Privacy policy — SPACE Solutions

Effective from 30 September 2026

Who processes your data

The controller is SPACE Solutions s. r. o., Lermontovova 911/3, 811 05 Bratislava, Slovakia, company ID 55 333 834. For anything related to personal data, reach us at director@spacesolutions.sk or +421 918 483 891. We have not appointed a data protection officer — we do not process data on a large scale or handle special categories of data.

What data we process

We collect only what you send us and the technical data needed to run the site. We do not profile you and we make no automated decisions.

From the mini audit form: name, company name, email, phone (optional), project type, your message and the address of the site you want measured. Measurement runs against the publicly available page at that address — nothing is logged into or bypassed.
From the tools at /nastroje: website address, email and phone, the name of the tool you used, and the result of the SMS code phone check. When ordering the full audit, also billing details (name or company, address, company and tax IDs if given).
From campaign forms, additionally: website address, approximate revenue or budget and expected timing — depending on which form you fill in.
From further communication: emails, calls and notes from those calls.
Technically: the IP address a form submission came from. We use it to limit how many submissions can be sent, and for an audit it is written to the server operations log together with the address of the measured site.
With your consent: website usage data from analytics (see the cookies page).

Why we process it and on what legal basis

Answering your enquiry and preparing a quote — pre-contractual steps under Art. 6(1)(b) GDPR. Without this data we cannot reply.
Performing the contract and communicating during the project — Art. 6(1)(b) GDPR.
Invoices and accounting records — legal obligation under Art. 6(1)(c) GDPR.
Protecting the form from abuse (submission rate limiting) — legitimate interest under Art. 6(1)(f) GDPR.
Traffic measurement — solely on the basis of your consent under Art. 6(1)(a) GDPR. Without consent, no measurement runs.

How long we keep it

An enquiry that does not turn into a project: 3 years from the last communication, then the email thread is deleted.
Client data and project communication: for the duration of the engagement and 3 years after it ends, for possible claims.
Accounting records: 10 years, as required by Slovak accounting law.
Contact details from the tools at /nastroje: like an enquiry, 3 years from the last communication — in email and in a ClickUp task.
IP address on form submission: only in server memory for rate limiting. For an audit it stays, with the measured site address, in the operations log, which is rotated automatically. It is never written to a database.
Your analytics choice: stored in your own browser until you change it.
Mini audit result (score and findings): not stored anywhere — not on the website, not in the audit service. It is generated once when you submit the form and emailed to you as a PDF; if the PDF fails to send, we still have your enquiry and follow up manually.

Who receives the data

We do not sell data and we do not pass it on for third-party marketing. It reaches only those without whom the site and the company would not work:

The provider of the server running the website and its forms, and the email provider that delivers your enquiry to us and the confirmation to you.
Hetzner Online GmbH (Germany) — server of the audit service that measures the given site. It receives the site address, your email and your IP address. The PDF result is emailed to you via Websupport, s. r. o.
Twilio Inc. — verifying your phone number with an SMS code before a tool runs.
ClickUp (Mango Technologies, Inc.) — our internal record of enquiries: contacts from the tools and interest in the fix package.
Stripe Payments Europe, Ltd. — card payment for the full audit, if you choose it. You enter card details directly with Stripe; we never see them.
Google Ireland Ltd. — traffic measurement via Google Analytics 4, only if you consented to it.
Calendly, LLC — call booking (see the cookies page).
Our external accountants and, where needed, a lawyer — to the extent required for invoicing and legal services.

Transfers outside the European Union

Twilio, ClickUp and Calendly are US-based companies. The transfer is covered by the European Commission Standard Contractual Clauses, or the EU–US Data Privacy Framework. Fonts are self-hosted, so visiting the site sends no request to Google Fonts or any other external service.

Cookies and local storage

Without your consent we use no analytics or marketing cookies. Details, and the option to change your choice, are on the separate cookies page.

How we protect the data

The site is served over HTTPS only.
Form contents are not stored in any database on the website side — they are emailed to the company inbox.
Only the people who handle enquiries have access to that inbox, and they are bound by confidentiality.
The form is protected against automated spam and by a submission rate limit per address.

Your rights

As a data subject you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. You can withdraw your analytics consent at any time without affecting the lawfulness of processing before the withdrawal.

How to exercise them

Write to director@spacesolutions.sk or to our registered address. We reply within one month; for a complex request the deadline may be extended by up to two further months, and we will tell you in advance. If you are not satisfied, you can lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava.

Changes to this policy

When a tool that processes personal data is added to the site, we add it here before it goes live. The current version is always at this address, together with its effective date.