Legal information
Privacy
This policy explains how PUREÉ processes personal data when you visit the website, submit the contact form and communicate with us afterwards.
Document information
| Item | Value |
|---|---|
| Effective from | 4 August 2026 |
| Last updated | 24 August 2026 |
| Version | 2026.08.24 |
Controller
- The controller of the PUREÉ website is MAMA FOODS, s. r. o., Vodná 4, 949 01 Nitra, Slovak Republic, Company ID: 53 376 803.
- For questions about personal data protection or to exercise your rights, contact us at objednavky@puree.sk.
Use of the website
- When you visit the website, technical data required to display content and ensure the website's availability, security and proper operation is processed. This may include, in particular, your IP address, device and browser type, the page visited, the time of the request and technical logs.
- We use technical data to operate the website, resolve technical problems, protect against misuse and secure the service.
- After consent, the public Slovak and English parts of the website use Google Analytics 4 to measure traffic and commercial journeys. The data processed includes a limited page path, permitted UTM data, referring hostname, language, technical device and browser data, analytics identifiers, and events relating to interest in products, recipes, contact details and successful enquiries.
- Google Analytics is not loaded before consent and no analytics request or cookieless signal is sent. We do not use marketing tracking, and analytics is not embedded in login, administration or client-zone pages.
Contact form
- When you submit the contact form, we process your name, business name, email address, telephone number and an optional note.
- We use the data to receive and handle your enquiry, respond to it and manage related communication.
- To protect the form against misuse, the IP address and basic technical details of the request are also processed temporarily.
- If you have consented to analytics, limited visit attribution may be attached to the internal email received by the PUREÉ team: the first and last meaningful source classification, permitted UTM data, landing path, referring hostname and the origin of the commercial call to action. This data is not included in the customer confirmation email.
- The required checkbox confirms that you have read this policy. It does not constitute consent to marketing.
- If the communication develops into a commercial relationship, further processing of the data will be governed by the purpose of the communication, the relevant contractual relationships and legal obligations.
Purposes and legal bases
- We process technical data required to operate and secure the website on the basis of our legitimate interest in a secure, reliable and available website under Article 6(1)(f) GDPR.
- We process contact enquiries in order to take steps prior to entering into a contract under Article 6(1)(b) GDPR, or on the basis of our legitimate interest in responding to commercial communication under Article 6(1)(f) GDPR, depending on the nature of the enquiry.
- We use optional Google Analytics and the related session attribution on the basis of your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time through Cookie preferences in the footer.
- We may also process data to comply with a legal obligation under Article 6(1)(c) GDPR or to establish, exercise and defend legal claims.
- If any specific processing were to be based on consent, consent would be requested separately and could be withdrawn at any time.
Email communication
- The contact form sends a message to the PUREÉ team and a confirmation to the email address entered in the form.
- Email communication may contain contact details, the content of the enquiry, replies and routine delivery data required to send and receive the message.
- If you contact us directly by email, we process the data you provide in the message to handle your request and subsequent communication.
Cookies
- The website uses necessary cookies for login, secured areas and storing the versioned consent choice for up to 180 days.
- After consent, Google Analytics may use analytics cookies, particularly _ga and _ga_*. The Google tag is not loaded without consent. We do not currently use marketing, advertising or profiling cookies.
- Details are provided in the separate Cookies Policy.
Recipients and service providers
We disclose personal data only to the extent necessary to persons and providers who need it for the stated purposes.
| Recipient / category | Purpose | Data | Role |
|---|---|---|---|
| Employees and authorised persons of the controller | Receiving and handling enquiries, communication and administration of the related commercial relationship. | Contact details, the content of the enquiry and related communication. | Authorised recipient |
| Hosting and technical infrastructure providers | Operation, delivery, availability and security of the website. | Technical request data, IP address, device data and operational logs. | Processor |
| Email and communication service providers | Delivery of contact messages, confirmations and subsequent communication. | Email addresses, contact details, message content and delivery data. | Processor or recipient, depending on the service |
| Google Analytics (Google) | Measurement of traffic and commercial interactions on the public website after consent. | Limited page and campaign data, referring hostname, language, technical data, analytics identifiers and events. | Analytics service provider; the precise contractual role depends on the current service configuration |
| Professional advisers and public authorities | Compliance with legal obligations and protection of legal claims, where necessary. | Only data necessary for the specific purpose. | Recipient |
International transfers
- Some providers of technical or communication services may also process data outside the European Economic Area.
- Google Analytics processing may involve infrastructure outside the European Economic Area. The specific terms depend on the current service configuration and the contractual terms with the provider.
- Where a transfer outside the European Economic Area takes place, appropriate safeguards under the GDPR are used, such as an adequacy decision, standard contractual clauses or another lawful transfer mechanism.
Data retention
| Category | Retention |
|---|---|
| Contact enquiries and email communication | Retained until the enquiry has been handled and subsequent communication has ended, or longer where necessary to comply with a legal obligation or protect legal claims. |
| Website technical data | Retained for a period reasonably necessary to ensure the operation and availability of the website and to resolve technical problems. |
| Data used to protect the contact form | Processed temporarily to limit misuse, assess security incidents and protect the form. |
| Analytics consent choice | Stored for up to 180 days or until the choice is changed. |
| Visit attribution in sessionStorage | Stored only for the current tab session and removed when consent is withdrawn. |
| Google Analytics data | Retained according to the current data-retention setting in the relevant GA4 service and the provider's terms; the exact value is not defined in the website code. |
| Data retained by service providers | Retained according to the relevant service settings, contractual terms and legal obligations, for no longer than is appropriate for the given purpose. |
Data security
- We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.
- Only authorised persons and providers who need the personal data for the stated purposes have access to it.
Children and automated decision-making
- The website is not intended for children and does not knowingly collect children's personal data.
- We do not carry out automated decision-making with legal or similarly significant effects in connection with the processing described in this policy.
Your rights and the supervisory authority
- Depending on the circumstances, you have the right to request access to your personal data, its rectification or erasure, restriction of processing, or data portability.
- If we process data on the basis of a legitimate interest, you have the right to object to such processing.
- If processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
- We may reasonably verify your identity before handling your request.
- If you believe that we are processing your data unlawfully, you may lodge a complaint with the Úrad na ochranu osobných údajov Slovenskej republiky.
Questions about data protection
For questions about the processing of personal data or to exercise your rights, contact us by email.