Last Updated: 09.07.2026

1. Introduction

Zoom Box s.r.o. (“Zoom Box,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website, use our services, submit an enquiry, or communicate with us.

This Privacy Policy is based on the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable data protection legislation of the Slovak Republic.

For the purposes of the GDPR, Zoom Box s.r.o. acts as the Data Controller for the personal data described in this Privacy Policy.

2. Personal Data We Collect

We may collect personal data that you voluntarily provide to us, including:

• Full name
• Email address
• Phone number
• Company name
• Job title or position
• Business address
• Project details and enquiries
• Information contained in communications with us
• Other information you choose to provide

When you use our website, we may also automatically collect certain technical information, including:

• IP address
• Browser and device information
• Operating system
• Pages visited and time spent on the website
• Referring URLs
• Cookies and similar technologies

We aim to collect only personal data that is relevant and necessary for the purposes described in this Privacy Policy.

3. How We Use Your Personal Data

We may use your personal data to:

• Respond to enquiries, quotations, and consultation requests
• Provide and manage our services
• Communicate with you regarding projects and business matters
• Manage our business relationships
• Improve our website, services, and user experience
• Maintain website and information security
• Prevent fraud and unauthorised activity
• Comply with legal and regulatory obligations
• Send marketing communications where you have provided the required consent

Depending on the circumstances, our legal basis for processing may include:

• Performance of a contract or taking steps at your request before entering into a contract
• Legal obligations to which we are subject
• Legitimate interests, such as operating and improving our business, website security, and protecting our legal rights
• Consent, where required by applicable law

Where processing is based on consent, you may withdraw your consent at any time.

4. Sharing Your Personal Data

We do not sell or rent your personal data.

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy, including:

• Website hosting and IT service providers
• Email and communication providers
• Analytics and technology providers
• Professional advisors, including legal and accounting advisors
• Business partners and service providers involved in delivering our services
• Government authorities or law enforcement where required by law

Where third parties process personal data on our behalf, we take appropriate steps to ensure that suitable data protection and confidentiality obligations are in place.

Where required by the GDPR, we enter into appropriate Data Processing Agreements (DPAs) with relevant processors.

5. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to operate the website, maintain security, analyse traffic, and improve user experience.

We may use:

• Essential cookies — necessary for the website to function properly
• Analytics cookies — used to understand website traffic and usage
• Marketing cookies — used only where applicable and with the required consent

Where required under the GDPR and applicable ePrivacy rules, we will request your consent before placing non-essential cookies on your device.

You can manage or withdraw cookie consent through our cookie settings or your browser settings.

6. Data Retention, Security and International Transfers

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to provide our services, comply with legal obligations, resolve disputes, and protect our legitimate business interests.

When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, destruction, or other unlawful processing.

Where personal data is transferred outside the European Economic Area (EEA), we will ensure that the transfer is made in accordance with Chapter V of the GDPR, using an applicable legal mechanism such as an adequacy decision, Standard Contractual Clauses, or another lawful safeguard.

7. Your Rights Under the GDPR

Subject to the conditions and limitations provided by the GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete personal data
• Request deletion of your personal data
• Request restriction of processing
• Object to certain processing activities, including processing based on legitimate interests and direct marketing
• Receive your personal data in a structured, commonly used, and machine-readable format
• Withdraw consent where processing is based on consent
• Not be subject to certain decisions based solely on automated processing, including profiling, where applicable

You may exercise your rights by contacting us using the details below.

We will normally respond to valid GDPR requests within one month. Where permitted by the GDPR, this period may be extended by up to two additional months due to the complexity or number of requests.

8. Contact and Complaints

If you have questions about this Privacy Policy, our processing of personal data, or wish to exercise your GDPR rights, please contact us:

Zoom Box s.r.o.
Company ID: 56792310
Registered Address:
Svätovavrinecká 13920/10
831 01 Bratislava
Slovak Republic
Email: info@zoombox.org

If you believe that your personal data has been processed in violation of applicable data protection law, you also have the right to lodge a complaint with the competent supervisory authority.

For Zoom Box s.r.o., the relevant supervisory authority is:

Office for Personal Data Protection of the Slovak Republic
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava
Slovak Republic

The supervisory authority is responsible for monitoring compliance with data protection legislation in the Slovak Republic.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, or applicable legal requirements.

The latest version will always be made available on our website.