Privacy Policy
Last updated: 24 August 2026
Who we are
ERINE s.r.o., IČO 55944566, registered office Dunajská 66, 811 08 Bratislava – Staré Mesto, Slovak Republic is the controller of the personal data described in this policy. We decide why and how that data is processed.
For any question about this policy, or to exercise any of the rights described below, write to info@erinetrading.com. Please put “Data protection” in the subject line so the message reaches the right person quickly.
We have not appointed a Data Protection Officer. We are not required to: we do not process personal data on a large scale, we do not carry out systematic monitoring, and we do not process special categories of data.
What this policy covers
This policy covers personal data we process through this website — that is, the enquiry form and the technical operation of the site — and the business correspondence that follows from an enquiry.
It does not cover the personal data of our suppliers’ and buyers’ staff that we process in the course of performing a contract; that processing is governed by the contract in question and by the information we provide to those individuals directly.
What we collect
Through the enquiry form we collect exactly the following, and nothing else:
| Company name | Required. Identifies the business making the enquiry. |
|---|---|
| Contact name | Required. So that we address the reply to a person. |
| Business e-mail address | Required. This is where the reply goes. |
| Phone number | Optional. Used only if a call is faster than writing. |
| Country of delivery | Required. Determines transport, lead time and pricing. |
| Type of enquiry | Required. Routes the enquiry — purchase, sourcing, supplier offer or other. |
| Quantity, target price | Optional. Helps us quote accurately on the first attempt. |
| Your message | Required. Whatever you choose to tell us about your requirement. |
The form contains one hidden field that is not shown to you. It exists to catch automated spam. If it is filled in, the submission is discarded and nothing is stored or sent.
Separately from the form, our server briefly processes the IP address of the device submitting the form. It is used for one purpose only — to limit how many submissions can come from the same address in a ten-minute window — and it is held in the server’s memory for that window only. It is never written to a file, never stored in a database, and never linked to the content of your enquiry.
Once you write to us or we reply, the resulting e-mail correspondence is stored in our mailbox and contains whatever personal data the correspondence itself carries.
Why we process it, and on what legal basis
We rely on two legal bases, and neither of them is consent. This is deliberate: an enquiry about buying or supplying goods is a business communication, and treating it as consent-based would mean we had to stop replying to you the moment consent was withdrawn, which serves nobody.
| Answering your enquiry and preparing a quotation | Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract. |
|---|---|
| Business correspondence and keeping a record of what was quoted and agreed | Article 6(1)(f) GDPR — our legitimate interest in conducting and evidencing our business dealings. |
| Limiting automated and abusive form submissions | Article 6(1)(f) GDPR — our legitimate interest in keeping the site usable and our mailbox functional. |
| Issuing and retaining invoices and accounting records | Article 6(1)(c) GDPR — compliance with Act No. 431/2002 Coll. on accounting and with tax legislation. |
Where we rely on legitimate interest, we have weighed that interest against your rights and concluded it does not override them: the data is business contact data, you provided it in order to receive a reply, the processing is limited to what that reply requires, and you can object at any time (see “Your rights” below).
Who else sees your data
We do not sell personal data. We do not share it for anyone else’s marketing. We do not transfer it to any party for their own purposes.
One processor is involved in the operation of this website and our e-mail:
| Hostinger International, Ltd | Web hosting and e-mail. Registered at 61 Lordou Vironos Street, 6023 Larnaca, Cyprus — within the EU. Acts as our processor under a data processing agreement. |
|---|
Beyond that, personal data leaves us only where the law requires it: to the Slovak tax authority and, on a lawful request, to a public authority entitled to it. Invoice data is also handled by whoever keeps our accounting records; where an external accountant is engaged, they act as our processor under a written agreement and this policy will be updated to name them.
Transfers outside the EEA
There are none. Your data stays inside the EEA: our hosting and mail provider is established in Cyprus and processes the data within the EU.
This website makes no requests to third-party servers at all. Typefaces, scripts and styles are served from our own domain, so visiting a page on this site does not disclose your IP address to anyone but us and our hosting provider. There is no content delivery network, no font service, no embedded map, no video player and no social media widget.
If we ever add something that would transfer personal data outside the EEA, we will name it here, state the transfer mechanism, and do so before it goes live.
How long we keep it
| Enquiries that do not lead to a contract | 24 months from our last contact with you, then deleted. Buying cycles in wholesale are seasonal and enquiries are often repeated a year later; keeping the earlier thread saves you from explaining it again. |
|---|---|
| Enquiries that lead to a contract | For the duration of the business relationship, then for the periods below. |
| Invoices and accounting records | 10 years following the accounting period to which they relate, as required by Act No. 431/2002 Coll. on accounting. |
| Records needed to establish or defend a legal claim | Until the limitation period expires — four years under the Slovak Commercial Code — or until the proceedings conclude. |
| IP address used for rate limiting | 10 minutes, in memory only. Never written to disk. |
| Discarded spam submissions | Not stored at all. |
How we protect it
The site is served over HTTPS, so the form contents are encrypted in transit. Form submissions are delivered to our mailbox over an authenticated, encrypted SMTP connection. Access to that mailbox is restricted to the people who need it to answer you.
We keep the number of places your data lives deliberately small. It is in our mailbox and, if the enquiry becomes an order, in our accounting records. It is not copied into a CRM, a spreadsheet in a third-party cloud, or a marketing tool — because we do not use any.
Your rights
Under the GDPR you have the following rights in relation to your personal data:
- Access — to be told whether we process your data and to receive a copy of it.
- Rectification — to have inaccurate data corrected and incomplete data completed.
- Erasure — to have your data deleted where there is no longer a lawful ground to keep it. This does not extend to accounting records we are legally required to retain.
- Restriction — to have processing limited while a dispute about accuracy or lawfulness is resolved.
- Data portability — to receive data you provided to us in a structured, machine-readable format, where processing is based on Article 6(1)(b) and carried out by automated means.
- Objection — to object at any time to processing based on our legitimate interest. We will stop unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is needed for legal claims.
Write to info@erinetrading.com to exercise any of these. We will respond within one month. If a request is complex we may extend that by up to two further months and will tell you why within the first month. Exercising these rights is free; we may charge a reasonable fee only for manifestly unfounded or excessive requests, and we will say so before doing anything.
We may ask you to confirm your identity before we act — not to obstruct the request, but because handing your data to someone impersonating you would be the greater failure.
Complaints
If you believe we have handled your personal data unlawfully, we would prefer you told us first — most problems are faster to fix directly. You are, however, entitled to lodge a complaint with the supervisory authority at any time:
- Úrad na ochranu osobných údajov Slovenskej republiky
- Galvaniho Business Centrum II, Galvaniho 7/B
- 820 07 Bratislava 27, Slovak Republic
Website: dataprotection.gov.sk. You may also complain to the supervisory authority in the EU country where you live or work, or where the alleged infringement took place.
Automated decision-making
We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you, and we do not profile you. Every quotation is prepared by a person.
Changes to this policy
This policy was last updated on 24 August 2026. If we change how we process personal data — a new processor, a new purpose, a different retention period — we will update this page and change that date before the change takes effect.