Privacy policy

If you are our customer, newsletter subscriber, or a website visitor, you entrust us with your personal data. We are responsible for its protection and security. It is important to us that your personal data is safe.

This policy explains how we protect your personal data and describes your rights under the General Data Protection Regulation (GDPR).

Data controller

WebTeil Studio operates the website www.webteil-studio.sk.

Statement

As the controller of your personal data, we comply with our legal obligations. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Act No. 18/2018 Coll. on Personal Data Protection, as amended.

We declare that:

we process your personal data only when we have a valid legal basis, such as legitimate interest, performance of a contract, a legal obligation, or your consent,

we provide the information required by Article 13 of the GDPR before processing begins,

we enable you to exercise your rights under the Personal Data Protection Act and the GDPR.

Purpose of processing and scope of personal data

We process the personal data you provide for the following purposes:

Contractual relationships and service provision

first name, last name, permanent address, and email address; if you are a sole trader, we also process your business name, place of business, company registration number, VAT number, and tax identification number

Accounting

If you are our customer, we need your billing details to meet our legal obligations to issue and retain tax documents.

Delivery of marketing information

We use personal data such as your name and email address for direct marketing and commercial communications.

If you are our customer, we do so on the basis of our legitimate interest, because we reasonably assume you are interested in our updates.

If you are not our customer, we send newsletters only on the basis of your consent.

In both cases, you can unsubscribe using the link included in every email.

We retain your personal data for the duration of limitation periods unless the law provides for a longer retention period or we have stated otherwise in specific cases.

Security and protection of personal data

We protect personal data using appropriate technical and organizational measures designed to prevent unauthorized use, damage, loss, or destruction.

Our websites use HTTPS. Payments are processed through secure payment gateways, and the data we store is protected by access controls and encryption.

Customer testimonials and references

We publish your testimonial or reference only with your explicit consent, provided by replying to a separate email or submitting a form on our website. We publish photographs only with your consent. At your request, we will remove the photograph and reference and delete the related data.

Sharing personal data with third parties

Our employees and contractors may access your personal data when necessary. They are bound by confidentiality and trained in secure data handling.

For processing activities that we cannot perform ourselves, we use specialized service providers and data processors that operate in accordance with the GDPR.

These are providers of the following platforms and services:

Google – Google Analytics

Transfers of data outside the European Union

We process data exclusively within the European Union or in countries that ensure an adequate level of protection based on a decision of the European Commission.

Your rights in relation to personal data protection

In connection with personal data protection, you have a number of rights. If you would like to exercise any of these rights, please contact us by email.

Right to information

You have the right to information about how and why we process your personal data. This policy provides that information.

Right of access

You can ask us at any time which personal data we process and why. We will respond within 30 days.

Right to rectification and update

If anything changes on your side, or if any of your personal data is outdated or incomplete, you have the right to have your personal data corrected and updated.

Right to restriction of processing

You can exercise the right to restriction of processing if you believe we process inaccurate data about you, you believe we process unlawfully but you do not want all data deleted, or if you have objected to processing.

You can restrict the scope of personal data or the purposes of processing.

Right to erasure

You have the right to request the erasure of your personal data. When the request applies, we will delete the relevant data from our systems and instruct our processors to do the same. We will process the request within 30 days.

In some cases, a legal obligation requires us to retain certain information, such as issued tax documents, for a specified period. We will delete all data that is not subject to a retention obligation and inform you by email when the process is complete.

Complaint to the Office for Personal Data Protection

If you believe we are not handling your data lawfully, you may lodge a complaint with the Office for Personal Data Protection. We would appreciate the opportunity to review and resolve your concern first.

Unsubscribing from newsletters and commercial communications

If you are our customer, we may send you emails with articles, inspiration, and information about our products and services on the basis of our legitimate interest.

If you are not a customer, we send these emails only with your consent. In both cases, you can unsubscribe using the link included in every email.

Confidentiality

Our employees and contractors who process personal data must keep both the data and related security measures confidential. This obligation continues after their contractual relationship with us ends. We will not disclose your personal data to another third party without your consent unless the law permits or requires it.

This privacy policy applies from 1 January 2025 and replaces the previous version.