Denva / Privacy
GDPR · in effect from 15. 5. 2026

Protection of
privacy.

We process personal data only to the extent we strictly need it, in order to handle your inquiry, perform the contract, issue invoices, and run the website. Here you will find what, why, how long, and what rights you have toward us.

1. Controller

The controller of personal data is:

Denva s. r. o.
Ekoosada 235, 925 22 Veľké Úľany, Slovak Republic
IČO: 55 376 681 · DIČ: 2121975273 · IČ DPH: SK2121975273

We have not appointed a data protection officer (DPO); for all GDPR matters, contact us directly by email.

2. What data we process

Depending on the interaction, we may process the following categories of data:

Identification
name, surname, company name, company ID / tax ID (IČO/DIČ) if it is B2B
Contact
email, phone, address, website URL
Content of communication
form message, attachments, briefs, supporting materials
Technical
IP address, user agent, timestamps, browser language, anonymized location
Cookies
identifiers for traffic measurement and website operation

Sensitive data (health, religion, political opinions, etc.) we do not process.

3. Purposes and legal basis

Each purpose has its own legal basis and its own retention period:

Contact form and communication

Processing your inquiry, preparing a price quote, and subsequent communication.

Legal basis
legitimate interest (Art. 6(1)(f) GDPR), handling the pre-contractual relationship
Retention period
3 years from the last contact, or until consent is withdrawn

Contract performance and invoicing

Preparing the contract, invoicing, accounting, and tax obligations.

Legal basis
contract performance (Art. 6(1)(b) GDPR) + legal obligation (Art. 6(1)(c) GDPR)
Retention period
10 years under the Accounting Act

Web analytics and measurement

Anonymized traffic, sources, on-site behavior, solely to improve content and UX.

Legal basis
consent (Art. 6(1)(a) GDPR), withdrawable at any time via the cookie bar
Retention period
14 months (Google Analytics 4 default)

Website operation and security

Access logging, protection against attacks, backups, availability monitoring.

Legal basis
legitimate interest (Art. 6(1)(f) GDPR), information system security
Retention period
maximum 12 months (server logs)
4. Whom we disclose data to

We do not provide personal data to third parties for marketing, nor do we sell it. To the necessary extent, however, it is processed by our processors, with whom we have concluded contracts under Art. 28 GDPR:

Hosting & VPS provider
storing website content and database EU
Google LLC, Analytics, Tag Manager, Search Console
web analytics and measurement USA (Standard Contractual Clauses)
Email provider (SMTP / mailbox)
delivering communication from the form EU
Accounting firm
bookkeeping Slovakia

For transfers to third countries (outside the EU), we use the Standard Contractual Clauses approved by the European Commission (SCCs).

5. Cookies and analytics

The website uses technical cookies necessary for its operation and, with your consent, analytics cookies (Google Analytics 4, Google Tag Manager). The analytics are anonymized: we do not store full IP addresses and we do not link the data to your identity.

You grant consent to analytics via the cookie bar on your first visit, and you can withdraw it at any time by clearing your browser cookies or by adjusting your settings again in the cookie bar.

You can disable cookies at any time in your browser settings, but some website features may then not work correctly.

6. Your rights

As a data subject, you have the following rights under the GDPR (Chapter III):

Right of access
Request confirmation of whether we process your data, and a copy of it.
Right to rectification
Have inaccurate data corrected or incomplete data completed.
Right to erasure
The "right to be forgotten", especially when the data is no longer needed.
Right to restriction
Suspend the processing of data in specifically defined cases.
Right to data portability
Receive your data in a structured format (JSON/CSV).
Right to object
Object to the processing of data processed on the basis of legitimate interest.
Withdrawal of consent
Withdraw consent at any time, for both marketing and analytics.
Complaint to the supervisory authority
File a complaint with the Slovak Data Protection Authority (uoou.sk).

Send any request to exercise these rights to hello@denva.studio. We will respond within 30 days of receipt (in more complex cases, with the option to extend by another two months, of which we will inform you in advance).

If you believe that we process data in breach of the law, you can file a complaint with the Slovak Data Protection Authority.

7. Security and changes

To protect the data, we use appropriate technical and organizational measures: HTTPS across the entire website, backups, monitoring, and restricted access to systems only for persons who need it to perform their work. We cannot entirely eliminate risk, but we minimize its likelihood.

We may update this policy; we will always publish the new version on this page with its effective date. Contact details for GDPR questions: hello@denva.studio.

Version 1.0 · in effect from 15. 5. 2026