Privacy policy

This policy explains how we process the personal data of website visitors, of people who contact us through the form, by email or by phone, and of people who order goods from us. We act in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data (zákon č. 18/2018 Z. z. o ochrane osobných údajov).

1. Controller

The controller of personal data is:

Dr. Fleming, s.r.o.
Československých letcov 2530/53A
080 06 Ľubotice, Slovakia
Company ID (IČO): 55021778
Tax ID (DIČ): 2121845275
VAT ID (IČ DPH): SK2121845275
Email: info@fluidlabs.eu

FluidLabs is a trading name of the controller.

2. What personal data we process

Enquiry. When you send an enquiry or communicate with us directly, we may process:

• first name and surname,
• email address,
• phone number (if you provide it),
• company name (if you provide it),
• website or sales channel (if you provide it),
• the topic of the enquiry, the product you are interested in and how you heard about us (if you provide them),
• the content of your message and any other data you choose to share with us.

Order. When you send an order through the website, we process:

• first name and surname, email address and the name of your company or planned brand,
• company ID, phone number, delivery country, how you heard about us and a note (if you provide them),
• the products ordered, the quantities, the choice of label printing and application, and the calculated price,
• your confirmation that you are buying for business purposes (including a business being set up).

When confirming and fulfilling the order, we also process billing and delivery data (for example the address to which we deliver the goods), payment data and communication about the order, as well as label artwork if it contains personal data.

When you visit the website, the hosting provider may automatically record in essential server logs the IP address, the date and time of the request, the requested address, the type of browser or device and information about the result of the request. This data is used for the secure and reliable operation of the website.

When you start filling in a form (enquiry or order), the Cloudflare Turnstile service loads to check that the form is not being sent by an automated program. For this purpose it processes the IP address, technical data about the browser and connection (for example browser identification) and the address of the website on which the form is located. This data is used solely to detect and block bots, not to identify or profile visitors.

3. Purposes of processing

We process personal data for the purposes of:

• handling your enquiry and replying to your message,
• preparing a non-binding offer and negotiating business cooperation,
• processing the order: confirming it, concluding and performing the contract, delivering the goods, invoicing and handling any complaints,
• complying with our legal obligations, in particular in accounting and tax,
• protecting the website, preventing misuse and resolving technical incidents,
• aggregate measurement of website traffic so that we can improve it,
• protecting and enforcing our legal claims, where necessary.

4. Legal basis for processing

We process enquiry data without the need for separate consent:

• to take steps prior to entering into a contract at your request under Art. 6(1)(b) GDPR, if you communicate on your own behalf,
• on the basis of our legitimate interest under Art. 6(1)(f) GDPR, if you communicate as a company representative or if it is a general B2B enquiry.

We process order data:

• to take steps prior to entering into a contract and to perform the contract under Art. 6(1)(b) GDPR, if you order on your own behalf (for example as a sole trader or as a person setting up a business),
• on the basis of our legitimate interest under Art. 6(1)(f) GDPR in concluding and performing a contract with the company you represent, if you order on behalf of a company,
• to comply with legal obligations under Art. 6(1)(c) GDPR, in particular under Act No. 431/2002 Coll. on Accounting (zákon č. 431/2002 Z. z. o účtovníctve) and Act No. 222/2004 Coll. on Value Added Tax (zákon č. 222/2004 Z. z. o dani z pridanej hodnoty) (invoices and other accounting documents).

Our legitimate interest is to reply to a business enquiry, conduct the related communication, conclude and perform a contract with the company you represent, ensure the operation of the website, prevent misuse and protect our legal claims.

5. Retention period

If an enquiry does not lead to a business relationship, we keep the communication data for no more than 12 months from the last substantive communication. We keep it longer only to the extent necessary to protect legal claims or where required by law. If a business relationship is established, we keep the data for its duration and then for the applicable statutory archiving and limitation periods.

If an order does not lead to a contract (for example, you do not accept it), we keep the data in the same way as for an enquiry, for no more than 12 months from the last substantive communication. We keep invoices and other accounting documents for the period required by the Accounting Act and the VAT Act (generally 10 years from the end of the year to which they relate).

We also keep a copy of each enquiry and order sent through the website in the website database as a backup in case of an email outage. This copy is deleted automatically 12 months after it was sent.

The hosting provider keeps technical server logs only for as long as necessary to ensure operation, diagnostics and protection of the service, in line with its operational and security settings.

6. Recipients and processors

Both the enquiry form and the order form are processed by our website, and their content is sent to the company mailbox. Our processors are:

• Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA: website operation (hosting), protection of the form against misuse (Turnstile), traffic measurement (Web Analytics), sending enquiries and orders by email, including the automatic confirmation to you, and their backup in a database located in the European Union,
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: company mailbox (Google Workspace).

When fulfilling an order, we pass the data needed for delivery (name, address, phone, email) to the carrier delivering the shipment, and for payments by bank transfer the payment data is processed by our bank. Our authorised staff, the website administrator, the persons who keep our accounts and professional advisers bound by confidentiality may also have access to the data to the extent necessary. We may disclose accounting documents to public authorities, for example the tax administration, to the extent required by law.

We do not sell data or pass it to third parties for their own marketing purposes.

7. Transfers to third countries

Cloudflare, Inc. and companies of the Google group may, when providing their services, also process data outside the European Economic Area, in particular in the USA. Such transfers take place only where the conditions of Chapter V GDPR are met, on the basis of the European Commission's adequacy decision for companies participating in the EU-U.S. Data Privacy Framework and of standard contractual clauses. You can request information about the safeguards used at info@fluidlabs.eu.

8. Your rights

Under the conditions set out in the GDPR, you have the right:

• of access to your personal data,
• to rectification of inaccurate data or completion of incomplete data,
• to erasure of data,
• to restriction of processing,
• to data portability,
• to object to processing based on legitimate interest.

You can exercise your rights by email at info@fluidlabs.eu. If you believe that the processing of your data breaches the law, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk. You may also lodge a complaint with the supervisory authority in the EU member state where you live.

9. Obligation to provide data

Providing your name, email address and message is necessary to send and handle an enquiry. For an order, your name, email address, the name of your company or planned brand and the confirmation that you are buying for business purposes are necessary; to fulfil it, also billing and delivery data. The other fields are voluntary. Without the mandatory data we cannot process the form, reply to the enquiry or fulfil the order. Billing data is also necessary for us to comply with our legal obligations.

10. Automated decision-making

When handling enquiries and orders, we do not carry out automated individual decision-making or profiling that would have legal or similarly significant effects on you.

11. Cookies, browser storage and external services

The website itself does not set any cookies, does not use analytics or marketing cookies and does not load fonts or marketing pixels from third-party servers.

Order in your browser. When you add a product to your order or open the Order page, the website saves in your browser's storage (localStorage, under the name “fl-cart”) the codes of the selected products, the quantities and the label choice, so that the order is not lost when you move between pages. This record does not contain your name or contact details, is not sent to us until you send the order yourself, and is cleared after it has been sent. You can remove items at any time on the Order page or by deleting the site data in your browser. This is technical storage that is strictly necessary to provide the service you have requested (Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications, zákon č. 452/2021 Z. z. o elektronických komunikáciách), so we do not need your consent for it.

Two services are loaded from Cloudflare's servers:

• Cloudflare Turnstile protects the form against misuse (see section 2). It loads only when you start filling in the form and, within its own domain (challenges.cloudflare.com), it may store a security cookie. It is necessary to protect the form you want to send.
• Cloudflare Web Analytics gives us aggregate traffic statistics, for example the number of page views, the page from which a visitor came, the type of device and browser, and the country. It does not use cookies or any other storage of data on your device and, according to Cloudflare, does not collect or use visitors' personal data.

We use both services on the basis of our legitimate interest under Art. 6(1)(f) GDPR in protecting and improving the website. If we add other tools in the future, we will update this policy before activating them and, where the law requires it, ask visitors for consent.

12. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, together with its effective date.