Privacy policy
[TODO: legal review] — draft pending legal review
Last updated: [TODO: date of publication]
We keep this short and plain. We collect as little personal data as we can and use it only for the purposes described here.
Who is responsible for your data
The controller of your personal data is [TODO: company legal name], ID (IČO): [TODO: IČO], registered at [TODO: registered address], Slovakia. You can contact us about privacy at michal@maxian.sk.
What we collect through the contact form
When you send the contact form, we receive your name, email address, company (if you give it), your description of the idea and your preferred language. We use this information only to reply to you and to discuss the work you asked about. We do not use it for newsletters or marketing, and we do not sell it.
Why we are allowed to process it
We process this data to take steps at your request before a possible contract (Article 6(1)(b) GDPR) and, for keeping our correspondence, on the basis of our legitimate interest in being able to follow up on the conversation (Article 6(1)(f) GDPR).
Where it is stored and for how long
Form messages are delivered to our business email mailbox and stored there. [TODO: confirm email provider and where the mailbox is hosted] We keep the messages for as long as we are talking to you and then for [TODO: retention period], unless the law requires us to keep them longer or you ask us to delete them sooner.
Website hosting
This website is hosted by Websupport s.r.o. in Slovakia. When you visit it, the server processes technical data such as your IP address and browser type in order to deliver the pages and keep them secure. [TODO: confirm server log retention with Websupport]
Analytics without cookies
We use Cloudflare Web Analytics to count visits and see which pages are read. It does not set cookies and does not use your browser's local storage. The data is processed by Cloudflare, Inc. as our processor and is reported to us only in aggregate. [TODO: confirm Cloudflare data processing terms and any transfer outside the EU]
Spam protection on the form
The contact form may use Cloudflare Turnstile to tell people from bots. When you interact with the form, Turnstile processes technical signals such as your IP address and browser characteristics; it is provided by Cloudflare, Inc. as our processor. We use it on the basis of our legitimate interest in keeping the form free of spam (Article 6(1)(f) GDPR). [TODO: confirm Turnstile is enabled at launch, its data processing terms and that it sets no cookies]
Cookies
This website does not use cookies for analytics or advertising. [TODO: confirm no other cookies are set, e.g. by the form or the language switcher]
Who else sees your data
Only the providers named above, acting on our behalf: our hosting provider, our email provider and Cloudflare for analytics and spam protection. We do not share your data with anyone else unless the law requires it.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Write to michal@maxian.sk and we will respond within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. Our lead authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk).
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top.