Legal information
Privacy Policy
Information under Art. 13 GDPR · effective from 3 October 2026
Protecting your personal data matters to us. We want to be transparent about what data we process, why and for how long.
Controller: WebSys, s.r.o., Psíky 8, 909 01 Skalica, Slovakia, Company ID (IČO): 36757462
Contact: info@websys.sk, +421 903 251 943
1. What data we process and why
Contact form and email
When you contact us, we process your name, email address and the text of your message, and your phone number if you choose to provide it. We use the data to reply to your enquiry or prepare a quote (legal basis: Art. 6(1)(b) GDPR – steps taken at your request before entering into a contract). We keep it while handling your enquiry and afterwards only as long as necessary for any further communication about it. Providing the data is voluntary, but without it we cannot reply to you.
Providing services and invoicing
If we start working together (website, graphic design, photography, photo studio rental), we process the contact and billing details needed to perform the contract (Art. 6(1)(b) GDPR). We keep accounting records for 10 years as required by Slovak Accounting Act No. 431/2002 (Art. 6(1)(c) GDPR).
Website security and spam protection
When you visit the website, the server and a security plugin automatically log technical data, in particular your IP address and browser type, to protect the website against attacks. When you submit the form, we check whether it is spam. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).
2. Who has access to the data
We do not sell your data or share it for marketing purposes. Access is limited to people who need it for their work (internal administration, accounting) and to these processors:
Contabo GmbH (Germany, EU) – operation of the server running the website and email. Internal processing and backups also take place on our own servers in Skalica.
Automattic Inc. (USA, Akismet service) – spam checking. When you submit the form, your name, email, message text, IP address and browser data are sent to it.
Defiant Inc. (USA, Wordfence plugin) – protecting the website against attacks; it may process IP addresses to verify threats.
For both, transfers to the USA are safeguarded by Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).
3. Cookies, fonts and videos
We only use strictly necessary technical cookies, no analytics or marketing cookies. Details are in our Cookie Policy.
We load fonts and videos directly from our own server, so during a normal visit your IP address is not passed to third parties (such as Google).
4. Automated decision-making
We do not carry out any automated decision-making or profiling that would have legal effects on you. Automatic spam checking only filters out unsolicited messages.
5. Your rights
You can exercise your rights at any time by emailing info@websys.sk. You have the right:
of access – to know what data we hold about you and get a copy,
to rectification – if the data is inaccurate or incomplete,
to erasure – if it is no longer needed and the law does not require us to keep it,
to restriction of processing – for example while its accuracy is being checked,
to data portability – to receive the data you provided to us in a commonly used format,
to object – to processing based on legitimate interest.
We will respond to your request without undue delay and within one month at the latest.
6. Complaints
If you believe we are breaching the rules when processing your data, please write to us first at info@websys.sk and we will put it right straight away. You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov SR (Office for Personal Data Protection of the Slovak Republic), Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk, or with the data protection authority in your country of residence.