Privacy Policy
This document describes how CBRE s.r.o. processes the personal data of visitors to the website dedicated to the Štefánikova 14 property, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.
This English text is provided for information purposes only. In the event of any discrepancy, the Slovak version of this document shall prevail.
Controller
CBRE s.r.o.
Staromestská 3, 811 03 Bratislava – Staré Mesto district, Slovak Republic
Company ID (IČO): 35819804
Tax ID (DIČ): 2020285388
VAT ID (IČ DPH): SK2020285388 (under Section 4, registered since 1 June 2003)
Registered in the Commercial Register of the Bratislava III City Court, Section: Sro, Insert No. 24869/B
Contact for data protection enquiries:
Lucia Baker, Property Manager, CBRE | Property Management
lucia.baker@cbre.com · +421 905 674 326
What data we process
When you use the contact form, we process the data you provide to us voluntarily:
- full name,
- e-mail address,
- company name (if provided),
- telephone number (if provided),
- the text of your message.
When you visit the website, technical data (such as your IP address, browser type and device information) may be processed automatically, as this is necessary to operate the website and display the map.
Purpose and legal basis of processing
We process personal data primarily for the following purposes:
- handling your enquiry and communicating with you in connection with the Štefánikova 14 property (legal basis: steps taken at the request of the data subject prior to entering into a contract, under Article 6(1)(b) GDPR),
- ensuring the operation and security of the website (legal basis: the legitimate interests of the controller, under Article 6(1)(f) GDPR),
- compliance with the controller’s legal obligations, where applicable (legal basis: Article 6(1)(c) GDPR).
Recipients of the data
Personal data may be disclosed to the following recipients or processors:
- FormSubmit (FormSubmit.co) — delivery of messages sent through the contact form; the form is submitted directly from your browser to that service’s servers,
- Contabo GmbH — provider of the server infrastructure hosting the website; the server is located in a data centre within the European Union,
- Mapbox — display of the interactive map in the Location section; loading the map involves processing your IP address and technical device data,
- the technical administrator of the website — to the extent necessary to operate the website and deliver messages from the contact form,
- authorised employees and associates of the controller, to the extent necessary to handle your enquiry.
We do not sell data to third parties for marketing purposes. The website itself is hosted on a server within the European Union. The FormSubmit and Mapbox services are provided from the United States of America, so using them may involve a transfer of data outside the European Economic Area; in such cases, appropriate safeguards under the GDPR apply (in particular the standard contractual clauses under Article 46 GDPR).
Cookies and technologies used
This website is static — it has no database and no user accounts, and it uses no cookies for tracking, analytics or advertising. We do not use Google Analytics or any other traffic measurement tools, and we carry out no profiling or automated decision-making.
The website relies on the following technologies:
- a static website built with Next.js, hosted on a server provided by Contabo GmbH within the European Union (Nginx web server, encrypted HTTPS connection with a Let’s Encrypt certificate),
- fonts are stored on our own server — they are not loaded from Google Fonts or any other external service while you browse the site,
- the interactive map in the Location section, provided by Mapbox, which may store technical data in your browser’s local storage in order to function,
- the contact form, submitted through the FormSubmit service directly from your browser — the contents of the form are not stored on our server.
The web server keeps standard operational logs (IP address, date and time of access, requested address, browser type), which serve to ensure the operation and security of the website.
Data retention period
We retain data from the contact form for as long as is necessary to handle your enquiry and any follow-up communication, but no longer than 3 years from the last contact, unless a longer period is required by law. Web server operational logs are retained for 14 days and then deleted automatically.
Your rights
In connection with the processing of personal data, you have in particular the following rights:
- the right of access to your data,
- the right to rectification of inaccurate data,
- the right to erasure (the “right to be forgotten”),
- the right to restriction of processing,
- the right to data portability,
- the right to object to processing based on legitimate interests,
- the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.
You may exercise your rights by writing to the contact e-mail address given above. We will handle your request without undue delay, and within 30 days at the latest.
Data security
When processing personal data, we apply appropriate technical and organisational measures to protect it against loss, misuse, unauthorised access or disclosure.
Changes to this document
We may update this document from time to time. The current version is always published on this page. Last updated: August 2026.
© 2026 CBRE s.r.o. All rights reserved.