Privacy policy

1. Data Controller

We have not appointed a Data Protection Officer. For data protection matters, please contact us directly at info@studiotm.sk.

2. What Data We Process

• Contact form: name, email address, phone number (optional), the selected service and the message text.
• Newsletter: email address, the time of subscription and the time of its confirmation.
• Form security data: when a form is submitted, a pseudonymised identifier derived from the IP address (from which the IP address cannot be recovered), the submission time and the result of spam filtering.
• Server logs: IP address, time of access, the requested page and browser information.
• Google Analytics: analytical data about your visit, only with your consent.

Providing data is voluntary. However, without an email address or phone number we will not be able to reply to your message.

3. Purposes, Legal Basis and Retention

Replying to your enquiry and preparing a quote

• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Retention: up to 2 years from the last communication, after which we delete the data. If an order follows, accounting and tax records are kept for the period required by accounting and tax law.
• We may send you an automatic confirmation that your message was received.

Newsletter

• Legal basis: your consent (Art. 6(1)(a) GDPR).
• Retention: until you unsubscribe or withdraw your consent.

Protection against spam and website security

• Purpose: protecting the website and third parties against automated misuse of our forms.
• Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• Messages held back by the filter are stored in full so that we can check whether a genuine message was held back by mistake.
• Retention: up to 90 days, after which they are deleted automatically.

Server logs

• Kept by the hosting provider for the security and operation of the server.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Retention: only as long as necessary, in line with the provider's rules.

Google Analytics

• Legal basis: your consent (Art. 6(1)(a) GDPR). Activated only after you give consent.

4. Cookies

Name	Purpose	Expiry
stm_cookie_consent	Saves your cookie choice	6 months
PHPSESSID	Session (language, form)	Session
lang	Remembers language preference	30 days
stm_viewed_items	Portfolio view counter (no personal data)	24 hours
stm_shared_items	Portfolio share counter (no personal data)	24 hours
stm_liked_items	Remembers liked portfolio items (no personal data)	10 years
nl_subscribed	Remembers that you subscribed to the newsletter (so the popup won't show again)	10 years
nl_closed	Newsletter popup closed with the X button	1 hour
nl_declined	Newsletter declined ("No, thanks")	30 days
_ga, _ga_*	Google Analytics (with consent only)	2 years

5. Recipients and Processors

We do not sell your personal data or share it for marketing purposes. It is processed only by the following providers, acting on our instructions:

• web hosting and email provider (Slovak Republic), including the server's security filters (web application firewall, automatic blocking of repeated attacks);
• Google Ireland Ltd.: Google Analytics (only with consent).

6. Transfers Outside the EU

If you consent to Google Analytics, Google may also process data outside the European Union. Transfers to the USA are based on the European Commission's adequacy decision (EU–US Data Privacy Framework), otherwise on standard contractual clauses (Art. 46 GDPR).

7. Automated Processing

Spam filtering is automated. It does not involve decisions with legal or similarly significant effects (Art. 22 GDPR). Messages held back by the filter are reviewed manually on a regular basis.

8. Your Rights

You have the right:

• to access, rectify, erase and port your data;
• to restrict processing;
• to object to processing based on legitimate interest;
• to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

Send your request to info@studiotm.sk. We will reply within one month of receiving it.

9. Withdrawing Consent

• Cookies: using the “Cookie settings” button in the page footer.
• Newsletter: using the unsubscribe link in every email, or by emailing info@studiotm.sk.

10. Supervisory Authority

If you believe that the processing of your data breaches the law, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

11. Changes

We may update this policy. The current version and the date of the last update can always be found on this page.