Privacy policy

This policy explains how we process the personal data you provide to us via the contact form, by email or by telephone on the website www.rfq360.sk. We provide this information pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the “GDPR”) and Slovak Act No. 18/2018 Coll. on the protection of personal data.

1. Controller

Terra Wood, s. r. o.
Dezidera Štraucha 1565/4, 053 11 Smižany
Company ID: 55 328 202, VAT ID: SK2121944110
Email: info@rfq360.sk
Phone: +421 902 327 814

The controller has not appointed a data protection officer (DPO). For all data protection matters, please contact us at the email address or telephone number above.

2. What personal data we process

• first name and surname,
• email address,
• telephone number (optional),
• subject and content of the message,
• personal data contained in attached files,
• technical data related to submitting the form (e.g. IP address and time of submission) to protect the website against misuse.

Please do not include special categories of personal data (e.g. health data) or any other data not needed to handle your request in your message or attachments.

3. Purpose and legal basis of processing

• Handling your enquiry and preparing a quotation or contract – legal basis: Art. 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract).
• Answering questions and communicating with company representatives (B2B) – legal basis: Art. 6(1)(f) GDPR (the controller's legitimate interest in responding to messages received and developing business relationships).
• Protecting the website against spam and attacks – legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security of the website).
• Inclusion in the database of suppliers and business partners (at your request) – legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (legitimate interest in brokering business opportunities between manufacturing companies).
• Compliance with legal obligations (e.g. archiving accounting documents if a contract is concluded) – legal basis: Art. 6(1)(c) GDPR.

Providing your data is voluntary. However, without the data marked with an asterisk (*) we cannot handle your request. Your consent is not required for processing for the purposes stated above.

4. Recipients of personal data

We do not share personal data with third parties for marketing purposes. Access may be granted only to our processors who provide technical operations for us, in particular our web hosting provider and email service provider, and only to the extent necessary to provide their services. We may also disclose data to public authorities where required by law.

Contact details of companies included in our database of suppliers and business partners may be shared with a client to the extent necessary for a specific business opportunity.

If we approach suppliers or potential business partners on the basis of your request, we will only share your personal data with them after prior agreement with you.

5. Transfers to third countries

We do not transfer data from the contact form to countries outside the European Economic Area or to international organisations.

6. Retention period

• We retain messages and attachments from the form while handling your request and thereafter for a maximum of 2 years from our last communication.
• If a contract is concluded, we retain the data for the duration of the contractual relationship and thereafter for the periods required by specific legislation (e.g. accounting documents for 10 years under Slovak Act No. 431/2002 Coll. on Accounting).
• We retain data in the database of suppliers and business partners until you ask us to delete it or object to its processing.
• Technical website security logs are retained only for as long as strictly necessary.

7. Your rights

In connection with the processing of your personal data, you have the right:

• of access to your personal data (Art. 15 GDPR),
• to rectification of inaccurate data (Art. 16 GDPR),
• to erasure (Art. 17 GDPR),
• to restriction of processing (Art. 18 GDPR),
• to data portability (Art. 20 GDPR),
• to object to processing based on legitimate interest (Art. 21 GDPR),
• to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovakia, dataprotection.gov.sk.

You can exercise your rights by email at info@rfq360.sk or in writing at the controller's address. We will handle your request without undue delay, and in any event within one month of receipt.

8. Automated decision-making

Your personal data is not subject to automated individual decision-making or profiling.

9. Website analytics

To measure website traffic we use Burst Statistics, which runs directly on our server. Measurement takes place without cookies and without transferring data to third parties. The data is anonymised (a daily anonymous identifier) and does not allow a specific person to be identified or a visitor to be recognised on a later visit. We use it solely to evaluate and improve the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

10. Security and changes to this policy

We protect personal data with appropriate technical and organisational measures. We may update this policy; the current version is always published on this page.

Effective from 22 September 2026.

← Back to RFQ360.sk