rectify your data,
• erasure ("the right to be forgotten") and restriction of processing,
• data portability,
• object to processing and withdraw a granted consent at any time,
• lodge a complaint with the supervisory authority.

You can exercise your rights by e-mail at obchod@apis.sk.

Supervisory authority

Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.