Privacy Policy

This Privacy Policy is intended for visitors of the website www.energysky.sk who contact us via the contact form, email, or telephone.

1. Data Controller

The controller responsible for the processing of personal data is:

ENERGYSUN s. r. o.
Horná 37
974 01 Banská Bystrica
Slovak Republic

Company ID (IČO): 56 007 311
VAT ID: SK2122160128

E-mail: info@energysky.sk
Phone: +421 915 979 060

(hereinafter referred to as the “Controller”, “we”, “us”, or “our”).

2. What Personal Data We Process

When you submit a contact form or otherwise contact us, we may process the following personal data:

  • First and last name;
  • E-mail address;
  • Telephone number;
  • Company name (if provided);
  • Information about the product or service you are interested in;
  • The content of your message and any additional information you voluntarily provide;
  • The date and time your message was submitted;
  • Basic technical information required for the secure submission of the contact form, such as your IP address and data related to spam and abuse prevention.

Please do not send sensitive personal data or any information that is not necessary for processing your request through the contact form.

3. Purposes and Legal Bases for Processing

Responding to General Enquiries

We process your personal data in order to receive, review, and respond to your enquiry or other request.

The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR).

Our legitimate interest is to communicate effectively with prospective customers, clients, business partners, and other individuals, to provide requested information, and to maintain appropriate business communication.

Requests for Quotations, Products, Services or Cooperation

If you contact us to request a quotation, order a product or service, request technical support, or initiate business cooperation, we process your personal data in order to take steps prior to entering into a contract or for the performance of a contract pursuant to Article 6(1)(b) GDPR.

Protection of Legal Claims

Where necessary, we may retain communication for the purpose of establishing, exercising, or defending legal claims.

The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR in protecting our legal rights and maintaining evidence of communication.

Direct Marketing

Personal data submitted through the contact form will not be used to send newsletters or general marketing communications unless we have a separate legal basis for doing so.

If you separately subscribe to receive marketing communications, you will be provided with specific information regarding such processing at the time of subscription. You may withdraw your consent at any time.

4. Is Providing Personal Data Mandatory?

Providing personal data through the contact form is voluntary.

However, if you do not provide the required information, particularly your contact details and the content of your request, we may not be able to process your enquiry or respond to you.

We only request personal data that is reasonably necessary to handle your request.

5. Data Retention

Personal data obtained through general communication is retained for the duration necessary to process your request and for a maximum of 12 months following our last substantive communication, unless a longer retention period is required.

If the communication results in the conclusion of a contract or relates to an existing contractual relationship, the data may be retained as part of contractual, service, accounting, or commercial documentation for the periods required by applicable legislation.

Where necessary for the establishment, exercise, or defence of legal claims, personal data may be retained for the applicable limitation period and the duration of any related proceedings.

After the applicable retention period has expired, your personal data will be securely deleted or anonymised.

6. Who May Access Your Personal Data

Your personal data may be accessed only by authorised persons and service providers who require access in order to perform their duties, including:

  • authorised employees and contractors of the Controller;
  • web hosting providers;
  • website administrators and developers;
  • e-mail and cloud service providers;
  • providers of anti-spam and contact form security services;
  • IT support providers;
  • legal, accounting, and other professional advisers where necessary;
  • public authorities where disclosure is required by law.

Where third parties process personal data on our behalf, we ensure that appropriate data processing agreements are in place and require them to implement adequate security measures.

7. Transfers of Personal Data Outside the European Economic Area

We primarily use service providers that process personal data within the European Union or the European Economic Area.

Where a technology provider transfers personal data outside the EEA, such transfer will only take place in accordance with the GDPR, including on the basis of an adequacy decision of the European Commission or appropriate safeguards such as the Standard Contractual Clauses.

Further information regarding international data transfers is available upon request.

8. Automated Decision-Making

We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects in relation to enquiries submitted through our contact form.

Our contact form may use automated technical tools to detect spam, fraud, or automated attacks. Such measures are implemented solely to protect the security of our website and do not constitute automated decision-making affecting your rights.

9. Your Rights

Subject to the conditions set out in the GDPR, you have the right to:

  • obtain confirmation as to whether we process your personal data and request access to it;
  • request correction of inaccurate or incomplete personal data;
  • request the erasure of your personal data;
  • request restriction of processing;
  • object to processing based on our legitimate interests;
  • receive your personal data in a structured, commonly used, and machine-readable format where applicable;
  • withdraw your consent at any time where processing is based on consent;
  • lodge a complaint with the supervisory authority responsible for data protection.

Where you object to processing based on legitimate interests, we will cease processing your personal data unless we demonstrate compelling legitimate grounds for continuing the processing or where processing is necessary for the establishment, exercise, or defence of legal claims.

10. How to Exercise Your Rights

You may exercise your rights by contacting us:
By e-mail: info@energysky.sk

By post:

ENERGYSUN s. r. o.
Horná 37
974 01 Banská Bystrica
Slovak Republic

We will respond to your request without undue delay and, in any event, within one month of receipt. This period may be extended where permitted by law, in which case you will be informed accordingly.

Where we have reasonable doubts regarding your identity, we may request additional information necessary to verify your identity.

11. Supervisory Authority

If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

For the Slovak Republic, the competent authority is:

Office for Personal Data Protection of the Slovak Republic

Current contact details are available on the authority’s official website.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time, particularly where changes occur in our processing activities, service providers, or applicable legal requirements.

Last updated: 22.7.2026