Privacy Policy.
Last updated: 25 April 2026
1. Controller / Prevádzkovateľ
| Company name | EDI777, s.r.o. |
| Registered address | Brečtanová 1/A, 831 01 Bratislava, Slovak Republic |
| Representative | Dmytro Chalyi, konateľ (Director) |
| Company ID (IČO) | 50 677 641 |
| VAT ID (IČ DPH) | SK2120428387 |
| Bank | Všeobecná úverová banka, a.s. |
| IBAN | SK54 0200 0000 0050 1865 3651 |
| Commercial register | OR OS Bratislava III, oddiel: Sro, vložka č. 117026/B |
| Contact e-mail | info@batonigroup.com |
EDI777, s.r.o. (operating under the brand Batoni Group) is the controller of personal data collected through the website batonigroup.com and its contact forms within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data (Slovak Republic).
2. What Personal Data We Collect
We collect only the data you voluntarily provide through our website forms:
- Contact & Catering enquiry forms: name, e-mail address, phone number (optional), subject / event type, message.
- Job application form: name, e-mail address, phone number, city preference, gender, date of birth (optional), position applied for, work experience, employer history, work permit status, CV / résumé file (optional).
We do not collect sensitive categories of data (Article 9 GDPR) unless you voluntarily include them in a free-text field. We do not use automated decision-making or profiling.
3. Purposes and Legal Bases
| Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|
| Responding to contact and catering enquiries | Art. 6(1)(b) – pre-contractual measures / Art. 6(1)(a) – consent | 12 months after last communication |
| Processing job applications | Art. 6(1)(a) – consent | 6 months after the recruitment process ends; longer with explicit consent |
| Compliance with legal obligations (accounting, tax records) | Art. 6(1)(c) – legal obligation | 10 years (Slovak statutory requirement) |
| Legitimate interests (fraud prevention, IT security) | Art. 6(1)(f) – legitimate interests | Duration of the interest; reviewed annually |
4. Recipients of Personal Data
Your data may be shared with the following categories of processors who act on our documented instructions:
- Cloud infrastructure & database: Supabase, Inc. (data stored within the EU/EEA).
- E-mail delivery: transactional e-mail providers used to forward enquiry notifications to our team.
- Accounting & legal advisors: only where required by law or for the defence of legal claims.
We do not sell, rent, or trade your personal data. We do not transfer personal data to third countries without adequate safeguards (Standard Contractual Clauses or adequacy decision).
5. Your Rights
Under GDPR you have the following rights, which you may exercise by contacting us at info@batonigroup.com
- Right of access (Art. 15): obtain a copy of the personal data we hold about you.
- Right to rectification (Art. 16): correct inaccurate or incomplete data.
- Right to erasure (Art. 17): request deletion of your data where no legal basis for retention exists.
- Right to restriction of processing (Art. 18): limit how we use your data in certain circumstances.
- Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
- Right to object (Art. 21): object to processing based on legitimate interests.
- Right to withdraw consent (Art. 7(3)): withdraw consent at any time; withdrawal does not affect the lawfulness of prior processing.
We will respond within 30 days. If you believe your rights are being violated you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (ÚOOÚ SR), Hraničná 12, 820 07 Bratislava 27.
6. Cookies and Tracking
Our website uses only a functional cookie to remember your language preference (locale). No advertising, analytics, or third-party tracking cookies are set without your explicit consent. We do not use Google Analytics or any cross-site tracking technologies at this time.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including encrypted transmission (HTTPS/TLS), access controls, and regular security reviews.
8. Minors
Our services are not directed at persons under the age of 16. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
10. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact:
EDI777, s.r.o. (Batoni Group)
Brečtanová 1/A, 831 01 Bratislava, Slovak Republic
info@batonigroup.com