Cookie policy

This Cookie policy describes which cookies and other technologies that store information on your device or access it are used by the website www.bilvao.com, and how you can consent to them and change or withdraw your consent. It reflects the state of the website as of 15 October 2026.

1. OPERATOR

The operator of the website www.bilvao.com is BILVAO s. r. o., with its registered office at Janka Jesenského 564/9, Bánovce nad Bebravou 957 01, Company ID (IČO): 53 399 978, registered in the Commercial Register of the District Court Trenčín, Section: Sro, Insert No. 41118/R (the “Operator”).

2. WHAT COOKIES ARE

Cookies are small text files that a website stores in the browser on your device and reads back on later visits. Browser storage, such as localStorage, sessionStorage or IndexedDB, works in a similar way. The same rules apply to tools that store nothing on your device but read information from it, such as details of your browser or how fast a page loads.

The website www.bilvao.com uses two categories of cookies and storage: necessary ones, which it needs to work and to be protected, and analytics ones, which are used to measure traffic. It uses no marketing or advertising cookies.

3. CONSENT AND HOW TO CHANGE IT

The website uses necessary cookies and storage without your consent; under Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications, storing them does not require consent. It uses analytics cookies and traffic measurement tools only with your consent.

On your first visit, the website shows a banner in which you can accept analytics cookies and tools (the “Accept all” button) or reject them (the “Reject all” button). Both buttons sit side by side and are equally accessible. Through the “Settings” button you can decide on each category separately. Until you give your consent, the traffic measurement tools (Google Analytics, Vercel Web Analytics and Vercel Speed Insights) are not loaded and no data is sent to them. The same applies if you reject them.

You can change your choice or withdraw your consent at any time through the “Cookie settings” link in the footer of every page. If you withdraw your consent, traffic measurement is switched off and the website deletes the Google Analytics cookies from your browser. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

The website remembers your consent for 12 months and then asks you again. It remembers a refusal until you change it or delete the record of it in your browser, and does not ask for your consent again until then. The choice is stored in your browser (section 4), and the Operator keeps a record of it.

So that the Operator can demonstrate whether or not you gave your consent, as Section 109(8) of Act No. 452/2021 Coll. on Electronic Communications requires, it also records each of your choices on its server. The record contains a random identifier, which the website creates with your first choice and stores with it in your browser (section 4), your choice, whether you made it in the banner or in the settings and with which button, the language of the page, a reference to the consent rules in force at the time of the choice, the time of the choice and how long it is valid, and how long the choice took you. It contains neither your IP address nor details of your browser or device. The banner and the records are provided by c15t, an open-source tool that runs on the Operator’s server; the records are kept in the Operator’s database and are not sent to any third party. The legal basis is compliance with the Operator’s legal obligation under Article 6(1)(c) of Regulation (EU) 2016/679 (GDPR). The records are kept for 13 months from the choice – the 12 months for which consent is valid and one month more – and then deleted. The identifier is stored in the c15t cookie in your browser (section 4).

4. LIST OF COOKIES AND STORAGE

The website creates the following cookies and items in browser storage, the necessary ones first, then the analytics ones:

If your choice cannot be sent to the server at once (for example without an internet connection), the c15t tool keeps it in your browser’s storage under the name c15t-v3-pending-consent-saves:v1 until it is sent. If your browser does not accept the c15t cookie, the tool notes this there under the name c15t-cookie-miss. Both items are necessary, and the tool deletes them once it no longer needs them.

Analytics cookies are stored only after you consent. When you withdraw your consent, the website deletes them at once; when your consent expires, it deletes them on your next visit.

Only the Operator’s employees log in to the administration of the website. The administration uses its own necessary cookies (login and the administration’s language), which are not set for visitors of the website.

5. MEASURING TRAFFIC

With your consent, the Operator uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service records where you came to the website from (for example the Google search engine, artificial intelligence tools such as ChatGPT, or the social networks Facebook and Instagram), which pages you view, the type of device and browser, your approximate location (country and city), and whether you send the contact form or a request for a price quote. When a form is sent, Google Analytics records only that it was sent and which form it was; your name, e-mail, phone number and message are not sent to Google Analytics.

The advertising features of the service are switched off: the data is not used for advertising or for personalising it, and it is not linked to your Google account. Google receives your IP address with each request, but according to Google, in the EU it uses it only to determine your approximate location and then discards it; Google Analytics does not store it. Detailed data on visits and visitors is kept in the service for at most 14 months; aggregated statistics without identifiers (such as visit counts) may be kept longer. Google may also process the data in the USA; the transfer is governed by the EU-U.S. Data Privacy Framework, to which Google LLC has committed.

With your consent, the Operator also measures traffic with Vercel Web Analytics and Vercel Speed Insights, services of Vercel Inc. These services use no cookies and store nothing on your device, but they read information from it (about your browser and page loading speed), so they start only after you consent. They distinguish visitors by a derived identifier (a hash) that the provider creates from the request data and discards after 24 hours, and record the pages visited, the source of the visit, location (country, and possibly region and city), browser and device type, and page loading speed.

6. PROTECTING THE FORMS

The contact form (Contact page) and the price quote request form (Pricing page) are protected against automated submissions by Cloudflare Turnstile, a service of Cloudflare, Inc. The service loads together with the page that has the form and processes the technical data needed to recognise bots (IP address, connection and browser details). Cloudflare also processes this data as an independent controller to improve its bot detection.

The service stores no cookies. Within its own frame on the domain challenges.cloudflare.com, it stores one technical record named “cf.turnstile.u” in the browser storage (localStorage), which is used to recognise bots. The website has no access to this record.

7. WHAT THE WEBSITE DOES NOT USE

The website uses no advertising or marketing tools (such as Google Ads, Meta Pixel or LinkedIn Insight Tag), no Google reCAPTCHA (the forms are protected by Cloudflare Turnstile, section 6), no embedded videos (such as YouTube), no embedded maps, no chat and no social media plug-ins. Links to Google Maps and to social networks open the provider’s page only when you click them. The app preview on the App page is a file stored on this website, not a third-party video, and fonts are loaded from this website, not from Google Fonts.

8. BROWSER SETTINGS

You can delete cookies and storage or limit their storing in your browser settings at any time. If you delete the record of your choice, the website asks you for consent again.

Details of these providers, of the processing of personal data and of your rights are set out in the Operator’s Privacy Policy.