Privacy Policy
Effective from: 19 October 2026
This policy explains how I process your personal data when you use the website syntai.studio and when you communicate with me. Processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, “GDPR”) and the Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.
1. Controller
Petra Jančiarová – sole trader (syntai.studio)
Internátna 688/49, 974 04 Banská Bystrica, Slovakia
Company ID (IČO): 57924821
Tax ID (DIČ): 1079081223
Email: info [at] syntai [dot] studio
I have not appointed a Data Protection Officer as this is not required under the GDPR. For any data protection matter, please contact me at the email address above.
2. Contact form and email communication
Data I process
- name, email address, area of interest and the text of your message (and anything you choose to include in it),
- page language, the address of the page the message was sent from and the time of sending, including confirmation of consent,
- for email communication: your email address, the content of the correspondence and any signature details you include.
Please do not include special categories of personal data (e.g. health data) in your message.
Purpose and legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your message, preparing a quote or contract at your request | Art. 6(1)(b) GDPR – steps taken at the request of the data subject prior to entering into a contract |
| Handling other (general) enquiries sent via the form | Art. 6(1)(a) GDPR – your consent given by ticking the checkbox in the form |
| Protecting the form against spam and abuse (hidden check field, fill-time check, limiting the number of messages per IP address) | Art. 6(1)(f) GDPR – legitimate interest in website security |
| Performing a contract and bookkeeping if we start working together | Art. 6(1)(b) and (c) GDPR – performance of a contract and legal obligations (in particular Slovak Act No. 431/2002 Coll. on Accounting) |
Providing your data is voluntary, but I cannot reply without your name, email and message. You may withdraw your consent at any time by emailing info [at] syntai [dot] studio; withdrawal does not affect the lawfulness of processing before withdrawal.
How long I keep the data
- Messages and correspondence that do not lead to a contract: no longer than 12 months after the last communication, then deleted.
- If we work together: for the duration of the contract and then until limitation periods expire (generally 4 years); accounting records for 10 years as required by the Accounting Act.
- Spam protection: your IP address is not stored in readable form – only a one-way cryptographic fingerprint (hash) is kept for up to 1 hour to limit the number of messages.
- Form with errors: if the form fails validation (without JavaScript), the values you entered are stored temporarily on the server for up to 10 minutes so you don’t have to retype them.
3. Visiting the website and technical data
When you visit the website, the hosting provider automatically processes technical data (IP address, date and time, requested page, browser type) in server logs, based on the legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR). These logs are kept according to the hosting provider’s settings, usually for no longer than [TO BE COMPLETED, e.g. 30] days.
Automatic language selection: on your first visit to the home page, the website selects Slovak or English based on the country derived from your IP address by the hosting/CDN provider, or on your browser’s language setting. I do not store your country or IP address; only a technical cookie with the result is saved (see the Cookie policy). Legal basis: legitimate interest in showing content in a suitable language (Art. 6(1)(f) GDPR). You can change the language at any time using the SK/EN switcher.
Fonts are served directly from this website – no data is passed to third parties (e.g. Google Fonts) in the process.
4. Cookies
I use necessary cookies to make the website work. Analytics and marketing cookies are used only with your consent, which you can change at any time via the “Cookie settings” link in the footer. Details are in the Cookie policy.
5. Recipients of personal data
I do not sell your personal data or share it with third parties for marketing purposes. Only the following processors, acting on my behalf under a contract pursuant to Art. 28 GDPR, may have access to it:
- web hosting provider: [TO BE COMPLETED – name and registered office],
- email mailbox provider: [TO BE COMPLETED – name and registered office],
- email sending (SMTP) service, if used: [TO BE COMPLETED or remove],
- accountant/accounting firm, if we work together: [TO BE COMPLETED or remove].
I may also disclose data to public authorities where required by law.
6. Transfers to third countries
I process personal data within the European Union / European Economic Area. Should a processor process data outside the EU/EEA, this happens only on the basis of a European Commission adequacy decision (e.g. the EU-US Data Privacy Framework) or standard contractual clauses under Art. 46 GDPR.
7. Automated decision-making
There is no automated decision-making or profiling that produces legal effects concerning you.
8. Your rights
Under the GDPR (Arts. 15–22) and Act No. 18/2018 Coll. you have the right to:
- access your personal data and obtain a copy,
- rectification of inaccurate or completion of incomplete data,
- erasure (“right to be forgotten”),
- restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email info [at] syntai [dot] studio. I will reply without undue delay and within one month at the latest. If I have reasonable doubts about your identity, I may ask for additional information.
9. Supervisory authority
If you believe that the processing of your personal data infringes the GDPR or Act No. 18/2018 Coll., you have the right to lodge a complaint (a petition to initiate proceedings) with the supervisory authority:
Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic)
Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovakia
Phone: +421 2 3231 3214
Email: statny [dot] dozor [at] pdp [dot] gov [dot] sk
Web: dataprotection.gov.sk
You may also lodge a complaint with the supervisory authority in the EU Member State of your habitual residence or place of work.
10. Changes to this policy
I may update this policy, for example when services or legislation change. The current version, with its effective date, is always published on this page.