Privacy Policy
Here you can find out which personal data I process, why, for how long, and what rights you have. I try to collect only what I really need.
Effective from 17. 10. 2026
1. Data controller
The operator of sladecek.sk and controller of personal data is Michal Sládeček, Nesluša, Slovenská republika.
Contact: michal@sladecek.sk, +421 948 459 047. I have not appointed a data protection officer; please contact me directly with any questions.
2. Which data I process
- Contact form and e-mail — name, e-mail, phone (optional), selected service and your message.
- Customer zone — if you have an account: name, e-mail, phone, hashed password and details of your enquiry or project.
- Website traffic — only with consent: Google Analytics data and my own anonymous statistics (page visited, button clicked, referring site). I do not store IP addresses in my own statistics.
- Technical data — the web server briefly logs IP address and browser type on every visit for security and troubleshooting.
3. Purpose and legal basis
- Replying to enquiries and preparing quotes — pre-contractual steps (Art. 6(1)(b) GDPR).
- Performing a contract and running the customer zone — performance of a contract (Art. 6(1)(b) GDPR).
- Accounting and tax obligations — legal obligation (Art. 6(1)(c) GDPR).
- Website security and spam protection — legitimate interest (Art. 6(1)(f) GDPR).
- Traffic measurement and marketing — your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via “Cookie settings” in the footer.
4. How long I keep data
- Form messages and e-mails: while handling your enquiry and then for no more than 3 years.
- Contracts and invoices: 10 years, as required by accounting law.
- Customer zone account: until you close it.
- Google Analytics data: no more than 14 months (depending on account settings).
- Server logs: usually a few weeks.
5. Who has access to the data
- WEDOS Internet, a.s. (Czech Republic) — website hosting, database and e-mail delivery.
- Google Ireland Ltd. — Google Analytics and Google Tag Manager (only with consent), Google Fonts.
- jsDelivr — delivery of libraries (icons, 3D graphics). Your IP address is transmitted when they load.
- An accountant or public authorities where required by law.
I do not sell your data or share it with third parties for marketing.
6. Transfers outside the EU
Google may also process data in the USA. Such transfers are protected by the EU-US Data Privacy Framework and standard contractual clauses. Google Analytics does not run without your consent.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, the right to object and the right to withdraw consent at any time. Just write to michal@sladecek.sk; I will reply within 30 days.
If you believe your data is being handled incorrectly, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk, or with the supervisory authority in your country of residence.