This notice explains how we process personal data when you use the contact forms on the Filterrods website.

Controller and contact details

The controller is BAR-CAR, s.r.o., Bajkalská 12985/9, 831 04 Bratislava, Slovak Republic, Company ID: 45605963, Tax ID: 2023064901, VAT ID: SK2023064901.

Questions and requests concerning personal data may be sent to filterrods.eu@gmail.com or by post to the registered office.

Data we process

When you submit a form, we process your first and last name, email address, message and subsequent correspondence. Please do not include information that is not needed to handle your enquiry.

We also process essential technical data for security and delivery. Protection against repeated submissions uses a short-lived key derived from the IP address, and the system may keep a technical email delivery log.

Purposes and legal bases

We use the data to handle your enquiry, prepare and send a quotation, and conduct related follow-up communication. Where these are steps taken at your request before entering into a contract, the legal basis is Article 6(1)(b) GDPR.

For general business communication, communication with representatives of legal entities and protection of the form against misuse, the legal basis is our legitimate interest under Article 6(1)(f) GDPR. Our interests are proper business communication and secure website operation.

Providing the data is voluntary, but we cannot handle the enquiry without contact details and the message. The form does not subscribe you to a newsletter or unrelated marketing offers.

Retention periods

We retain contact-form data while handling the enquiry and for no longer than 12 months after the last related communication. We then delete it unless another specific legal ground requires retention.

Technical mail logs are kept for no longer than 30 days, and rotating backups for no longer than 90 days. Backup data is used only for recovery after an incident and expires when the backup is overwritten.

If the enquiry leads to a contract, necessary contractual and accounting data may be retained separately for the periods required by law. This does not mean that the entire form or email correspondence is automatically retained for ten years. Data needed to establish, exercise or defend legal claims may be kept until the claim is resolved and the applicable limitation period expires.

Recipients and service providers

Data is accessible only to authorised persons of the controller and technical providers to the extent necessary. Web hosting and email delivery are provided by WebHouse, s.r.o.; messages are delivered to Gmail provided by Google. The website administrator may access data only where necessary for technical support.

We do not sell the data or disclose it to other organisations for their own marketing purposes. Data may be disclosed to public authorities where required by law.

Transfers outside the European Economic Area

Google operates servers in different countries, so data may also be processed outside the EEA. Google states that it relies on valid legal mechanisms and appropriate safeguards for such transfers. Details are available in Google’s information on data transfer frameworks.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests. Not every right applies without exception in every situation.

Send your request using the contact above. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

Automated decision-making and updates

We do not use automated individual decision-making or profiling that produces legal or similarly significant effects when handling contact forms.

We may update this notice if our processing or service providers change. Last updated: 7 September 2026.