Privacy and cookies

1. Controller

The controller of the website and of the processing of personal data is RM design — made-to-measure furniture.

2. What data we process

Data you give us yourself

• When you e-mail us: your e-mail address, your name and the content of the message.
• When you call us: your phone number and whatever we agree during the call.
• When preparing a quotation: details of the space in question (dimensions, photographs, the address for the survey).

Data collected automatically

• Hosting server logs: IP address, browser type, time and the address visited. They are generated on every visit to any website and are used to run and secure it.
• Data from cookies and similar technologies — set out in detail in section 5.

We do not collect payment data: the site offers neither online purchase nor payment.

3. What we use the data for

• To reply to you and prepare a quotation.
• To keep the website running and protected from misuse.
• If we switch on visitor measurement in the future: to learn which parts of the site people are interested in, so we can improve it — and only with your consent (this is not happening today, see section 5).

4. Legal basis

• Pre-contractual steps and performance of a contract — Art. 6(1)(b) GDPR (Regulation (EU) 2016/679): handling an enquiry, preparing a quotation, carrying out the commission.
• Legitimate interest — Art. 6(1)(f) GDPR: operation and security of the website, including strictly necessary cookies and similar technologies.
• Consent — Art. 6(1)(a) GDPR and Section 109 of Slovak Act No. 452/2021 Coll. on electronic communications: analytics cookies and similar technologies. The site does not use them yet; if we deploy them, we will ask for your consent beforehand and you will be able to withdraw it at any time.
• Legal obligation — Art. 6(1)(c) GDPR: accounting and tax records.

5. Cookies and similar technologies

Cookies are small files a website stores on your device. Your browser's local storage (localStorage) serves the same purpose and is treated the same way in law, so we describe them together. This site sets no classic server cookies; it only writes to local storage in your browser.

Under Section 109 of Slovak Act No. 452/2021 Coll. on electronic communications we may store data on your device, or access data already there, only with your consent — except where it is strictly necessary to provide the service you have expressly requested. The technologies we use therefore fall into two categories.

1) Necessary — always on

They provide the basic functionality of the site: they remember your choice in the cookie panel and your display settings. The site would not work properly without them, so they cannot be switched off and require no consent.

• What is stored: entries in your browser's local storage (your choice in the cookie panel, display settings). They contain no name, e-mail or other direct identifier.
• Legal basis: Section 109 of Act No. 452/2021 Coll. — no consent is required for strictly necessary storage; under the GDPR this is our legitimate interest in running the site.
• Retention: they stay in your browser until you delete them or change your choice.
• Recipients: none — the data stays in your browser and is sent neither to us nor to any third party.
• How to remove them: in your browser settings (by clearing site data). The site will then forget your settings and ask for consent again.

2) Analytics (statistics) — only with your consent

Analytics cookies are used to measure traffic: in aggregate they show how many people visited the site, where they came from and which pages they looked at. The description below sets out how this category works — even while the site is not using it — so that you know in advance what you would be consenting to.

• The tool we envisage: Google Analytics 4, loaded through the Google Tag Manager tag manager. Until we deploy it, none of its scripts are present on the site.
• Purpose: traffic statistics and improving the content of the site. We do not use them for advertising targeting or profiling.
• What data: truncated IP address, device and browser type, approximate location at city or country level, pages visited, time and length of the visit, the source of the visit, and a randomly generated browser identifier. We evaluate the data in aggregate and do not link it to an individual.
• Retention: the identifier stored in your browser for no more than 24 months; the data in the analytics account according to the retention period configured there.
• Recipient: Google Ireland Limited acting as our processor. The data may also be processed outside the European Economic Area — see section 7.
• Legal basis: your consent — Art. 6(1)(a) GDPR and Section 109 of Act No. 452/2021 Coll. Without consent not a single analytics script is loaded.
• Withdrawing consent: at any time, using the button below or the cookie icon in the corner of the screen — simply switch the category off. Withdrawal takes effect for the future and does not affect processing carried out beforehand. You can also remove the stored data by clearing site data in your browser.

Current status: the site does not use analytics cookies. No measurement or analytics script is deployed on it, no data about your visit is passed to anyone, and the category is therefore not offered in the cookie panel. If we start using them, you will be told on your next visit — the cookie panel will offer the category and nothing will run without your consent.

Marketing cookies — not used

The site carries no advertising or remarketing scripts and passes no data to ad networks. Should we ever add them, a separate category will appear in the panel, this policy will be updated, and nothing will run without your consent.

How to change your settings

You can change or withdraw consent at any time — with the button below or the cookie icon in the corner of the screen. Cookies and local storage can also be deleted directly in your browser settings.

6. Who we share data with

We do not sell personal data. We share it only as far as necessary with:

• our hosting and e-mail provider,
• the provider of the analytics tool (Google Ireland Limited) — only once we deploy analytics cookies and you consent to them; today nothing is passed to them,
• our accountant and public authorities, where the law requires it.

7. Transfers outside the EEA

No data is transferred outside the European Economic Area today — the site uses no analytics or advertising tools. If we deploy analytics cookies and you consent to them, their provider may process data outside the EEA; such transfers will be covered by Standard Contractual Clauses approved by the European Commission.

8. How long we keep data

• Enquiries and correspondence: 36 months from the last contact.
• Records of completed commissions: for the warranty period and as accounting rules require.
• Server logs: according to the hosting provider's settings.
• Necessary cookies and local storage: until you delete them in your browser.
• Analytics data: none is created — the site does not use analytics cookies.

9. Your rights

Under the GDPR you have the right to:

• know what data we process about you and receive a copy of it,
• correct inaccurate data or complete incomplete data,
• ask for your data to be erased,
• restrict processing or object to it,
• receive your data in a portable format,
• withdraw consent at any time — without affecting processing carried out before the withdrawal,
• lodge a complaint with the supervisory authority (section 13).

Just write to us; we will deal with it within one month at the latest.

10. Children

The site is not intended for children. We do not knowingly process data of anyone under 16 (the digital age of consent in Slovakia). If such data reaches us by mistake, we will delete it once notified.

11. Security

The site runs over an encrypted HTTPS connection. Access to the data is limited to the few people who need it to prepare and carry out a commission.

12. Changes to this policy

We may amend this policy when the law or the tools we use on the site change. If we add analytics or marketing cookies to the site, we will update this document as well and ask for your consent again. The current version is always on this page and carries the effective date shown above.

13. Supervisory authority

If you believe that our processing of your data breaks the law, you may lodge a complaint with: