1. Data controller
The controller of personal data processed via this website is Filip Lopatka, a self-employed individual operating under a Slovak business license (živnostenské oprávnenie).
2. What data I collect
I only process data you provide voluntarily through the contact or brief form:
- Identification: first name, last name, optionally company name.
- Contact: e-mail address, optionally phone.
- Message content: project description you submit through the form.
- Server technical data: IP address, browser type, access time — kept short-term in hosting access logs for security purposes.
3. Purpose and legal basis
I process your personal data solely to respond to your inquiry, prepare a quote, and potentially conclude an agreement to deliver web services.
Legal bases under GDPR (Art. 6(1)):
- (b) — pre-contractual measures and contract performance,
- (f) — legitimate interest (web security via access logs).
I do not run marketing, newsletters, or profiling. I never sell or transfer data outside the EU.
4. Retention period
- Form submissions: 3 years from last communication (Slovak Civil Code statute of limitations).
- Accounting records (if a contract is concluded): 10 years (Act 431/2002 on Accounting).
- Server access logs: 30 days.
5. Recipients of data
I do not share data with third parties except for the following processors providing technical services:
- Web hosting: WebSupport, s.r.o., Karadžičova 12, 821 08 Bratislava, Slovakia. Business ID: 36 421 928 (server located in the Slovak Republic).
- E-mail server: WebSupport, s.r.o. (same provider as hosting).
- Contact form processor: Not applicable — the contact form uses no third-party processor; messages are sent directly via your own e-mail client to my address.
I have GDPR-compliant Data Processing Agreements (DPA) with all of them.
6. Your rights
As a data subject, under GDPR (Art. 15–22) you have the right to:
- access your data,
- rectification of inaccurate data,
- erasure ("right to be forgotten"),
- restrict processing,
- data portability,
- object to processing,
- file a complaint with the supervisory authority (Slovak Data Protection Office, dataprotection.gov.sk).
To exercise any of these rights, e-mail me at filip@lopatka.sk. I respond within 30 days.
7. Cookies and tracking
This website does not use tracking cookies, analytics, or advertising systems.
Only technical localStorage values needed for the interface to work properly
(e.g. cursor preference) are stored in your browser. These never leave your browser and
are not transmitted to any server.
If I add an analytics tool in the future, I'll update this document and add a cookie consent banner if needed.
8. Updates to this document
I may update this document if legislation or processing scope changes. The current version is always published at this URL with the last-updated date at the top.