1. Data controller
The controller of personal data processed via this website is Filip Lopatka, a self-employed individual operating under a Slovak business license (živnostenské oprávnenie).
2. What data I collect
I only process data you provide voluntarily through the contact or brief form:
- Identification: first name, last name, optionally company name.
- Contact: e-mail address, optionally phone.
- Message content: project description you submit through the form.
- Server technical data: IP address, browser type, access time — kept short-term in hosting access logs for security purposes.
3. Purpose and legal basis
I process your personal data solely to respond to your inquiry, prepare a quote, and potentially conclude an agreement to deliver web services.
Legal bases under GDPR (Art. 6(1)):
- (b) — pre-contractual measures and contract performance,
- (f) — legitimate interest (web security via access logs).
I do not run marketing, newsletters, or profiling. I never sell or transfer data outside the EU.
4. Retention period
- Form submissions: 3 years from last communication (Slovak Civil Code statute of limitations).
- Accounting records (if a contract is concluded): 10 years (Act 431/2002 on Accounting).
- Server access logs: 30 days.
5. Recipients of data
I do not share data with third parties except for the following processors providing technical services:
- Web hosting: WebSupport, s.r.o., Karadžičova 12, 821 08 Bratislava, Slovakia. Business ID: 36 421 928 (server located in the Slovak Republic).
- E-mail server: WebSupport, s.r.o. (same provider as hosting).
- Contact form processor: Not applicable — the contact form uses no third-party processor; messages are sent directly via your own e-mail client to my address.
I have GDPR-compliant Data Processing Agreements (DPA) with all of them.
6. Your rights
As a data subject, under GDPR (Art. 15–22) you have the right to:
- access your data,
- rectification of inaccurate data,
- erasure ("right to be forgotten"),
- restrict processing,
- data portability,
- object to processing,
- file a complaint with the supervisory authority (Slovak Data Protection Office, dataprotection.gov.sk).
To exercise any of these rights, e-mail me at filip@lopatka.sk. I respond within 30 days.
7. Cookies, analytics and tracking
This website uses no tracking cookies or advertising systems and shares no data with ad networks — so it requires no cookie consent banner.
For anonymous traffic statistics I use Umami, an analytics tool that sets no cookies and stores no personal identifiers. It collects only aggregated data: pages visited, referrer, approximate country, and device/browser type. Your IP address is processed only transiently to derive the country and is not stored. This data cannot identify you individually or track you across other sites. I optionally measure a few non-personal events (e.g. starting or submitting the enquiry form, along with the project type and budget — without your name or email).
The legal basis for this processing is legitimate interest in operating, securing and improving the website (Art. 6(1)(f) GDPR).
8. Updates to this document
I may update this document if legislation or processing scope changes. The current version is always published at this URL with the last-updated date at the top.