Privacy Notice

Who is responsible

The controller is bravo company s.r.o., Jilemnickeho 16, 040 01 Kosice, Slovakia. For privacy questions or rights requests, email bravocompanysk@gmail.com. These notices cover https://www.tiecap.eu and https://www.gettiecap.com.

Website delivery and security

Loading pages, photographs, locally hosted fonts and videos sends network information, including your IP address, requested address, request time and browser request headers, to hosting and delivery providers. Lovable and Cloudflare provide hosting, content delivery and security. Security cookies are described in the Cookie Notice.

Proposed legal basis: our legitimate interests in providing a reliable website and protecting it from abuse (Article 6(1)(f) GDPR). The controller must confirm the necessity and balancing assessment before publication. The exact security-log fields, enabled diagnostics, access arrangements and provider retention periods are not yet confirmed. We do not claim a verified log deletion period.

Contact and wholesale enquiries

The Contact form collects your name, email, selected department and message. These fields are required so we can identify, route and answer your enquiry. The wholesale form requires name and email; company, country, website or Instagram link and message are optional. If a required field is blank or invalid, the form cannot be submitted. Omitting optional fields does not prevent submission. Please do not include sensitive personal information.

Submissions are validated on the website server and recorded in the TIECAP Enquiries Google Sheet with the submission time, form type, department and processing status. We use this information to respond and manage correspondence. The current submission process does not send an automatic email reply or WhatsApp alert, and does not add you to a marketing list.

Proposed legal bases: steps at your request before entering a contract (Article 6(1)(b) GDPR) where your enquiry genuinely concerns a contract with you; legitimate interests in answering other enquiries and maintaining business correspondence (Article 6(1)(f)) for general, press or organisational enquiries. These are proposals for owner review, not a blanket consent requirement. The controller must confirm applicability and the legitimate-interest assessment.

Recipients include Lovable for server-side handling and its connector service, and Google for the enquiry spreadsheet. The owner has confirmed that TIECAP Enquiries has Restricted sharing and Boris Ivan (bravocompanysk@gmail.com) is its sole listed account and owner, with no other users, groups, domain-wide or anyone-with-the-link permissions. Lovable can write through the owner's Google connection without being listed as a separate sharing entry.

Contact and wholesale enquiries are kept for 12 months from the last meaningful contact. If an enquiry becomes an active business relationship, or records must be retained for a legal obligation or dispute, those records follow the applicable retention rules instead. Expired enquiries are reviewed monthly in Google Sheets and in copies used to handle them, including email. The proposed manual review and deletion responsibility is Boris Ivan as the sole Sheet owner; he must confirm and activate this procedure before publication. Deletion covers the enquiry row and working copies, subject to documented legal holds and provider backup or version-history limits.

Providers and international transfers

Lovable, Cloudflare and Google may process data outside the EEA. The applicable contracting entities, processing agreements, hosting regions, subprocessors, transfer destinations and safeguards for this particular setup remain to be verified by the controller. We do not assert that EU-only processing, standard contractual clauses or an adequacy framework applies without checking the relevant contracts and configuration.

You may contact us to ask for information about applicable safeguards and, where available, a copy. Before publication, the owner must complete this section with the verified arrangements and confirm the Google account or Workspace terms used for the Sheet. The privacy contact mailbox is hosted by Google; its applicable terms also need confirmation.

Your rights

Subject to the GDPR conditions, you can request access, correction, erasure, restriction and portability of your data, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it without affecting the lawfulness of earlier processing. Optional enquiry analytics requires your consent, which you can withdraw in Cookie preferences in the footer. No solely automated decision-making with legal or similarly significant effects is implemented by the enquiry forms.

Send requests to bravocompanysk@gmail.com. We may need proportionate information to verify your identity. GDPR normally requires a response within one month; an extension of up to two further months is possible for complex or numerous requests, with notice and reasons within the first month.

You can complain to the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), https://dataprotection.gov.sk, or another competent supervisory authority. Contacting us first is not a condition of making a complaint.

Before this draft is published

The owner must confirm the proposed legal bases and deletion responsibility, activate monthly retention review, and verify hosting and security-log practices, processing agreements and international-transfer safeguards. The actual publication date must be added when the notices go live. This draft is not a statement that all legal requirements have been satisfied.