Privacy Policy

The controller responsible for the processing described on this page is Ktenor, a one-person digital studio based in Bratislava, Slovakia — reachable directly at ktenorstudio@gmail.com.

If you have a question about your personal data, or would like to request access, correction, restriction or deletion, contact me at that address.

The website itself is designed to collect as little personal information as possible.

When you browse it, the hosting and infrastructure providers it runs on may automatically process certain technical information — things like IP address, browser and device information, timestamps, and other technical data necessary to deliver, secure and maintain the site.

This information is not used by me for advertising, profiling or analytics.

When you submit an enquiry, I process exactly what you choose to provide: your name; your email address; your phone number, if given; the service you selected; a budget range, if given; a preferred timeline, if given; and your message. Nothing else is collected, and nothing is taken from your device beyond what you typed.

The form also processes a hidden technical field and the time it took to complete. Both exist solely to detect and prevent automated spam, and neither is used to identify or profile you.

This information is used to respond to your enquiry, discuss a potential project, provide the services you've requested, and communicate with you about any work that follows from it.

It may be sent by email, stored in a private spreadsheet, and saved in the website's own admin panel — so an enquiry isn't lost if any one of the three becomes unavailable. If you leave an email address, an automatic confirmation may be sent back to it.

Depending on the circumstances, I process enquiry information on one or more of the following legal bases under the GDPR: taking steps at your request before entering into a contract, when you contact me about a potential project; performance of a contract, when processing is necessary to provide an agreed service; legitimate interests, where necessary to operate, secure and maintain the website and prevent spam or abuse; and consent, where processing is specifically based on it.

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

The website stores a small number of functional preferences on your device: your selected language and your selected colour theme. They are used only to make the site behave according to your choices, are read only by this site, and are never linked to you as a person.

The website also temporarily remembers whether the intro animation has already been shown. That is kept only for the current browser session and disappears when the session ends.

I do not use cookies or similar technology for advertising, behavioural profiling or third-party analytics. Because the only stored data is a functional preference you set yourself, no cookie consent banner is required. Clearing your browser data removes any locally stored preferences.

There are none. No Google Analytics, no advertising pixels, no behavioural advertising, no cross-site tracking, no third-party profiling services — no analytics system is used to build a profile of visitors.

I use a limited number of third-party providers to operate the website and handle enquiries.

Vercel hosts and deploys the website, and may process technical information generated when visitors access it — IP addresses, device and browser information, timestamps and other server-related data necessary to provide and secure its services.

Resend delivers the emails generated by the contact form. For data processed on my behalf, Resend acts as a data processor under its own Data Processing Addendum; its primary processing and storage takes place in the United States, and transfers from the EEA are covered by Standard Contractual Clauses and its participation in the EU-U.S. Data Privacy Framework. Resend may separately process account, billing and usage information under its own privacy policy.

Google Sheets holds a private record of enquiries, which I use to manage them and any resulting client work.

The website's own admin panel (its CMS) uses a database hosted by Neon, provisioned through Vercel, to store enquiry data and the reviews described below.

These providers process information under their own legal obligations and service-specific privacy policies. I use them only where necessary to operate the website and provide its services, and none of them use your data for their own purposes.

Some of these providers may process personal data outside the European Economic Area, including in the United States. Where that happens, I rely on legally recognised safeguards — an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism, as required by the GDPR. Resend, for example, covers EEA-to-US transfers through Standard Contractual Clauses and its participation in the EU-U.S. Data Privacy Framework.

I keep personal information only for as long as reasonably necessary for the purpose it was collected for. Enquiry information may be retained while an enquiry, project or related business relationship is ongoing, and for as long as reasonably necessary afterwards to maintain business records, resolve disputes, or meet legal obligations.

You may request deletion of your personal data at any time, subject to cases where I am legally required or permitted to retain it. Third-party providers may have their own retention periods for information processed through their services.

Submitting a review sends your name, your star rating, the optional text you write, and the language you submitted it in.

Reviews are kept private at first and are never published automatically — a review goes live only after I've checked and approved it, and I may make small edits for length, clarity or formatting before publishing. Rejected or unpublished reviews are deleted once they are no longer needed, rather than kept indefinitely.

Email, phone and WhatsApp messages are kept only as long as reasonably necessary to handle the conversation and any work that follows from it. Your contact information is not added to a marketing mailing list without an appropriate legal basis, and is not shared with anyone.

Depending on the circumstances and applicable legal conditions, you have the right to: request access to your personal data; request correction of inaccurate or incomplete data; request deletion of your personal data; request restriction of processing; object to certain processing; request data portability where applicable; withdraw consent where processing is based on it; and lodge a complaint with a data protection supervisory authority.

In practice, the only personal data I hold is what you have sent me directly. To exercise any of these rights, write to ktenorstudio@gmail.com and it will be handled.

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the relevant supervisory authority. In Slovakia, that is the Úrad na ochranu osobných údajov Slovenskej republiky, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic (dataprotection.gov.sk), which is responsible for supervising personal-data protection here.

I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure. That said, no method of transmitting or storing information online can be guaranteed to be completely secure.

If the way I process personal data changes — new analytics, a new integration, a new form — this page is updated in the same release, not afterwards, and the "Last updated" date above changes with it.