Privacy Policy

Who processes your data

The controller under the GDPR is:

You can contact me about anything concerning your personal data at info@it-sp.sk.

Contact form

What data

Name, email address, subject and message body — only what you fill in yourself.

For what purpose

Replying to your enquiry and any follow-up communication about my services.

Legal basis

Legitimate interest in replying to an enquiry you initiated yourself (Art. 6(1)(f) GDPR).

For how long

The message is not stored in a database. It is sent by email to info@it-sp.sk and stays in my mailbox until the enquiry is resolved, for at most 24 months. If the enquiry leads to a contract, the records are kept for 10 years under tax and accounting law.

Form abuse protection

To keep bots out of the form, I count submissions per IP address (a limit of 3 messages per hour). This counter is short-lived and held only in the server cache. It is deleted after an hour and never linked to the content of your message. The legal basis is the legitimate interest in protecting the service from abuse.

Visitor counter

The site has a unique-visit counter. Your IP address is not stored. Only an irreversible cryptographic digest of it is kept (HMAC-SHA-256 with a secret key outside the source code). It is used solely so the same visit is not counted twice. The digest tells me nothing about your IP address, location or anything else about you. It is not linked to any other data. The digest is deleted automatically 90 days after your last visit.

Cookies and local storage

This site uses no cookies and no browser storage. It contains no third-party analytics or advertising tools. The language of a page is set only by its address (/ or /en), so nothing needs to be remembered.

Who the data is shared with

I do not sell, rent or share your data with third parties for marketing purposes. Only the hosting provider and the email provider have access. Even they only have it to the extent needed to run the site and deliver mail. No data is transferred outside the European Economic Area.

Your rights

Under the GDPR you have the following rights against me as the controller:

• the right of access to the data I process about you, and to a copy of it
• the right to rectification of inaccurate or incomplete data
• the right to erasure (the "right to be forgotten")
• the right to restriction of processing
• the right to data portability to another controller
• the right to object to processing based on legitimate interest
• the right to lodge a complaint with the Slovak Data Protection Authority

You can exercise any of these rights by emailing info@it-sp.sk. I will respond within one month of receiving your request at the latest.

The supervisory authority is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, Slovakia.

Changes to this document

If the way I process data changes, I will update this document and change the date shown below. I recommend checking it again on a return visit.