Privacy policy

Effective from 23 September 2026

Who the controller is

The controller is [to be confirmed], company ID [to be confirmed], trading as OutsideDbox. For anything concerning personal data, write to contact@outsidedbox.sk.

What data we process

From the request form we process your name, company and company ID, e-mail, phone and delivery address where you fill them in. We also process the job parameters (service, quantity, material, strength, finish, environment, deadline and delivery method), your description, any calculator estimate including the file name, the attached files, the NDA flag and the page language. The calculator on the quote page runs in your browser and uploads nothing until you submit the request. We send an automatic confirmation with the request number to the e-mail you enter. On every visit the hosting server automatically logs the IP address, time, page address and browser type. These logs serve only security and troubleshooting, on the basis of legitimate interest under Article 6(1)(f) GDPR, and the hosting provider keeps them only as long as necessary.

Why, and on what legal basis

We use the data to prepare a quote and to fulfil an order, which are pre-contractual steps and performance of a contract under Article 6(1)(b) GDPR. We keep invoicing data to meet a legal obligation under Article 6(1)(c). We protect the form against abuse on the basis of legitimate interest under Article 6(1)(f): the sender's network address and e-mail are kept in pseudonymised form for at most one hour, only to limit the number of submissions, and are recorded nowhere else.

Who we share data with

The request is delivered by e-mail to the studio mailbox on the outsidedbox.sk domain. Hosting and e-mail are operated for us by Websupport, s.r.o., Bratislava, as a processor within the European Union, which also keeps a copy of the request and its files for a short time. From there, requests are forwarded to the studio's Gmail mailbox, provided by Google, which may also process data in the United States under the EU-US Data Privacy Framework. If you consent to analytics, visit data is processed by Google Ireland Limited (Google Analytics) as a processor, and this data may also be transferred to the United States on the same basis. When a shipment is delivered we pass your name, address and phone to the carrier. We do not sell data and do not use it for advertising.

How long we keep data

Files attached to a request are deleted from the server automatically no later than 60 days after submission. We keep e-mail correspondence and job documents while the quote is being prepared and for the duration of the business relationship, and delete them afterwards unless we have to keep them longer for potential claims. Accounting documents are kept for 10 years as required by the Slovak Accounting Act. On request we delete source files and models sooner, as we also promise under an NDA.

Your rights

You have the right to access your data, to have it rectified or erased, to restrict processing, to data portability and to object. Write to contact@outsidedbox.sk and we will reply within one month. Where we process data on the basis of consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before it. If you believe we process your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

Cookies and analytics

The site needs no cookies to work. The site fonts are served from our own server, not from Google. The calculator and the assistant keep their state in your browser for the current visit only. Your uploaded file and your answers to the assistant are not sent anywhere unless you send a request. We measure visits with Google Analytics 4 only if you agree in the banner on the site. Only then does the Google Analytics script load and set two cookies (_ga, and _ga_ followed by the measurement ID), which last about 13 months. Your browser remembers your choice for 12 months. We measure the pages visited, where the visit came from, device and browser type, approximate location (country and city), scrolling, clicks on external links, file downloads and events such as submitting a request, using the calculator (the chosen technology and material only), opening the assistant or clicking the phone number, e-mail or WhatsApp. Google Analytics uses a pseudonymous device identifier from the _ga cookie and your IP address, which it uses only to estimate approximate location and does not store. Advertising features and Google signals are switched off. Detailed visit data is deleted from Google Analytics automatically no later than 14 months after your last visit, and only aggregated statistics without identifiers remain in the reports. The legal basis is your consent under Section 109(8) of the Slovak Electronic Communications Act (Act No. 452/2021 Coll.) and Article 6(1)(a) GDPR. You can withdraw consent at any time under Cookie settings in the site footer. This deletes the analytics cookies from your device, and on request we will delete data already sent.