Privacy Policy

1. Who processes your data

The controller is MEPAX, s.r.o., Karpatská 7721/9, 911 01 Trenčín, Slovak Republic, Company ID 54386225. For data protection matters, contact us at [email protected] or in writing at our registered office.

2. Contact form and email

If you contact us via the form or by email, we process your name, email address, optionally your company name, and any information you include in your message. We use it to handle your request and for related communication. Providing the data is voluntary, but without contact details we cannot reply.

Where the processing concerns steps taken at your request before entering into a contract or the performance of a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is our legitimate interest in handling communication under Article 6(1)(f) GDPR. We comply with legal obligations under Article 6(1)(c) GDPR.

Messages sent through the form are delivered by email to our company mailbox hosted by Websupport. The form itself does not store messages in any database. To prevent abuse, it uses a short-lived security token and limits the number of submissions per IP address; this data is kept only in server memory for at most one hour.

3. Technical operation of the website

We run this website on our own server, and it is delivered through the Cloudflare network, which protects it from attacks and speeds up loading. When you visit the website, technical data is processed, in particular your IP address, the time of the request, the requested page and browser information. This data is used to deliver the page, ensure security and resolve technical issues. The legal basis is our legitimate interest in the secure and reliable operation of the website.

The website does not use analytics or advertising cookies, external fonts, embedded maps or marketing trackers.

4. Recipients and retention

To the extent necessary, data may be processed by our server, email (Websupport) and content delivery (Cloudflare) providers and by authorised persons within the company. We disclose data to public authorities only where required by law. Where data is transferred outside the European Economic Area, for example with Cloudflare services, safeguards under the GDPR apply, in particular an adequacy decision or standard contractual clauses.

We keep communication for as long as needed to handle your request and afterwards only as long as necessary for related cooperation, legal obligations or the protection of legal claims. Technical server logs are kept only as long as needed for operation and security.

5. Your rights

Under the conditions of the GDPR, you have the right to access, rectify and erase your data, to restrict processing and to data portability. You may object to processing based on legitimate interest. Send your request to [email protected]. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

This website does not use automated decision-making or profiling.

6. Scope of this policy

This policy applies to the company website and contact communication. Data processing in the FleetNaviX application, including vehicle and driver location data, is governed by a separate privacy policy for that application.