Privacy Policy

Last updated: 14 July 2026

1. Who we are (the controller)

The controller of your personal data is Binovatix s. r. o., registered office Šustekova 3697/49, 851 04 Bratislava-Petržalka, Slovakia, Company No. 55675298, registered in the Commercial Register of the Bratislava III City Court, section Sro, insert No. 171916/B. Contact for data protection: privacy@pavedstack.com.

No Data Protection Officer is appointed — we do not meet the conditions for mandatory designation under Art. 37 GDPR. Your queries are handled directly by the managing director at the contact above.

As we are established in the EU, the EU General Data Protection Regulation (GDPR) applies regardless of where you are located.

2. What we process, why, and on what legal basis

Purpose	Data	Legal basis	Retention
Sending the requested PDFs (Executive Brief, Technical Deep Dive, Paved Stack Diagrams) and handling your request	first name, work email, role, company size, country, traffic source (UTM), time of submission	handling your request (steps at your request) — Art. 6(1)(b) GDPR	for the time needed to handle the request, max. 24 months
Sending occasional product updates (marketing)	first name, work email	consent — Art. 6(1)(a) GDPR (optional checkbox on the form)	until consent is withdrawn, max. 24 months
Operating and securing the website (incl. spam/rate-limiting)	IP address, technical logs	legitimate interest — Art. 6(1)(f) GDPR	max. 12 months

Providing your data is voluntary; without your first name and work email we cannot send the PDFs. Your IP address is used only transiently for spam/rate-limiting and is not stored together with your lead data.

3. Recipients (processors)

We do not share or sell data for third-party marketing. We use trusted providers acting on our behalf under an Art. 28 GDPR agreement:

Websupport, s. r. o. (SK) — web hosting and sending emails from the form;
Google Ireland Limited (IE) — email mailbox (Google Workspace).

4. Transfers to third countries

Some providers may process data in the USA. Such transfers are safeguarded by the European Commission adequacy decision — the EU-U.S. Data Privacy Framework (10 July 2023) — or by Standard Contractual Clauses (SCC) under Art. 46 GDPR.

5. Cookies and analytics

Essential cookies — required for the website to function; always set (the site does not work without them).
Analytics cookies (Google Analytics 4) — set only with your consent via the cookie banner. They are blocked by default (Google Consent Mode: analytics_storage = denied). You can withdraw consent at any time via the Cookie settings link in the footer; if you decline or withdraw consent, analytics cookies (_ga, _gid) are actively deleted.

After you grant analytics consent, we also measure on-site interactions — e.g. form steps (including the chosen enquiry type). We do not send your name, email or free-text form input to Google Analytics 4.

6. Your rights

As a data subject you have the right:

of access to your data (Art. 15);
to rectification of inaccurate data (Art. 16);
to erasure ("right to be forgotten", Art. 17);
to restriction of processing (Art. 18);
to data portability (Art. 20);
to object to processing based on legitimate interest (Art. 21);
to withdraw consent at any time (Art. 7(3)) — withdrawal does not affect the lawfulness of processing before withdrawal;
to lodge a complaint with the supervisory authority (Art. 77).

Exercise your rights or unsubscribe by email at privacy@pavedstack.com. We will respond usually within a few business days, and within one month at the latest.

We do not carry out automated decision-making or profiling with legal effects under Art. 22 GDPR.

7. Supervisory authority

Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovakia, statny.dozor@pdp.gov.sk, dataprotection.gov.sk.

The current version of this policy is always available on this page.