Back to homepage

Privacy policy, cookies and GDPR

1. Data controller

The controller of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as „GDPR“) and Act No. 18/2018 Coll. on the protection of personal data is Webiant s. r. o. (hereinafter referred to as „the controller“).

2. What data we process

2.1 Project enquiry form

Name, email, chosen solution (or “Help me choose”) and project description are required. Company, phone, indicative budget and timeline are optional. You provide this information directly; the form cannot be processed without the required fields. You may also contact us by email or phone.

The enquiry is saved in a private WordPress inbox and emailed to info@webiant.sk. Only an authorised website administrator can access it. The form does not accept attachments. Do not submit passwords, health information or other sensitive personal data. Enquiry content is not sent to AI analysis or advertising systems.

Spam protection uses a hidden field, a signed timed token, duplicate protection and submission limits. The connection IP and email are converted into keyed cryptographic fingerprints for rate checks; the guard records do not store their original values or the message content. Guard counters expire within 25 hours and are removed during scheduled hourly maintenance. The form uses no external CAPTCHA or tracking cookies.

2.2 Other correspondence and services

When providing services, we may process contact, contract and billing details necessary for the specific engagement. The hosting service also processes connection logs, such as IP address, time and requested URL, for server operation and security. These are separate from the form inbox.

3. Purpose and legal basis

Enquiry data is used to reply, clarify the brief and prepare a proposal. Where you request steps before entering a contract to which you will be a party, the basis is Art. 6(1)(b) GDPR. Correspondence with a company representative or a general business enquiry relies on the legitimate interest under Art. 6(1)(f): responding to requested business communication.

Protecting the form and website against abuse relies on legitimate interest under Art. 6(1)(f). Contract performance relies on Art. 6(1)(b); required accounting and tax processing on Art. 6(1)(c). Analytics requires your consent. Sending an enquiry does not subscribe you to a newsletter. We do not make automated decisions or profile you to decide whether to accept a project.

4. Retention periods

Unsuccessful enquiries and related email correspondence are retained for 6 months after the last contact. The separate working copy in WordPress is scheduled for automatic deletion 6 months after receipt, through regular website maintenance. Continuing engagements are recorded separately from this temporary copy.

For concluded contracts, necessary records are retained during the engagement and afterwards only for statutory periods or as needed to establish or defend legal claims. Accounting and tax records are retained for the periods required by applicable law. Hosting logs and backups are managed by the provider under the contracted retention settings; we do not use them for routine enquiry handling, and the configured deletion rules apply after restoration. Cookie periods are described below.

5. Cookies

Cookies are small files stored in your browser. This website uses essential cookies and, only with your consent, optional analytics cookies. Rejecting analytics does not prevent you from using the website.

5.1 Essential cookies

The webiant_consent cookie remembers your accepted or rejected categories for 182 days. It is stored on this website and is not sent to Google. WordPress also uses authentication and security cookies when you sign in; these are not used to measure ordinary visitors.

5.2 Analytics cookies

Google Analytics is integrated through Site Kit by Google to measure visits and website usage. The Google tag and measurement scripts load only after you allow the Analytics category. They remain blocked before your choice and after rejection. Advertising storage, advertising user data and ad personalization remain denied; marketing cookies are currently not enabled.

Google may receive technical and usage data such as the visited URL, browser/device information and measurement identifiers. See how Google uses data from partner sites and Google Analytics cookie details.

5.3 Change or withdraw your choice

Open Cookie settings in the footer or the cookie button. You can accept all available optional cookies, reject them or save your selection. Closing the preferences window does not grant consent. If you withdraw analytics consent, the accessible analytics cookies are removed and the page reloads without measurement. You can also delete or block cookies in your browser.

6. Your rights

Under GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) – you have the right to know what data we process about you
• Right to rectification (Art. 16 GDPR) – if your data is incorrect or incomplete
• Right to erasure (Art. 17 GDPR) – „right to be forgotten“ if there is no further reason for processing
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR) – obtaining data in a structured format
• Right to object (Art. 21 GDPR) – against processing based on legitimate interest
• Right to withdraw consent (Art. 7(3) GDPR) – if processing is based on consent

To exercise your rights, contact us at info@webiant.sk. We will respond to your request without undue delay, within one month. Where legally justified, the period may be extended by a further two months; we will explain the extension within the first month. Rights apply subject to the conditions set out in GDPR.

7. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss or misuse. The website uses encrypted connection (HTTPS/TLS).

If you consent to analytics, a successful enquiry may be counted as a generate_lead event. The event contains only the form name; it does not include your name, email, message, budget or enquiry reference.

8. Data recipients and third parties

We do not sell your data to third parties. Data may only be shared with:

• Websupport, s.r.o. – website hosting and email provider; to operate the website, store enquiries and transmit correspondence
• Accounting firm (for the purpose of bookkeeping)
• State authorities (if required by law)

If you allow analytics, Google is also a recipient of measurement data. Processing by Google may involve countries outside the European Economic Area. See Google’s information about data transfer frameworks.

9. Supervisory authority

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the supervisory authority:

10. Document changes

This document may be updated periodically. We will inform you of significant changes through the cookie banner or a notice on the website.

Last updated: October 7, 2026