Get Webitu

Privacy policy

1. Controller

The controller responsible for processing personal data on this website (Art. 4(7) GDPR) is:

Michal Valašik
Trieda Hradca Králové 34
974 04 Banská Bystrica
Slovak Republic

Email: contact@webitu.com

IČO (business ID): 44576102
DIČ (tax ID): 1820001260
IČ DPH (VAT ID): SK1820001260 (registered under § 7a of the Slovak VAT Act for cross-border services with reverse charge; not a VAT payer in Slovakia)

2. Visiting this website

This website is built with a strong focus on privacy:

  • It does not set cookies on your device.
  • It does not use analytics or advertising tools.
  • It does not load fonts, scripts or stylesheets from third-party servers.

Only people who log in to edit this website receive a session cookie, which is needed for the login and is deleted when they log out or close the browser.

When you open a page, the web server of our hosting provider automatically processes technical data needed to deliver the website and keep it secure and stable: IP address, date and time of the request, requested address, HTTP status code and browser type.

  • Legal basis: our legitimate interest in the secure, stable and reliable operation of this website (Art. 6(1)(f) GDPR).
  • Retention: Server log files are kept for at most about two days and then deleted automatically. The hosting control panel also creates visit statistics from them (Awstats), which include IP addresses; we do not use them for marketing, and they are deleted automatically after at most three months.

3. Contacting us

When you send us a message through the contact form or by email, we process the information you provide (name, email address, message and the time it was sent) to review and answer your message.

  • Legal basis: our legitimate interest in handling incoming messages (Art. 6(1)(f) GDPR). If your message concerns steps before a contract or the fulfilment of a contract, the legal basis is Art. 6(1)(b) GDPR.
  • Voluntary: providing this information is voluntary, but we need your email address to reply.
  • Retention: messages are deleted automatically after 180 days, unless we need them longer to handle an ongoing matter or because of a legal obligation.
  • Our mailbox: every message from the contact form also reaches our mailbox as an email, like messages you send us by email directly. We delete them there after 180 days at the latest, under the same conditions.

4. Protection against abuse

When you send the contact form or log in to the administration, we store a code calculated from your IP address (a keyed hash, not the address itself) together with the name of the form and the time, so that we can limit repeated attempts.

  • Legal basis: our legitimate interest in protecting this website against spam and abuse (Art. 6(1)(f) GDPR).
  • Retention: these records are deleted automatically after 24 hours at the latest.

5. Processors and transfers outside the EU

This website is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA, on servers in the Netherlands (EU), under Namecheap's terms of service and privacy policy. Namecheap stores and processes the technical data and content of the website for us.

As Namecheap is based in the United States, data such as server logs and messages may be accessed from there, for example for technical support. According to its privacy policy, Namecheap uses the EU Standard Contractual Clauses for such transfers (Art. 46 GDPR).

6. Automated decisions

We do not use automated decision-making or profiling (Art. 22 GDPR).

7. Your rights

Under the GDPR you have the right to:

  • access your personal data (Art. 15 GDPR),
  • have it corrected (Art. 16 GDPR),
  • have it erased (Art. 17 GDPR),
  • restrict its processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object at any time to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

To use these rights, contact us using the details in section 1.

Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live, work or where the alleged infringement took place. In Slovakia this is:

Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic)
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava
Slovak Republic
dataprotection.gov.sk

Last updated: 28 October 2026