Privacy policy

The controller who determines the purposes and means of processing your personal data is:

We have not appointed a Data Protection Officer — the law does not require us to. For data protection matters, please contact us at the e-mail address or phone number above.

We obtain personal data from you only when you send it to us yourself through the contact form on this website. That is:

• full name — so we know who we are replying to,
• e-mail address — to deliver our reply,
• phone number — optional, if you would like us to call,
• the text of your message — including anything you choose to write in it.

Along with the message we also process your IP address, solely to limit the number of submissions from a single device (spam protection). We do not store the IP address in a database, nor do we link it to your identity.

We use the data from the form solely to handle your enquiry — that is, to reply to you, prepare a quote or arrange a site visit. We do not use it for marketing and we do not sell it to anyone.

• Handling your enquiry — the legal basis is your consent under Article 6(1)(a) GDPR, given by ticking the box when you submit the form. Where the enquiry is aimed at concluding a contract, Article 6(1)(b) GDPR (steps prior to entering into a contract) also applies.
• Spam protection — the legal basis is our legitimate interest under Article 6(1)(f) GDPR in keeping the form usable.

We keep messages from the form in our e-mail inbox for 1 year from the point the enquiry is dealt with. If the enquiry leads to a contractual relationship, the retention period is governed by the applicable legislation (accounting and tax law in particular).

The IP address record kept for spam protection expires automatically within one hour.

We do not publish or sell your data. However, so that the website and e-mail work, we use the following processors:

• Vercel Inc. — operation and hosting of this website.
• Resend (Plus Five Five, Inc.) — delivery of the form message to our e-mail inbox.

Both providers may process the data outside the European Economic Area. In that case, the transfer is safeguarded by Standard Contractual Clauses approved by the European Commission.

We may also provide the data to public authorities where the law requires us to do so.

This website stores no cookies and uses no analytics or advertising tools. We do not track your behaviour and we do not profile you. That is why you will not find an annoying cookie banner here either.

Fonts are stored directly on our server, so nothing is downloaded from third-party services when you visit.

In relation to your personal data, the GDPR gives you the following rights:

• right of access — to find out whether and what data we process about you, and to receive a copy,
• right to rectification — to have inaccurate data corrected and incomplete data completed,
• right to erasure (the “right to be forgotten”) — to request deletion where the data is no longer needed,
• right to restriction of processing,
• right to data portability — to receive the data in a machine-readable format,
• right to object to processing based on legitimate interest,
• right to withdraw consent at any time — withdrawal does not affect the lawfulness of processing carried out beforehand.

Exercising any of these rights is simple — just write to us at maros.handzel@icloud.com. We will reply within one month at the latest.

If you believe we are handling your data incorrectly, you may lodge a complaint with the supervisory authority:

We may update this policy from time to time, for example if the way the website works changes. The current version is always available on this page, together with the date it was last updated.