Privacy policy
Who processes your data, how we use it and how to exercise your rights.
Last updated: August 2026
Data controller
The controller of personal data under Regulation (EU) 2016/679 of the European Parliament and Council on the protection of natural persons with regard to processing personal data (GDPR) is:
Company name: Pexelo s.r.o.
Registered office: Viničná 3207/1A, 900 31 Stupava, Slovak Republic
Company ID: 56752261
Email: michal@pexelo.com
Phone: +421 951 984 162
The controller is responsible for processing personal data in accordance with applicable Slovak law and GDPR.
Personal data we process
We only process data necessary for the purpose for which it was collected. We never sell your data to third parties for marketing.
Contact form data:
- Full name - for identification and addressing you
- Email address - to reply to you
- Phone number (optional) - for quicker communication
- Message content - to handle your enquiry
Technical and analytics data (cookies):
- Pseudonymised website analytics, only after consent
- Referral and UTM context is attached to an enquiry only after analytics consent
- Settings preferences (such as cookie consent)
- Technical and security request data processed by hosting and bot protection
Details about cookies are in our Cookie policy .
Purpose and legal basis
We process personal data only for specific, explicit and legitimate purposes. Each processing activity has a legal basis under Article 6 GDPR.
- Consent (Article 6(1)(a) GDPR) - for analytics cookies and traffic measurement
- Legitimate interest (Article 6(1)(f) GDPR) - for protecting the form against abuse, operational security and defending legal claims
- Pre-contractual steps and performance of a contract (Article 6(1)(b) GDPR) - for handling enquiries, preparing proposals and delivering agreed services
Name, email and message are needed to handle an enquiry. Phone and timeline are optional. We do not carry out automated decision-making or profiling with legal or similarly significant effects.
Data retention
We retain your data only as long as needed for its purpose or as required by applicable law.
Contact form data: up to 3 years after the last communication, unless a contract is established or data is needed to defend legal claims
Contract data: for the duration of the contract plus 10 years
Accounting records: 10 years (Accounting Act)
Cookie consent: 180 days; analytics cookies according to the provider settings, up to 2 years
Analytics data: Google Analytics user and event data for up to 14 months; aggregate reports may be retained longer
Technical systems: Vercel runtime logs for up to 30 days depending on plan; Resend deletes customer data within 90 days after account termination under its DPA
Your rights as a data subject
Under GDPR, you have the following rights regarding your personal data:
- Right of access (Article 15) - to confirm whether your data is processed
- Right to rectification (Article 16) - to request correction of inaccurate data
- Right to erasure (Article 17) - to request deletion of data
- Right to restriction (Article 18) - to request restriction of processing
- Right to data portability (Article 20) - to receive data in a structured format
- Right to object (Article 21) - to object to processing
- Right to withdraw consent - at any time, without affecting the lawfulness of previous processing
- Right to complain - to the Slovak Office for Personal Data Protection
Data recipients
Data is processed only by providers needed to operate the service: Vercel Inc. for hosting and serverless API, Plus Five Five, Inc. (Resend) for contact email delivery, Apple Distribution International Ltd. for the receiving iCloud Mail inbox, Cloudflare Inc. Turnstile for bot protection and, after consent, Google Analytics for traffic measurement. The scope depends on services actually enabled in production.
Providers may process data outside the European Economic Area. Transfers rely on a valid GDPR mechanism, such as an adequacy decision or standard contractual clauses.
Contact and exercising your rights
For questions, data access requests or exercising your rights, contact us. We respond within 30 days.
Email: michal@pexelo.com
Phone: +421 951 984 162
Postal address: Pexelo s.r.o., Viničná 3207/1A, 900 31 Stupava