Privacy Policy
Last updated: 10 November 2026
Protecting your personal data is important to us. This Privacy Policy explains what personal data we collect when you visit or use www.alaco.sk, why and how we process it, how long we retain it, and what rights you have regarding your personal data.
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and the applicable legislation of the Slovak Republic.
1. Data Controller
The controller responsible for processing your personal data is:
ALACO, s.r.o.
Registered office: Priemyselná 873, 966 01 Hliník nad Hronom, Slovak Republic
Company registration number: 36 045 047
VAT identification number: SK2020064838
Commercial Register: District Court Banská Bystrica, Section Sro, File No. 6779/S
Email: [email protected]
Telephone: +421 45 676 24 55
If you have any questions about the processing of your personal data or wish to exercise your rights, please contact us using the email address provided above.
2. Personal Data We Process and Why
We process personal data only to the extent necessary to provide our services, communicate with customers and job applicants, ensure the operation and security of our website, and comply with legal obligations.
2.1 Contact Form
When you contact us using our contact form, we may process the following information:
Name
Email address
Message content
Purpose of processing: Responding to your enquiry or request and maintaining related communication.
Legal basis: Article 6(1)(b) GDPR, where communication involves taking steps at your request before entering into a contract, or Article 6(1)(f) GDPR, where processing is necessary for our legitimate interest in handling general enquiries.
2.2 Careers and Job Applications
When applying for a position through the Careers section of our website, we may process:
Name
Email address
Telephone number
CV in PDF, DOC or DOCX format
Cover message
Additional information voluntarily included in your application documents
Purpose of processing: Assessing your application, communicating during the recruitment process, and evaluating the possibility of establishing an employment relationship.
Legal basis: Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract.
We use the submitted information for the relevant recruitment process. Any further retention for future employment opportunities must have a separate legal basis.
2.3 Project Enquiries and Quotation Requests
When submitting a project enquiry, we may process the following information.
Contact details:
Name
Email address
Company
Telephone number
Project information:
Project description
Technical drawings and revision information
Required quantities
Materials and dimensions
Surface treatment specifications
Testing and quality control requirements
Expected project timeline
Current project stage
Attached files in PDF, JPG or PNG format (maximum of 3 files)
Purpose of processing: Evaluating technical requirements, preparing quotations, and communicating about potential business cooperation.
Legal basis: Article 6(1)(b) GDPR, where processing involves pre-contractual steps requested by an individual, or Article 6(1)(f) GDPR, where processing is necessary for our legitimate interests in conducting business communications.
We use the information and documents submitted through this form to assess and respond to your project enquiry and for related communication.
2.4 Technical and Operational Data
When you visit our website, certain technical information may be collected automatically, including:
IP address
Date and time of the request
Requested URL
Browser type and operating system
Technical information related to server requests
Purpose of processing: Ensuring website functionality and security, diagnosing technical issues, preventing unauthorised access, and protecting our services against misuse.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in maintaining a secure and reliable website.
2.5 Spam Protection
We use technical security mechanisms, including Google reCAPTCHA v3 and a hidden form field (honeypot), to protect our forms against automated submissions and misuse.
Google reCAPTCHA may process technical information such as IP addresses, device and browser information, and data relating to interactions with the website to assess the risk of automated or malicious activity.
Purpose of processing: Protecting website forms against spam and automated misuse.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in maintaining website security and preventing abuse.
3. Recipients of Personal Data
Your personal data may be disclosed to trusted service providers where necessary for the technical operation of our website or related business activities.
These recipients may include:
Web hosting, server and email service providers – website operation, message processing and delivery.
Google LLC and relevant Google group companies – Google reCAPTCHA, Google Tag Manager, Google Analytics, Google Fonts and Google Maps.
Cloudflare and CDN providers – delivery of external technical resources, such as Font Awesome icons through cdnjs.
External legal and accounting advisers – where necessary to comply with legal obligations or protect our legitimate rights.
Public authorities – where disclosure is required by applicable law.
We take appropriate measures to protect personal data when working with external service providers.
4. Analytics and Third-Party Services
Our website may use analytics tools and external services to support its functionality, measure website traffic and improve the user experience.
4.1 Google Tag Manager and Google Analytics
We use Google Tag Manager (container GTM-NQPQHP67) to manage analytics and marketing tags.
Through this tool, we may manage services such as Google Analytics and marketing measurement technologies.
Analytics and marketing technologies that require consent are activated only after you have given your consent.
You may change your preferences at any time by clicking the cookie icon in the bottom corner of the website and selecting “Manage settings”.
Before consent is granted, the relevant optional categories are set to denied by default.
4.2 External Technical Services
Our website may load content or technical resources from third-party providers:
Google Fonts – displaying website fonts.
cdnjs (Cloudflare) – loading icons and technical libraries.
Google Maps – displaying an interactive map on the Contact page.
When external content is loaded, technical information, particularly your IP address, may be transmitted to the relevant service provider.
4.3 Social Media
Our website may contain links to external social media platforms, including:
Facebook
Instagram
YouTube
Where these are standard hyperlinks, merely displaying them does not automatically establish a connection to the respective platform. After clicking a link, your use of the external website is governed by that provider's privacy policy and terms.
4.4 International Data Transfers
Some third-party service providers may process personal data outside the European Economic Area (EEA), particularly in the United States.
Any such transfers must comply with the GDPR and may be based on an applicable European Commission adequacy decision, valid certification under the EU–US Data Privacy Framework, or the European Commission's Standard Contractual Clauses, depending on the provider and circumstances of the transfer.
5. Cookies
Our website uses cookies and related technologies to ensure essential functionality, protect forms, and, where applicable, analyse website traffic or measure marketing campaigns.
Cookies are small text files stored on your device when you visit a website.
5.1 Essential Cookies
These cookies are necessary for the proper and secure operation of our website.
They may include:
cc_cookie – stores your cookie consent preferences for approximately 182 days.
laravel_session – manages your website session.
XSRF-TOKEN – protects forms and requests against cross-site request forgery (CSRF).
Purpose: Essential website functionality, security, session management and storage of consent preferences.
Consent: Not required where the technologies are strictly necessary to provide the service requested by the user.
5.2 Analytics Cookies
Analytics cookies help us collect statistical information about website traffic and usage.
Examples may include:
_ga
ga*
These cookies may be used by Google Analytics.
Purpose: Measuring website traffic, analysing website usage and improving our content and functionality.
Consent: Required before use.
5.3 Marketing Cookies
Marketing cookies may be used to measure the effectiveness of advertising campaigns and display relevant advertisements.
They may be associated with services such as Google Ads or remarketing technologies managed through Google Tag Manager.
Purpose: Evaluating marketing campaigns, measuring conversions and, where applicable, remarketing.
Consent: Required before use.
5.4 Managing and Withdrawing Consent
When visiting our website, you can choose which categories of cookies you wish to allow.
You can change your preferences at any time by clicking the cookie icon in the bottom corner of the website and selecting “Manage settings”.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
After withdrawal, the relevant optional technologies will no longer be used, and cookies that our website can manage may be deleted.
You can also manage or delete cookies through your web browser settings.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or for any additional period required by applicable law.
The retention period depends on the type of data and the purpose of processing.
Contact form submissions: For the time necessary to handle the enquiry and subsequently for a period justified by the purpose of communication or the protection of legal claims.
CVs and job applicant data: During the recruitment process and afterwards only where justified by an applicable legal basis and defined retention period.
Project enquiries and technical documents: During quotation preparation and related business communication, and potentially throughout the subsequent business relationship.
Technical and security logs: For the period necessary to ensure website operation, diagnostics and security.
Accounting and tax documents: For the periods prescribed by applicable law.
Cookies: According to their purpose, configuration and expiration period.
After the applicable retention period expires, personal data is securely deleted or anonymised unless another lawful reason for continued processing exists.
7. Your Data Protection Rights
Under the GDPR, you have the following rights, depending on the circumstances and the applicable legal basis for processing.
7.1 Right of Access
You have the right to obtain confirmation as to whether we process your personal data and, where we do, to request access to that data and related information.
7.2 Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to request its correction or completion.
7.3 Right to Erasure
Under the conditions established by the GDPR, you may request the deletion of your personal data, for example where it is no longer necessary for the purposes for which it was collected.
7.4 Right to Restriction of Processing
In certain circumstances, you may request that we temporarily restrict the processing of your personal data.
7.5 Right to Data Portability
Where the legal requirements are met, you have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller.
7.6 Right to Object
You have the right to object to processing based on our legitimate interests for reasons relating to your particular situation.
7.7 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
7.8 Right to Lodge a Complaint
If you believe that your personal data has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.
Personal Data Protection Office of the Slovak Republic
Website: https://www.uoou.sk
7.9 Exercising Your Rights
You may exercise your rights by sending a request to:
We will respond to your request in accordance with the procedures and time limits established by the GDPR.
8. Automated Decision-Making and Profiling
We do not use personal data submitted through our contact, careers or project enquiry forms for automated individual decision-making, including profiling, that produces legal effects or similarly significantly affects you.
Automated security mechanisms used to protect our website are intended to assess the risk of spam and misuse.
9. Personal Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or unauthorised disclosure.
These measures include securing communication with our website, controlling access to personal data and protecting the technical systems we use.
Access to personal data is restricted to authorised personnel and service providers to the extent necessary to perform their duties.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, particularly in response to changes in legislation, technologies or our personal data processing practices.
The current version of this document is always available on our website.
The date of the latest update is indicated at the beginning of this document.