Privacy Policy

Effective from: 01. 01. 2026

Scope of This Privacy Policy

This Privacy Policy describes how personal data is processed through the website normcnc.eu, particularly in connection with contact and quotation forms, uploaded files, inquiries and communication with potential customers and business partners.

Controller Identification and Contact Details

Your personal data is processed by:

Company name: NORM s. r. o.

Address: Papradno 802, Slovakia

Company ID: 54466181

Tax ID: 2121689328

VAT ID: SK2121689328

Email: info@normcnc.eu

Phone: +421 944 167 097

Personal Data We Process

We primarily process personal data that you provide directly to us when submitting an inquiry or contacting us. This may include your name, company name, email address, telephone number, message content and files or technical documentation uploaded through the contact form. When using the website, certain technical data may also be processed, such as IP address, server logs and information about your device or browser, mainly for website security and proper operation.

Purposes and Legal Bases for Processing

• Inquiries and quotations – processing requests submitted through the contact form, including technical drawings, 3D models and related project documentation. Legal basis: steps taken prior to entering into a contract, performance of a contract or legitimate interest.
• Business communication – communication by email or telephone regarding inquiries, quotations, orders and cooperation. Legal basis: pre-contractual measures, performance of a contract or legitimate interest.
• Order processing and contract performance – manufacturing, machining and delivery of ordered parts or services. Legal basis: performance of a contract.
• Accounting and legal obligations – issuing accounting documents and maintaining legally required records. Legal basis: compliance with a legal obligation.
• Website operation and security – technical operation of the website, prevention of misuse and ensuring security. Legal basis: legitimate interest or consent in the case of optional cookies.
• Handling data protection requests – processing requests relating to the exercise of rights under applicable data protection legislation. Legal basis: compliance with a legal obligation.

Recipients and Processors

Personal data may be made available to trusted service providers necessary for the operation of our website and business, such as web hosting providers, website administrators, email service providers and other technical service providers. Personal data may also be disclosed to public authorities where required by law.

Transfers Outside the European Economic Area

If services provided by third parties involve the transfer of personal data outside the European Union or European Economic Area, such transfers will only take place in accordance with the requirements of applicable data protection legislation and with appropriate safeguards in place.

Automated Decision-Making and Profiling

We do not use your personal data for automated individual decision-making, including profiling.

Data Retention

• Inquiries and related communication are retained only for as long as necessary to process the inquiry and manage the resulting business relationship.
• Contracts, invoices and accounting documents are retained for the period required by applicable legislation.
• Technical and security logs are retained only for the period necessary to ensure website security and proper operation.
• Records relating to data protection requests are retained for the period necessary to demonstrate compliance with applicable legal obligations.

Your Rights

• Right of access – you may request confirmation as to whether your personal data is being processed and request access to that data.
• Right to rectification – you may request correction of inaccurate data or completion of incomplete data.
• Right to erasure – you may request deletion of your personal data where the legal requirements are met.
• Right to restriction of processing – you may request that the processing of your personal data be temporarily restricted where applicable.
• Right to data portability – where processing is based on consent or a contract and carried out by automated means, you may request your data in a structured, commonly used and machine-readable format.
• Right to object – you may object to processing based on legitimate interests.
• Right to lodge a complaint – if you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

How to Exercise Your Rights

You may exercise your rights by contacting us at info@normcnc.eu. Where necessary, we may request reasonable verification of your identity before processing your request.

Supervisory Authority

The competent supervisory authority in Slovakia is the Office for Personal Data Protection of the Slovak Republic.