Privacy Policy & GDPR
How DMF Express s.r.o. processes personal data under the GDPR, what data is collected through this website, and what rights data subjects have.
1. Controller
DMF express s.r.o., Svätovavrinecká 13920/10, 831 01 Bratislava – Nové Mesto, Slovak Republic, Company ID (IČO) 55 071 724, is the controller of personal data processed in connection with this website and its services.
Contact for data protection matters: info@dmfexpress.sk.
2. What data we process
- Enquiry and quotation data - the name, company, email address, telephone number and shipment details you submit through the contact form or send us by email or phone.
- Contractual data - data necessary to perform transport and forwarding contracts, including consignee and consignor contact details supplied by the customer.
- Technical data - data processed automatically by the web server when the site is accessed, such as IP address, browser type and time of access, for the purpose of operating and securing the site.
This website does not use advertising cookies. Analytics cookies are used only with your consent (see below). Fonts are self-hosted, so no font provider receives your IP address. The contact page embeds a map from OpenStreetMap; when that map loads, your browser contacts openstreetmap.org.
Visit statistics (Google Analytics 4) - only with your consent. If you accept analytics cookies in the cookie panel, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure how the site is used (pages visited, time on page, device and browser type, approximate location derived from the IP address). GA4 sets the cookies _ga and _ga_*, stored for up to 2 years. Until you consent, the Google Analytics script is not loaded at all and no analytics cookie is set. Data may be transferred to Google LLC in the United States, which is certified under the EU–US Data Privacy Framework. You can withdraw or change your consent at any time via Cookie settings in the footer of every page; the analytics cookies are then deleted.
Spam protection on the quote form (Google reCAPTCHA v3). To keep automated spam out of the quote form we use reCAPTCHA v3, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The reCAPTCHA script is loaded only on the contact page and only once you start filling in the form. It then evaluates interaction data - such as your IP address, browser and device information, and how the page is used - and returns a risk score, which our server checks before the enquiry is sent. Data may be transferred to Google LLC in the United States, which is certified under the EU–US Data Privacy Framework. Google’s Privacy Policy and Terms of Service apply. If you prefer not to use the form, you can reach us by email or phone instead.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to enquiries and preparing quotations | Art. 6(1)(b) - steps prior to entering into a contract |
| Performing transport and forwarding contracts | Art. 6(1)(b) - performance of a contract |
| Complying with tax, accounting and transport-law obligations | Art. 6(1)(c) - legal obligation |
| Operating and securing the website | Art. 6(1)(f) - legitimate interest |
| Protecting the quote form against spam and abuse (reCAPTCHA) | Art. 6(1)(f) - legitimate interest |
| Visit statistics (Google Analytics 4) | Art. 6(1)(a) - consent |
4. Recipients
Personal data may be shared with carriers, customs agents, insurers, accounting and IT service providers, and public authorities where required by law. Google Ireland Limited receives data from visitors who use the quote form, and - with consent - analytics data, as described above. All processors act under a data processing agreement.
5. Transfers outside the EEA
Personal data is processed within the European Economic Area. Where a transfer outside the EEA is necessary, it takes place on the basis of an adequacy decision or standard contractual clauses.
6. Retention
Enquiry data is retained only as long as needed to handle the enquiry and any follow-up communication, unless a contract follows. Contractual and accounting records are retained for the periods required by Slovak tax and accounting legislation, generally ten years.
7. Your rights
You have the right to access your personal data, to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time.
To exercise these rights, contact info@dmfexpress.sk.
You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava.
8. Internal data protection directive
DMF express s.r.o. has adopted an internal organisational directive on the processing and protection of personal data under the GDPR and Slovak Act No. 18/2018 Coll. It maps the personal data the company processes, sets out the legal basis for each processing activity, and describes the technical and organisational measures, the processors used and the procedure for reporting data breaches. The full text is available in Slovak on the Slovak version of this page.
Last updated: 21 October 2026