Legal
Privacy Statement
How we handle the personal data you share with us.
Who is the controller
The controller of your personal data is PRIMA RE GROUP s. r. o., registered office Ivánska cesta 16733/15, 821 04 Bratislava – mestská časť Ružinov, Slovakia, ID 51 082 772, registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, file no. 122373/B. GRAU GROUP is the name of the group of companies, and PRIMA RE GROUP s. r. o. operates this website. For any question about your personal data write to info@grau.group or call +421 238 104 999.
Why we process data and on what basis
- Answering your messages from the contact form, by email or by phone: name, company, email, phone and the content of your message. Basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering you and keeping a record of the conversation (Art. 6(1)(f) GDPR).
- Job applications: the details in your application – name, contact details, CV, LinkedIn or portfolio link and whatever else you send us. Basis: steps before entering into an employment contract (Art. 6(1)(b) GDPR). If you agree, we keep your application for future positions (consent, Art. 6(1)(a) GDPR).
- Updates from the group: your email address, if you subscribe. Basis: your consent (Art. 6(1)(a) GDPR). You confirm the subscription by email and can unsubscribe with the link in every message.
- Legal obligations, for example in accounting and tax (Art. 6(1)(c) GDPR).
- Running and protecting the website: when you visit the site, our hosting provider technically processes your IP address and browser details to deliver the site and protect it and its forms from abuse (legitimate interest, Art. 6(1)(f) GDPR).
Who receives the data
We work with providers who process data on our behalf and on our instructions:
- Cloudflare – hosting and delivery of the website, sending the messages from our forms to us by email,
- CookieYes – the cookie banner and the record of your choice,
- Google Cloud EMEA Limited, Dublin (Google Workspace) – email and data storage,
- Ecomail – sending the updates from the group,
- the provider of our accounting and invoicing software.
Transfers outside the EU
We process data mainly in the EU. Some providers (Cloudflare, Google, CookieYes) may also process data in the USA; such transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
How long we keep it
- messages and inquiries: 5 years,
- job applications: until the selection ends; with your consent until you withdraw it, at most 2 years,
- group updates: until you unsubscribe,
- invoices and other accounting documents: 10 years; contracts: 10 years after they end,
- technical records of the website: only briefly, as set by our hosting provider.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw your consent at any time; this does not affect processing before the withdrawal. We do not make automated decisions or profile you (Art. 22). To exercise your rights write to info@grau.group or to our registered office.
Complaints
You can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, or with the supervisory authority in the country where you live or work.
Cookies
How this website handles cookies is described in our Cookie Policy.
Valid from 1 January 2025.
