Privacy Policy | Grovtic
Free website design within 24 hours — no obligations • This month we're taking 3 more projects
Home Services Portfolio About Us Blog ROI Calculator Pricing Contact Free Design
Privacy Policy

Privacy Policy

Information on how we process your personal data in compliance with the GDPR regulation.

Last updated: February 14, 2026

This privacy policy explains how Syki Group s.r.o. (hereinafter referred to as "controller" or "we") collects, uses and protects your personal data when visiting the website grovtic.com and when using our services.

1. Controller

The controller of personal data is:

  • Company name: Syki Group s.r.o.
  • Address: Velkomoravska 2162/16B, 911 05 Trencin
  • Company ID: 57146870
  • Tax ID: 2122584508
  • Email: info@grovtic.com
  • Phone: +421 908 970 507

2. What personal data we collect

When using our website and services, we may collect the following personal data:

  • Contact data: name, surname, email address, phone number — provided through contact forms
  • Order data: company name, company ID, project requirements and other information necessary for processing the order
  • Technical data: IP address, browser type, operating system, screen resolution, visit time — collected automatically through cookies and analytical tools
  • Communication data: content of messages sent via email, contact form or WhatsApp

3. Purpose of personal data processing

We process your personal data for the following purposes:

  • Communication: responding to your questions and requests sent through contact forms, email or phone
  • Order processing: preparing price quotes, concluding contracts and fulfilling ordered services
  • Marketing: sending commercial communications and newsletters (only with your explicit consent)
  • Service improvement: analysis of website traffic and behavior for the purpose of optimizing user experience
  • Legal obligations: accounting, tax obligations

4. Legal basis for processing

We process personal data based on the following legal bases under Article 6 of the GDPR:

  • Consent of the data subject (Art. 6(1)(a) GDPR) — for marketing communication and analytical cookies
  • Performance of a contract (Art. 6(1)(b) GDPR) — for order processing and service provision
  • Legitimate interest of the controller (Art. 6(1)(f) GDPR) — for ensuring website functionality, protection against misuse and direct communication with existing clients
  • Compliance with legal obligation (Art. 6(1)(c) GDPR) — for accounting and tax purposes

5. Data retention period

We retain your personal data only for the period necessary to fulfill the purpose for which they were collected:

  • Contact forms: 3 years from the last communication
  • Contractual data: for the duration of the contract and 5 years after its termination (in accordance with the Commercial Code)
  • Accounting documents: 10 years (in accordance with the Accounting Act)
  • Marketing consent: until consent is withdrawn
  • Analytical data: 26 months (Google Analytics)

After the retention period expires, your data will be securely deleted or anonymized.

6. Cookies

Our website uses cookies — small text files stored in your browser. We use the following types of cookies:

  • Essential cookies: ensure basic website functionality (do not require consent)
  • Analytical cookies (Google Analytics): help us understand how visitors use our website — what pages they visit, how much time they spend on the site and where they came from. This data is anonymized and serves to improve content and user experience.
  • Marketing cookies (Meta Pixel / Facebook Pixel): allow us to display relevant ads on Facebook and Instagram social networks. They track conversions and help optimize advertising campaigns.

We use analytical and marketing cookies only with your consent. You can withdraw your consent at any time in your browser settings or by deleting cookies.

7. Third parties and data recipients

We may share your personal data with the following third parties:

  • Google LLC (Google Analytics) — website traffic analysis. Google processes data in accordance with its privacy policy.
  • Meta Platforms, Inc. (Facebook/Instagram Pixel) — conversion tracking and remarketing. Meta processes data in accordance with its privacy policy.
  • Hosting providers — our website is operated on servers that may technically process data transmitted through the web
  • Accounting and legal services — to the extent necessary for the fulfillment of legal obligations

We do not sell your data to third parties for marketing purposes. The transfer of data to third countries (USA) in connection with Google and Meta is carried out on the basis of standard contractual clauses approved by the European Commission.

8. Rights of the data subject

As a data subject, you have the following rights under the GDPR:

  • Right of access — you have the right to obtain confirmation as to whether your personal data is being processed, and if so, to access it
  • Right to rectification — you have the right to request the correction of inaccurate or incomplete personal data
  • Right to erasure ("right to be forgotten") — you have the right to request the deletion of your personal data if it is no longer necessary for the purpose for which it was collected
  • Right to restriction of processing — you have the right to request restriction of processing of your data in certain cases
  • Right to data portability — you have the right to obtain your personal data in a structured, commonly used and machine-readable format
  • Right to object — you have the right to object to the processing of data based on legitimate interest or for direct marketing purposes
  • Right to withdraw consent — if processing is based on consent, you have the right to withdraw that consent at any time
  • Right to lodge a complaint — you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk)

9. How to exercise your rights

You can exercise your rights by contacting the controller:

We will respond to your request without undue delay, no later than 30 days from its receipt.

10. Data security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. These measures include:

  • Data transmission encryption (SSL/TLS)
  • Restricted access to personal data only for authorized persons
  • Regular backups and system updates

11. Changes to the privacy policy

We may update this policy from time to time. We will inform you about significant changes through our website. We recommend that you regularly check this page.

Also see our Terms and Conditions.