Privacy notice

Information for website visitors and EQUPO clients · version 4 October 2026

This notice explains how we use data when you visit equpo.sk, register for Private Clients, contact us about property or subscribe to offers. Registration and access to projects do not depend on consent to marketing or analytics.

Who is responsible for your data

What data we use and why

• Client account and sign-in. We use your first and last name, email, registration date, account status and sign-in records to provide your free account and access to projects. Legal basis: performance of the contract for the requested service, Article 6(1)(b) GDPR.
• Property enquiries. We use contact details, correspondence, project information and preferences you provide to answer an enquiry, arrange a viewing and take steps at your request before a contract, under Article 6(1)(b) GDPR. General correspondence and internal contact organisation are based on our legitimate interest in answering questions and managing client relationships, Article 6(1)(f) GDPR. We may keep internal notes, an assigned project and a manually assigned client category.
• Offers and newsletter. We use your email and name to send selected off-market offers and updates only with voluntary consent, Article 6(1)(a) GDPR. We also record delivery status, consent and withdrawal. A contact appearing in a public register or being imported into a database does not constitute marketing consent.
• Website analytics. With consent, we measure pages, selected actions, traffic source, approximate country and device category using a random visit identifier. We do not link it to your name or account. Legal basis: consent, Article 6(1)(a) GDPR. See Cookies below.
• Security and legal obligations. Technical request data, the IP address in transit, derived identifiers and sign-in records help protect the website and accounts against abuse, based on legitimate interest under Article 6(1)(f) GDPR. Records of marketing consent and withdrawal are kept to meet legal obligations under section 116 of Slovak Act 452/2021 and Article 6(1)(c) GDPR. Records necessary for a particular legal dispute may be retained based on legitimate interest in defending legal claims.

We primarily receive data from you and through website use. Where a contact comes from another source, we separately explain the source and categories of data within the deadlines of Article 14 GDPR, including at first contact if that occurs before one month.

How long we keep data

• Account: while the account and service remain in place. After closure, we retain only records necessary for a legal obligation or a specific legal claim.
• Enquiries and client correspondence: during handling of the enquiry and the related business relationship, while necessary for that purpose. We review continued necessity; unwithdrawn consent does not mean unlimited retention.
• Marketing: until consent is withdrawn or the purpose ends, whichever occurs first. Unsubscribing stops marketing without automatically closing your account.
• Evidence of marketing consent and withdrawal confirmation: during subscription and for at least four years after withdrawal under section 116 of Act 452/2021. Any further retention is assessed against a specific legal obligation or ongoing legal claim. These records are not used for further advertising.
• Analytics: reports cover the last 90 days; older events are deleted when new analytics arrives or a report opens. A sign-in link lasts 15 minutes and a session up to 7 days. Expired client authentication records are cleaned on subsequent sign-in requests. Form protection records are cleaned during use.

Who may process your data

Access is limited to authorised people at EQUPO Retail s.r.o. and providers to the extent needed for technical services: ChatGPT Sites/OpenAI for website operation, Cloudflare infrastructure for hosting, database, files and security, Resend for sign-in and other emails, and Websupport for our business mailbox. We do not sell data. We disclose it to public authorities where required by law.

These services may involve processing outside the European Economic Area, particularly in the USA. Resend describes primary processing in the USA and European Commission standard contractual clauses in its terms. Cloudflare addresses international transfers through applicable adequacy decisions and standard contractual clauses. Contact weiss@equpo.sk for information on applicable safeguards and how to obtain a copy.

Resend – Data Processing Addendum · Cloudflare – Data Processing Addendum

Your rights and withdrawal of consent

Subject to GDPR conditions, you have rights of access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your situation; you may object to direct marketing at any time without giving a reason.

Withdraw marketing consent using the email unsubscribe link, the unsubscribe form on Private Clients or by writing to weiss@equpo.sk. Change analytics consent using Cookie settings in the footer. Withdrawal is free and does not affect the lawfulness of earlier processing.

Request access, correction, a data export or account closure at weiss@equpo.sk. We may reasonably verify your identity. We respond without undue delay and within one month. For complex or numerous requests, this may be extended by two months; we explain the reason within the first month.

If you believe your rights have been infringed, you may complain to the Slovak Office for Personal Data Protection or seek a judicial remedy. How to complain.

Voluntary choices and decision-making

Registration is voluntary. First name, last name and email are required in the registration form; without them we cannot create an account. Phone is optional. You may refuse marketing and analytics without losing access. We do not make decisions based solely on automated processing, including profiling, with legal or similarly significant effects. Internal client categorisation is performed by people.

Cookies and browser storage