01
Data controller
Vladimír Köppel – Webbusters
Company ID: 54656907 · Tax ID: 1079397627
Perlová 3, 851 10 Bratislava (Jarovce), Slovakia
E-mail: info@webbusters.sk
Phone: +421 911 176 896
Vladimír Köppel – Webbusters processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data and on amendments to certain acts.
02
Purposes of personal data processing
We process your personal data solely for the following purposes:
| Purpose | Description |
|---|---|
| Contact form | Processing and responding to enquiries submitted through the contact form on the website. |
| Contract performance | Concluding and performing contracts for website creation services and related digital services. |
| Legal obligations | Fulfilling obligations arising from applicable legislation (accounting, tax obligations). |
| Legitimate interest | Protection of the controller's rights, website security, fraud prevention (reCAPTCHA). |
| Marketing (with consent) | Sending commercial communications and newsletters — only with the data subject's explicit consent. |
03
Legal basis for processing
Each processing of personal data is based on one of the following legal bases under Art. 6 GDPR:
| Processing | Legal basis | GDPR Article |
|---|---|---|
| Contact form | Legitimate interest / contract performance | Art. 6(1)(b), (f) |
| Service contract | Contract performance | Art. 6(1)(b) |
| Accounting and taxes | Legal obligation | Art. 6(1)(c) |
| Newsletter | Consent of the data subject | Art. 6(1)(a) |
| Analytics cookies | Consent of the data subject | Art. 6(1)(a) |
| reCAPTCHA | Legitimate interest | Art. 6(1)(f) |
04
Personal data retention period
| Data category | Retention period |
|---|---|
| Contact enquiries (form) | 24 months from the last contact |
| Contract documentation | 10 years (legal obligation — Act No. 431/2002 Coll.) |
| Accounting documents and invoices | 10 years from the end of the accounting period |
| Marketing consent | Until consent is withdrawn, max. 3 years |
| Log records (IP addresses) | 90 days |
| Cookies — essential | Until end of session or max. 1 year |
| Cookies — analytics | Max. 2 years |
After the retention period expires, personal data is securely deleted or anonymized.
05
Disclosure of data to third parties
We may share your personal data with the following categories of recipients, only to the extent necessary:
| Recipient | Reason | Location |
|---|---|---|
| Websupport, s.r.o. | Hosting services, domain management | Slovakia (EU) |
| SK-NIC, a.s. | Registration of .sk domains | Slovakia (EU) |
| Google LLC | reCAPTCHA, Google Analytics (with consent only) | USA* |
| State authorities | Based on a legal obligation | Slovakia (EU) |
* Transfers to the USA are carried out on the basis of the European Commission's Standard Contractual Clauses (SCC) in accordance with Art. 46(2)(c) GDPR. Google LLC is certified under the EU-U.S. Data Privacy Framework.
We do not sell your personal data to third parties for marketing purposes.
06
Cookies and tracking technologies
Our website uses cookies in accordance with Act No. 452/2021 Coll. on Electronic Communications. We use the following categories of cookies:
You can change your cookie preferences at any time by clicking the "Cookie settings" button in the page footer or directly in your browser.
07
Google reCAPTCHA v3
To protect the contact form against automated abuse (spam, bot attacks) we use the Google reCAPTCHA v3 service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
reCAPTCHA v3 works in the background without user interaction — it analyses behaviour on the site (mouse movement, time on page, interactions) and assigns a so-called risk score (0.0 – 1.0). Your IP address and other relevant data are sent to Google.
The legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) — protection of the website against abuse.
More information: Google Privacy Policy · Google Terms of Service
08
Your rights as a data subject
In accordance with the GDPR (Art. 15–22) you have the following rights:
To exercise your rights, contact us at info@webbusters.sk. We will respond to your request within 30 days of its receipt.
09
Personal data security
To protect your personal data we implement appropriate technical and organizational measures in accordance with Art. 32 GDPR:
• Transport encryption — all communication takes place over HTTPS/TLS
• CSRF protection — the contact form is protected by tokens
• reCAPTCHA — protection against automated abuse
• Rate limiting — limiting the number of form submissions
• Access rights — only authorized persons have access to the data
• Backups — regular encrypted backups
In the event of a security incident that could affect your rights, we will inform you in accordance with Art. 34 GDPR.
10
Contact and responsible person
For any questions regarding personal data protection, contact us:
Responsible person: Vladimír Köppel
Business name: Vladimír Köppel – Webbusters
E-mail: info@webbusters.sk
Phone: +421 911 176 896
Address: Perlová 3, 851 10 Bratislava (Jarovce), Slovakia
Supervisory authority:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava
dataprotection.gov.sk
This privacy policy is effective from 1 June 2025 and may be updated. We will inform you of any material changes via the website.