Privacy policy

1. Controller

The controller responsible for processing personal data on this website is:

[Full name / company name and legal form]
[Street and number]
[Postal code, city, country]
Email: [email address]
Phone: [phone number]

[If appointed: data protection officer’s contact details.]

2. Visiting the website

When you visit our website, technical connection data is processed, including your IP address and the requested page. Our hosting provider, [name, address and processing country], also processes [actual server-log fields].

This supports website delivery, stability and security. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is operating a secure website. Server logs are deleted after [period].

3. Contact form

When you contact us using the form, we process your name, email address and message, together with any phone number and company details you choose to provide. We also store the enquiry language, consent time, processing timestamps and handling status.

We use this information to answer your enquiry, based on your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time using the contact details above. Withdrawal does not affect the lawfulness of processing carried out beforehand.

The required fields and your consent are necessary to submit the form. Phone and company details are optional. Submitting an enquiry does not subscribe you to advertising messages or newsletters.

4. Cookies and security

The website uses “preferred_locale” to remember the language for up to 365 days.

The administration area uses “admin_locale” for language preferences and “admin_session” and “admin_csrf” for sign-in and security. Their lifetimes are up to 365 days and up to seven days respectively.

[Add the applicable legal bases and any required cookie-consent arrangements.]

For spam prevention, a hash derived from your IP address or browser information is processed in memory. Your IP address is not stored with the contact enquiry. This serves our legitimate interest in protecting the form under Article 6(1)(f) GDPR.

Use of the administration area also involves processing account and session information for access security. [Add the legal basis and retention period.]

The current website uses no analytics or advertising trackers. Fonts and images are served locally.

5. Recipients and retention

Access is limited to authorised people and service providers supporting our operations: [add recipients and their roles].

Transfers outside the European Economic Area: [specify countries, recipients and safeguards, including how to obtain them, or confirm that no such transfers occur].

Enquiries and related records are retained for [period or meaningful criteria]. Backups and security data are retained for [periods]. Applicable statutory retention requirements are taken into account.

6. Your rights

Subject to the applicable legal conditions, you have rights of access, correction, deletion, restriction and data portability. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. You may withdraw consent at any time.

You can complain to a data protection supervisory authority, particularly where you live, work or believe an infringement occurred.

Authority responsible for the operator: [name, address and website].

We do not make automated decisions producing legal or similarly significant effects.

Last updated: [date]