This Cookie Policy (hereinafter the “Policy”) explains how the Website tatradigital.services uses cookies and similar technologies. The controller is the Company, Tatra Business Digital s.r.o., Černyševského 10, 851 01 Bratislava – mestská časť Petržalka, Company ID (IČO): 52 274 926, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, Insert No. 136171/B. Contact: [email protected].
Full information on the processing of personal data and your rights can be found in the Personal Data Processing Policy.
Capitalised terms and abbreviations used in this Policy which are not defined directly in this Policy have the meaning given to them in the Personal Data Processing Policy.
1. Categories and legal basis
We use necessary technologies without consent only where their sole purpose is the transmission of a communication or where they are strictly necessary for the provision of a service explicitly requested by the user, in accordance with Section 109(8) of Act No. 452/2021 Coll. Where we process personal data when using these technologies and the legal basis for such processing does not arise directly from another legal regulation, the processing is based on our legitimate interest.
We use analytical and marketing technologies only with your prior consent under Article 6(1)(a) GDPR and Section 109(8) of Act No. 452/2021 Coll. Consent is not a condition for using the Website.
2. Technologies used
Necessary
| Name | Provider | Purpose | Duration |
|---|---|---|---|
XSRF-TOKEN |
Tatra Business Digital s.r.o. | protection of the form and session against misuse | 2 hours |
tatradigitalservices_session |
Tatra Business Digital s.r.o. | maintaining the website session | 2 hours |
cookie_consent |
Tatra Business Digital s.r.o. | storing and demonstrating your choice | 12 months |
| Cloudflare Turnstile | Cloudflare, Inc. | protecting the form against bots, Cloudflare processes the IP address and browser data for this | sets no cookies, otherwise as determined by the provider |
Analytical (only after consent)
| Technology | Provider | Purpose | Duration |
|---|---|---|---|
Google Analytics 4 (_ga, _ga_*, or _gid) |
Google Ireland Limited | measuring traffic to and use of the Website | 13 to 14 months |
Microsoft Clarity (_clck, _clsk and related identifiers used by this service) |
Microsoft Ireland Operations Limited | analysis of the use of the Website and of sessions | no more than 1 year |
Marketing (only after consent)
| Technology | Provider | Purpose | Duration |
|---|---|---|---|
Google Ads (_gcl_au) |
Google Ireland Limited | targeting and remarketing, displaying and optimising targeted advertising, measuring conversions and advertising effectiveness | 3 months |
Meta Pixel (_fbp) |
Meta Platforms Ireland Limited | targeting and remarketing, displaying and optimising targeted advertising, measuring conversions and advertising effectiveness | 3 months |
| LinkedIn Insight Tag / LinkedIn Ads | LinkedIn Ireland Unlimited Company | targeting and remarketing, displaying and optimising targeted advertising, measuring conversions and advertising effectiveness | 3 months |
3. Consent management
On your first visit, you may accept all optional technologies, reject them or select individual categories. Where the cookie banner offers the Accept all option, it also offers an equivalent Reject all option in the same layer. Optional categories are not switched on in advance.
You may change or withdraw your choice at any time via the Cookie settings link or icon. Withdrawing consent is as easy as giving it.
Following withdrawal, we will stop any further use of the relevant category. You can delete existing cookies in your browser settings. Withdrawal does not affect the lawfulness of processing before its withdrawal.
We store your choice for 12 months. We keep the record necessary to demonstrate consent for 13 months and then erase or anonymise it.
4. Recipients and transfers
If you allow analytical or marketing technologies, the data may be obtained by the relevant providers listed in the tables. For certain operations, they may act as independent or joint controllers in accordance with their own terms. Information on the allocation of responsibilities between joint controllers is available in the terms and privacy policies of the relevant controllers.
Where data are transferred outside the EEA, a mechanism under Chapter V GDPR is used, in particular an adequacy decision or standard contractual clauses. The specific mechanism is determined according to the relevant provider, service and data flow. Where a specific transfer to the United States is covered by an adequacy decision of the European Commission based on the EU-U.S. Data Privacy Framework, that mechanism is used. In other cases, another mechanism under Chapter V GDPR is used, for example standard contractual clauses, provided that the relevant conditions are met. We will provide information on the specific mechanism upon request.
5. Contact and rights
You may exercise your rights, including the withdrawal of consent, at [email protected]. Details are set out in the Personal Data Processing Policy.
We update this Policy whenever the technologies used change. The current version and its effective date will always be published on the Website.