Privacy notice JVH — Just Vision + HTML Version effective from 21 September 2026. 1. Who is responsible The controller for enquiries and contracts is JVH, s. r. o., company ID 45433739, registered at Kazanská 25131/4, 821 06 Bratislava - mestská časť Podunajské Biskupice, Slovakia. Full business details are available on the contact page. Send data questions and requests to info@jvh.sk. This notice covers jvh.sk and related communication about our services. It does not automatically cover customers of stores we build for clients; our role and duties for those data depend on the client agreement. 2. What happens in the enquiry form Your name, email, project type and message are used in your browser to prepare enquiry text. The page does not itself send these details to a server or store them in cookies or local storage. You can open the prepared text in an email application or download a file. JVH receives the enquiry only when you send it yourself. Autofill, browsing history, downloaded files and your email application also depend on your device and providers. Before you fill in the form, the web server normally receives technical data needed to display the page; server logs are discussed below. Do not include passwords, payment-card details or sensitive information unnecessary for a quote. 3. Purposes, data and legal bases Processing activities | Purpose and data | Legal basis | Enquiries and quotes: name, email, optional phone number and your brief. | GDPR Article 6(1)(b) for steps at your request before your own contract. For company representatives or general correspondence, Article 6(1)(f): legitimate interests in handling communication and business contacts. | Project delivery, communication and handover: contact details, agreements and necessary project materials. | Article 6(1)(b) for an individual’s contract; Article 6(1)(f) for corporate contact persons. Limited to what is necessary. | Invoicing and statutory records: identification, billing details and payment records. | Article 6(1)(c): accounting, tax and other relevant legal obligations. | Complaints, rights requests and disputes: submissions, contract records and necessary evidence. | Article 6(1)(c) for legal obligations; Article 6(1)(f) for establishing, exercising or defending legal claims. | Website security and operation: connection details and any hosting access or error logs. | Article 6(1)(f): service availability, attack prevention and fault resolution. Hosting is provided by WebHouse. Technical records may contain the IP address, time, requested URL, connection status and error or security-event details. Legitimate-interest processing requires an assessment of necessity and proportionality against your rights. No newsletter, advertising profiling, remarketing or automated decision-making with legal or similarly significant effects is currently implemented. We do not automatically add enquiries to a marketing database. 4. How long data are kept Retention depends on the purpose and legal duties. The following rule for unsuccessful enquiries also applies to email correspondence: • Enquiries that do not lead to work: no more than 12 months after the last substantive communication, or earlier if no longer needed. • Contract and project records: during cooperation and afterwards only as needed for legal obligations or specific claims, considering applicable limitation periods. For a dispute, until final resolution and settlement; not indefinitely by default. • Accounting documents covered by section 35 of the Slovak Accounting Act: ten years following the relevant year, unless a specific duty requires longer retention. • Hosting and email technical records: as long as needed for diagnostics, security and resolving a specific event. The period depends on the record type and seriousness of the event, with rotation or deletion under WebHouse technical operating rules. Evidence needed for a specific legal claim may be retained until the claim is resolved. Data are deleted or anonymised after their purpose ends unless another specific lawful reason remains. Where data are included in a technical backup, they expire through regular overwriting under the relevant service settings. After the original purpose ends, they are not used for routine communication or marketing; completed erasure requests are taken into account if a backup is restored. 5. Who may have access The controller and authorised people have access only as needed for their tasks. Depending on the services actually used, recipients may include hosting, email, storage, backup and accounting providers, authorised subcontractors and legal advisers. Public authorities receive data only where legally justified. We do not sell personal data. • Hosting for jvh.sk and the info@jvh.sk mailbox are provided by WebHouse, s.r.o., managed through Setup.sk. • A subsequent project may require access by a project storage or backup provider, accounting service or agreed specialist subcontractor. The scope depends on the project; the enquiry form itself does not contact these services. Processing on behalf of JVH is subject to Article 28 GDPR terms. For hosting and email, see the WebHouse data processing terms, which also cover subprocessors and possible transfers outside the EEA. This website has no analytics or advertising services sending data to such providers. If a specific project requires an additional service involving a transfer outside the EEA, we will provide the country and applicable Chapter V GDPR safeguard before using it. You can request information about recipients of your data and a copy of applicable safeguards at info@jvh.sk. 6. Your rights Subject to GDPR conditions, you may request access and a copy, correction, erasure, restriction, and portability where automated processing is based on consent or contract. You may object to legitimate-interest processing on grounds relating to your particular situation. You may object to direct marketing at any time. If a future activity relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. Handling this enquiry is not conditional on marketing consent. Data cannot always be erased while a legal duty or justified need to protect claims remains. Email info@jvh.sk. Where there are reasonable doubts, we may verify identity proportionately; we do not routinely demand a copy of an identity card. We respond without undue delay, normally within one month. Complexity or the number of requests may justify an extension of up to two further months; we will explain this within the first month. You may complain to a supervisory authority, particularly where you habitually live, work or believe an infringement occurred. In Slovakia, contact the Office for Personal Data Protection of the Slovak Republic; its website provides contact details and filing instructions. 7. Sources and optional information You normally provide the data yourself. A customer may supply details of a person assigned to cooperate on a project; that person must receive source and processing information under Article 14 GDPR. Your browser supplies technical connection data. Enquiries are voluntary. We cannot reply without contact details or quote without a sufficient brief. Information required for a contract, its performance or an invoice is necessary for those purposes; withholding it may prevent contracting or delivery. We do not request unnecessary information. 8. Security and changes The website uses an encrypted HTTPS connection. The public website has no enquiry database or user accounts. Your prepared enquiry is processed in the browser and, when sent, through your email application. Protection of received emails and project materials depends on their purpose, access by authorised people and the relevant service rules. See the cookie policy for browser technologies. This notice must be updated before introducing a new form, analytics, provider or processing purpose. https://jvh.sk/en/legal/privacy/