Who we are
The controller of your personal data is Site Project s. r. o., Konvalinková 5009/9, 926 01 Sereď, Slovakia, company ID (IČO): 55 870 341, tax ID (DIČ): 2122137523, registered in the Commercial Register of the District Court Trnava, section Sro, file no. 55605/T.
For anything related to personal data, reach us at hello@thesiteproject.com or at +421 919 381 955. We have not appointed a data protection officer; the law does not require one at our scale of processing.
The supervisory body for our business is the Slovak Trade Inspection (SOI), Inšpektorát SOI so sídlom v Trnave pre Trnavský kraj, Pekárska 23, 917 01 Trnava, Slovakia.
What data we process and why
A message via the contact form or email
When you write to us, we process your name, email address and the contents of the message. They serve one purpose: replying to you and agreeing on the next steps.
The legal basis is negotiation before entering into a contract (Art. 6(1)(b) GDPR); for other messages it is our legitimate interest in responding (Art. 6(1)(f) GDPR).
Form submissions are stored in the website database and also delivered to us by email. We keep them for at most 24 months after the matter is settled.
Traffic measurement
If you allow it in the cookie bar, we use Google Analytics 4 for traffic statistics: which pages are read and where visits come from. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via Cookie settings in the site footer.
Without consent, the measurement scripts do not load at all. Details are in the cookie policy.
Technical operation
Every visit produces standard technical logs on the hosting side (IP address, request time, browser type). They are necessary for secure operation and protection against attacks (Art. 6(1)(f) GDPR) and are kept short-term.
Who we entrust data to
The website runs on services of vetted providers who process data on our instructions as processors:
- Vercel Inc. (USA): website hosting and media storage; the website’s functions run in an EU region (Frankfurt),
- Neon, LLC, an affiliate of Databricks, Inc. (USA): the website database, including contact form submissions, stored in the EU (AWS Frankfurt),
- Resend (Plus Five Five, Inc., USA): outgoing website emails; emails are sent from an EU region (Ireland), the service’s operational data is stored in the USA,
- Google Ireland Ltd. (Ireland): Google Analytics, only with your consent,
- Websupport s. r. o. (Slovakia): the domain’s email mailboxes.
We do not sell data and do not share it with third parties for their own purposes.
Transfers outside the EU
The website database and functions run in the EU (Frankfurt) and emails are sent from the EU (Ireland). Our providers are, however, US companies: Resend stores the service’s operational data in the USA and Google Analytics also processes data in the USA. These transfers are covered by the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, under which Vercel, Databricks (Neon), Plus Five Five (Resend) and Google are actively certified, or by standard contractual clauses.
How long we keep the data
- contact form submissions: at most 24 months after the matter is settled,
- user-level traffic measurement data: at most 14 months (aggregated statistics not tied to an individual visitor may be kept longer),
- hosting technical logs: usually up to 30 days.
Your rights
Under the GDPR you have the right to:
- access your data and obtain a copy,
- have inaccurate data corrected,
- request erasure,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
Just write to hello@thesiteproject.com; we reply within 30 days at the latest.
If you are not satisfied with how we handle your data, you can contact the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. We would appreciate it if you talked to us first.
What we do not do
- no automated decision-making or profiling,
- no newsletters or unsolicited marketing emails,
- no selling of data.
We update this policy as the website evolves. The version published on this page is always the one in force.