Legal
Privacy Policy
To complete before publishing: replace everything in [square brackets] with your real details, then delete this note. This text is a template, not legal advice.
Last updated: [date]
1. Who we are
This website is operated by [company or sole trader name], [street and number], [postcode] Dunajská Streda, Slovakia, company ID (IČO): [IČO], tax ID: [DIČ / IČ DPH] (“Chroma Creative Studio”, “we”). We are the controller of your personal data. Contact: info@chromastudio.sk.
2. What data we process and why
| Situation | Data | Purpose and legal basis | How long |
|---|---|---|---|
| Contact form | Name, email, selected services, budget, message | Answering your enquiry and preparing an offer — steps before a contract (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a)) | 12 months after our last communication, longer if a contract follows |
| Email and WhatsApp | Your contact details and the content of your messages | Communicating with you — Art. 6(1)(b) and our legitimate interest (Art. 6(1)(f)) | As above |
| Website statistics (Google Analytics 4) | Pseudonymous usage data: pages visited, device, browser, approximate location | Improving the website — only with your consent (Art. 6(1)(a)) | Up to 14 months |
| Clients | Billing and project data | Performing the contract and legal obligations (Art. 6(1)(b) and (c)) | As required by Slovak accounting and tax law |
3. Cookies
Analytics cookies are only used after you click “Accept” in the cookie banner. You can change your choice at any time via Cookie settings in the footer.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| ch_consent | chromastudio.sk | Stores your cookie choice | 6 months |
| pll_language | chromastudio.sk | Remembers the language version | 1 year |
| _ga, _ga_* | Google Analytics statistics (only after consent) | Up to 2 years | |
| wordpress_*, wp-settings-* | chromastudio.sk | Only for logged-in site administrators | Session / 1 year |
4. Who receives your data
- Web hosting: [hosting provider, country]
- Email: [email provider]
- Google Ireland Ltd. (Google Analytics) — data may be transferred to the USA under the EU–US Data Privacy Framework
- WhatsApp Ireland Ltd. (Meta), if you contact us via WhatsApp
We never sell your personal data.
5. Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time (this does not affect processing before the withdrawal). Write to us at info@chromastudio.sk.
You can also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk) or with the supervisory authority in your EU country.
6. Security
The website uses an encrypted (HTTPS) connection, access to the administration is limited and protected, and we keep regular backups.
7. Changes
We may update this policy from time to time. The current version is always published on this page.