Privacy Policy

Data Controller

• This website and the related online services are operated by POLLÁK ŠAĽA s.r.o., Diakovská 6245/9C, 927 01 Šaľa, Slovakia.
• For privacy questions or data requests, contact us at pollaksala@pollaksala.sk or through the public contact page.

Public website usage

• When you browse the public website, we process technical request data needed to deliver pages, keep the service secure, remember permitted choices, and display the correct language version.
• Public pages may load technical assets required for the proper operation and display of the website.

Contact form and inquiries

• When you submit the contact form, we process the message, email address, company, contact person, country, selected context, and related request details so we can respond and manage follow-up communication.
• The form records that you acknowledged reading this Privacy Policy, together with the time and source of that acknowledgement. Contact form messages are not processed by AI.
• If you contact a listed representative, dealer, department, phone number, or email address directly, the recipient you choose receives the information you send.

Client Zone

• The Client Zone is a restricted area for invited users linked to a client/company account and, where applicable, assigned machines.
• We process account identity, email, role, client relationship, access status, and machine access information so the correct user can access the correct restricted content.

OTP login, invitations, and sessions

• Login and invitation flows process your email address, one-time code challenge, invite token where applicable, role/client assignment, session data, and security records needed to verify access.
• Authenticated areas use necessary session cookies and access checks. Login challenges are time-limited and may be retained as security records for abuse prevention and audit purposes.

Support and service requests

• Client Zone support, service, spare-parts, and other requests may include request type, selected machine, message text, user/client identifiers, and contact details.
• These records are used to handle the request, assign follow-up, maintain service history, and protect the account from misuse.

Restricted manuals and machine documentation

• For restricted manuals and machine documentation, we process the user, client, machine, manual version, access status, and download event needed to authorize access.
• Manual download security logs may include IP address, user agent, request identifier, timestamp, and whether access succeeded, failed, or was denied.

AI-powered search and content support

• The public search may send your search query, language, and technical context to OpenAI to interpret intent, create embeddings, and return more relevant results. Please avoid entering unnecessary personal data into search fields.
• OpenAI may also be used by authorized administrators for content translation, search indexing, summaries, or similar content-support tasks. Contact requests are not sent to OpenAI by the contact form.

Transactional emails

• We send necessary emails such as contact confirmations, internal inquiry notifications, OTP login codes, invitation emails, and access-related messages.
• These emails may include the recipient address, message content needed for the purpose, delivery metadata, and provider identifiers returned by the email service.

Analytics

• Google Analytics, Vercel Analytics, and Hotjar/Contentsquare are blocked by default and load only after analytics consent on eligible public pages.
• Analytics tools are not active in admin, authentication, invite, API, or Client Zone areas. Sensitive public contact and search areas are marked to prevent Hotjar capture where the current service configuration supports it.

Cookies and browser storage

• Necessary cookies and storage support security, authentication, consent preferences, and contact-form anti-abuse checks. Optional analytics cookies/storage are used only after analytics consent.
• The Cookie Policy explains the current categories, services, storage names where known, and how to change or withdraw analytics consent.

Processors and recipients

• We use the processors and recipients listed below to operate the website, deliver email, store data, protect forms, provide analytics after consent, support AI search, and serve assets.
• Access is limited to authorized persons and providers that need the data for the described purposes. External representatives or dealers are independent recipients when you contact them directly.

International transfers

• Some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate contractual and technical safeguards such as data processing agreements and standard contractual clauses where required.
• The exact transfer path can depend on provider configuration, routing, support, and infrastructure availability.

Security

• We use access controls, role checks, OTP-based login, private manual storage, no-store headers for protected areas, consent controls, anti-spam checks, and audit logs to protect the service.
• No online service is risk-free, but appropriate technical and organisational measures are implemented according to the sensitivity of the processed data.

Children’s data

• This website and Client Zone are intended for business, customer, and professional use and are not directed at children.
• If we learn that children’s personal data was provided without an appropriate reason or authority, we will restrict or delete it where required.

Automated decision-making and profiling

• The service does not make decisions with legal or similarly significant effects solely by automated means.
• Analytics and AI-powered search are used for measurement, relevance, and content support, not for eligibility decisions, credit decisions, employment decisions, or legal profiling.

Processors and recipients

This table lists the services used by this project, their purpose, data categories, and role.

Retention overview

Retention depends on the data type, business context, security need, and legal obligations.