Privacy in plain language
Privacy Policy
This notice explains what personal data Paul Ceronio, operating the Ceronio Real Estate Management website and brand, uses, why it is used, who may receive it, and the choices and rights available to you.
1. Controller and scope
Data controller: Paul Ceronio, operating the Ceronio Real Estate Management website and brand
Address: Andreja Pavču 283, 027 32 Habovka, Slovakia
Privacy contact: info@ceroniorealestate.com
Telephone: +421 951 246 595
This notice covers browsing ceroniorealestate.com, sending an enquiry, subscribing to updates, creating an account, placing an order and downloading a publication. The eVTOL 2035 product has an additional privacy and personalised-watermark notice.
2. Personal data we use
| Context | Typical data | Source |
|---|---|---|
| Site use and security | IP address, device/browser details, timestamps, requested pages, referrer, cookie or consent identifiers, and firewall/security events | Your browser/device and hosting or security systems |
| Enquiries and forms | Name, email address, phone number if supplied, message, attachments and correspondence | You |
| Newsletter | Email address, consent record, subscription status and engagement with emails | You and the email service |
| Orders and accounts | Name, billing/contact details, account details, order history, consent record, transaction status and customer notes | You, WooCommerce and the payment provider |
| Payments | Payment method, provider/customer identifiers, amount, currency, status, fraud signals and limited billing details; we do not receive your full card number | You and the payment provider |
| Downloads | Order/customer identifier, product, download count, time and IP address; buyer-identifying watermark fields where the product notice says so | Order and download systems |
We may also receive information you make public when you interact with our social-media pages. The relevant social network separately controls its own use of that data.
3. Purposes and legal bases
| Purpose | Legal basis under GDPR |
|---|---|
| Reply to an enquiry or take requested pre-contract steps | Steps at your request before a contract; and legitimate interests in communicating with prospective clients |
| Create an account, process an order, take payment, supply a download and provide support | Performance of a contract or steps requested before entering one |
| Keep invoices, consent evidence and records required for tax, accounting, consumer-protection or regulatory purposes | Compliance with legal obligations |
| Protect accounts, paid files and the site; prevent fraud and abuse; diagnose failures; establish or defend legal claims | Legitimate interests in security, service integrity and legal protection |
| Send a requested newsletter or other electronic marketing | Consent, which you may withdraw at any time |
| Use non-essential analytics, advertising and marketing technologies | Consent where required; essential technical storage is used for the service you request |
Where we rely on legitimate interests, we consider the necessity and impact of the processing and your reasonable expectations. You may object as explained below. Where information is required to complete a purchase, failing to provide it may mean we cannot accept or fulfil the order. Newsletter and non-essential cookie choices are optional.
4. Recipients and service providers
We do not sell personal data. We disclose only what is reasonably needed to operate the site, fulfil your request, secure the service, comply with law or protect legal rights. Depending on how you use the site, recipients may include:
- GoDaddy, for managed WordPress hosting, backups, infrastructure and site-traffic services.
- Mailchimp (Intuit), for email-subscription services and connected site/email measurement.
- Google, where AdSense advertising and related measurement technologies are enabled.
- WooPayments and Stripe, or PayPal, to process payments, manage fraud and disputes, and meet payment-sector obligations. These providers also act as independent controllers for parts of their processing.
- Wordfence and relevant technical providers, for firewall, security, logging and incident response.
- Professional advisers, insurers, auditors, courts, regulators, law-enforcement or other authorities where disclosure is necessary and lawful.
Provider information is available in the GoDaddy privacy notice, Mailchimp privacy statement, Google Privacy Policy, Stripe Privacy Policy, and PayPal Privacy Statement.
International transfers
Some providers operate globally and may process data outside Slovakia or the EEA. Where EU data-protection law requires it, transfers are made using an adequacy decision, approved contractual safeguards such as the European Commission’s standard contractual clauses, or another lawful transfer mechanism. Contact us if you want information about safeguards relevant to your data.
5. Retention
We keep personal data only for as long as needed for the purpose collected, including legal, accounting, security and dispute-resolution needs. In particular:
- enquiries are kept while the enquiry is active and then for a limited follow-up or legal-claims period;
- newsletter data is kept until you unsubscribe or consent is otherwise withdrawn, with a minimal suppression record retained where needed to honour the opt-out;
- order, invoice, payment-status and digital-supply consent records are kept for the statutory accounting, tax, consumer-protection and legal-claims periods;
- download and security logs are kept only for a proportionate security, support and rights-enforcement period; and
- cookies expire according to their stated duration or sooner when deleted or consent is withdrawn, subject to strictly necessary records.
When data is no longer needed, it is deleted or anonymised unless continued retention is required by law.
7. Automated processing
Ceronio Real Estate Management does not make decisions based solely on automated processing that produce legal or similarly significant effects. Payment and security providers may use automated fraud or risk screening under their own responsibilities; their notices explain that processing and any available review rights.
8. Your data-protection rights
Subject to the conditions in applicable law, you may request access to your data, correction, deletion, restriction, or portability; object to processing based on legitimate interests or to direct marketing; withdraw consent at any time; and ask not to be subject to qualifying solely automated decisions.
Send a request to info@ceroniorealestate.com. We may ask for proportionate information to verify identity. We will respond without undue delay and normally within one month, subject to any lawful extension.
You may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic or, where applicable, another EEA supervisory authority.
9. Security, children and changes
We use measures appropriate to the risk, including encrypted transport, access controls, firewall and malware monitoring, updates, backups, protected paid-file delivery and restricted administrative access. No internet service is completely risk-free; please do not send sensitive information that we have not requested.
The shop and professional content are not directed to children. If you believe a child has provided data without appropriate authorisation, contact us so we can investigate and delete it where required.
We may update this notice when our services, providers or the law changes. Material changes will be highlighted where reasonably possible. The effective date and version at the top identify the current notice.