Privacy Policy

In this document, we explain what personal data we process when you use the woodlook.sk website, why, for how long, to whom we disclose it, and what your rights are. We comply with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection.

1. Controller

Woodlook Trade, s.r.o., Nixbrod 7, 934 01 Levice, Company ID (IČO): 56414986, Tax ID (DIČ): 2122298783, VAT ID (IČ DPH): SK2122298783, registered in the Commercial Register of the District Court Nitra, Section: Sro, Insert No. 63839/N.
Contact for personal data protection queries: Daniel Kvasnica, woodlook@woodlook.sk, tel. +421 36 630 82 60, by post to our registered office address.

2. What data we process and why

‘Contact us’ contact form (Contact page)

• Data: name, email address, location, phone number (optional), message text, attached file (optional).
• Purpose: responding to your query, preparing a price quote, recommending a dealer.
• Legal basis: pre-contractual measures taken at your request (Article 6(1)(b) GDPR) and our legitimate interest in answering queries (Article 6(1)(f) GDPR).
• How: the message arrives via email at woodlook@woodlook.sk (we operate our email via Microsoft 365) and is also saved in the website administration along with technical submission data (IP address, browser, page from which you sent the form).

Inquiry forms (Care, Lighting)

Name, email, phone number (optional), message text, and selection of the product you are interested in. The purpose, legal basis, and method of processing are the same as for the contact form.

Dealer locator

When searching on the homepage, only the selected town/city and technical submission data are stored; on the Contact page, the selected town/city is transferred only in the URL and is not saved. Dealers’ details (name, address, phone, email, website, opening hours) are business contact details of our partners, which we publish with their consent. We do not send your contact details to dealers; if appropriate, we will only recommend a dealer to you.

Woodly Assistant (website chat)

• What we process: the text of messages you type or dictate in the chat. If you leave your contact details with us in the chat (name, email, phone number) or complete a short form in the chat window, we will also save this contact information, note, the page you are writing from, time, and your consent.
• Artificial intelligence: the assistant’s responses are generated by Google’s Gemini language model, which we use as a paid Gemini API service. Google does not use the conversation content in this service to improve its products and processes it as our processor under its data processing terms. We send only the conversation text to the model – email addresses and phone numbers are automatically removed from it (replaced with a placeholder) before sending. Therefore, only we receive the email and phone number, not the AI provider; the same applies to contact details from the form in the chat window, which are not sent to the model at all. Names or other personal data that you write directly in the message text cannot be removed automatically – so please do not write them in the chat. The assistant’s responses are indicative; it does not make automated decisions about you.
• Purpose and legal basis: answering your product queries (legitimate interest, Article 6(1)(f) GDPR); if you leave your contact details, getting back to you regarding your inquiry (pre-contractual measures, Article 6(1)(b) GDPR; contact details from the chat form are submitted only after ticking the consent box).
• Storage: conversations (stripped of contact details) and inquiries are saved in the website administration; we receive an email about a new inquiry at woodlook@woodlook.sk. We retain conversations without contact details for 365 days, and inquiries (contact, note, conversation summary) for 3 years; after that, they are automatically deleted.
• Protection against abuse: we limit the number of messages based on a truncated one-way hash of your IP address; we do not store the IP address itself, and the hash is deleted within one day at the latest.
• In your browser: chat history and chat ID are saved in browser session storage (sessionStorage) and are deleted after closing the tab or window.

Google Maps

The map on the Contact page as well as map previews for dealers load only after your consent – in the cookie banner or by clicking ‘Show map – Google content will load’; until then, nothing is loaded from Google services. Once loaded, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) processes mainly your IP address and technical browser data and may store cookies; data may be transferred to the USA under the EU–US Data Privacy Framework. ‘Open in Google Maps’ links open Google Maps in a new window – in which case Google’s privacy policy applies.

Google Reviews (Trustindex)

On the homepage and the Contact page, we display Google reviews via the Trustindex service (Trustindex Kft., Hungary). Reviews load only after your consent – in the cookie banner or via the ‘Show reviews’ button; only then are the script and reviewer images loaded from its servers, and Trustindex processes your IP address and technical browser data.

Videos

The video on the homepage plays from our server – nothing is sent to any third parties. YouTube videos load only after your consent – in the cookie banner or by clicking ‘Play video’ (by clicking, you consent to loading), specifically from the youtube-nocookie.com address (enhanced privacy mode); Google Ireland Limited then processes data similarly as with maps.

Traffic statistics (Google Analytics)

If you enable the ‘Statistics’ category in the cookie banner, we use Google Analytics 4 (Google Ireland Limited). We find out which pages are visited, where visitors come from (e.g. from a search engine or from our ad), and whether a form was submitted – without the form content and without your contact details. In doing so, Google processes mainly a truncated IP address, a browser identifier stored in cookies (_ga, _ga_*), and technical device data; data may be transferred to the USA under the Data Privacy Framework. We use the data to improve the website and to evaluate whether our advertising leads to inquiries (consent, Article 6(1)(a) GDPR). Without your consent, Google Analytics will not load and nothing is measured.

Advertising and remarketing (Google Ads)

If you enable the ‘Marketing’ category in the cookie banner, Google Ireland Limited may use information about your visit to the website (pages visited, form submission, browser identifier in cookies, e.g. _gcl_au) to measure the effectiveness of our Google Ads advertising and to display our ads to you on other websites and Google services (remarketing, personalised advertising). The legal basis is your consent (Article 6(1)(a) GDPR). Personalised advertising is not used without consent to the ‘Marketing’ category. You can also restrict personalised advertising from Google in your Google account settings (adssettings.google.com).

The Rank Math plugin is used for search engine optimisation and does not insert tracking code. We only link to Facebook and YouTube on the website.

Cookie consent

On your first visit, a banner is displayed where you select whether to enable statistics (Google Analytics), marketing (Google Ads), and third-party content (Google reviews – Trustindex, Google Maps, YouTube videos). Without your consent, this content will not load. The banner is provided by the Complianz plugin running on our website; your choice is stored only in your browser (cmplz_* cookies) for a maximum of 365 days and you can change or revoke it at any time via ‘Manage consent’ in the website footer. We do not keep consent logs on the server.

Fonts

Website fonts are loaded from our server, not from Google Fonts.

Server logs

With every visit, the server automatically records the IP address, time, and requested page for security and troubleshooting purposes (legitimate interest, Article 6(1)(f) GDPR). We run the website with the hosting provider Webglobe, a.s., Stará Prievozská 1349/2, 821 09 Bratislava, Company ID (IČO) 52486567; logs are retained for the period necessary for these purposes according to the hosting provider’s settings.

3. To whom we disclose the data

• web hosting provider: Webglobe, a.s., Stará Prievozská 1349/2, 821 09 Bratislava,
• email provider: Microsoft Ireland Operations Limited (Microsoft 365) – form messages and inquiries from the Woodly assistant,
• Google (Gemini API service) – only the text of the conversation with the Woodly assistant, without emails and phone numbers,
• Google Ireland Limited – Google Analytics (only with statistics consent), Google Ads (only with marketing consent), maps and YouTube videos (only if you display them),
• Trustindex Kft. – when displaying the reviews section,
• public authorities, if required by law.

We do not send your contact details to dealers or other companies. We do not sell data and do not use it for automated decision-making. Transfers to the USA may occur with Google and Microsoft services; these take place under the EU–US Data Privacy Framework or on the basis of standard contractual clauses.

4. How long we retain the data

• inquiries from forms and from the Woodly assistant: 3 years from the last communication,
• conversations with the Woodly assistant without contact details: 365 days,
• if we enter into a contract: for the period specified by accounting and tax legislation (usually 10 years),
• dealer locator logs: 365 days,
• IP address hash for chat abuse protection: maximum 1 day,
• Google Analytics data: 14 months,
• server logs: for the period necessary according to the hosting provider’s settings.

5. Your rights

You have the right to access your data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and the right to object to processing based on legitimate interest (Article 21). If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal. Send your request to woodlook@woodlook.sk – we will respond within one month.

If you believe that the processing infringes regulations, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

6. Mandatory data

Fields marked with an asterisk are required so that we can respond to you. Without them, we cannot process your message; other details are voluntary.

7. Cookies and browser storage

Information about cookies and data stored in your browser can be found on the Cookie Policy page. You can change your consent via ‘Manage consent’ in the footer.

8. Changes

We may update this document. Effective from 16 October 2026.