Privacy
Privacy notice
This notice explains what personal data I process when you use roban.dev, why I need it and how you can exercise your rights.
Last updated:
Controller and contact details
Draft: the identity of the controller, service providers and retention periods are awaiting confirmation. This draft is not yet ready for publication.
You can send questions about personal data processing and requests to exercise your rights to info@roban.dev.
Contact form and quote requests
When you submit the contact form, I process your name, email address, selected topic and message. For a quote request, I also process the contact details and information about your project, scope, timing or budget that you provide. Email correspondence includes the content of subsequent messages.
I use this information to respond, clarify requirements, prepare a quote and agree on working together. If you ask me, as a prospective contracting party, to prepare a quote or take another step before entering into a contract, I process the necessary data under Article 6(1)(b) GDPR. For general questions or communication with a company representative, the basis is my legitimate interest in handling incoming correspondence under Article 6(1)(f) GDPR.
Submitting an enquiry is voluntary and does not commit you to an order. Required fields are needed to receive and handle your enquiry; the form cannot be submitted without them. You can also contact me directly by email. Please do not send health information, national identification numbers, passwords or other sensitive information that I do not need to handle your enquiry.
Your message is saved in the enquiry inbox and an email notification and acknowledgement are prepared. Submitting the contact form does not subscribe you to the newsletter.
Newsletter
If you separately subscribe to the newsletter and confirm your subscription, I use your email address to send updates about development, services and projects. The legal basis is your consent under Article 6(1)(a) GDPR. Timestamps, your IP address and browser information are also recorded to verify the request and document its processing.
You can withdraw consent at any time by unsubscribing or emailing info@roban.dev. Withdrawal does not affect the lawfulness of processing before consent was withdrawn. Subscribing is not a condition of contacting me or using my services.
User account
If you create an account, I process registration and profile information such as your first name, surname, email address and optional profile photo. Passwords are stored as one-way hashes. Processing also includes verification links, password recovery and technical records required to secure access.
Data necessary to create and provide the account is processed under Article 6(1)(b) GDPR. Protecting the account against misuse is based on legitimate interests under Article 6(1)(f) GDPR. You can request account deletion by email. You do not need an account to use the contact form.
Security and technical data
When you use the website or submit a form, technical information is also processed, including your IP address, request time, browser information, referring page and anti-spam check result. This helps operate the website, limit repeated requests and address misuse. The legal basis is the legitimate interest in protecting the website, communications and users under Article 6(1)(f) GDPR.
Forms may be protected by Google reCAPTCHA, which evaluates technical information about your device and interactions with the website. It produces a security score that may lead to a suspicious submission being rejected. If you cannot submit the form, you can email info@roban.dev directly.
The website uses the roban_forms session cookie to secure forms and sign-in. It lasts for the browser session. Your light or dark theme preference is saved locally in your browser as redmotion-theme until you change it or clear the website data. reCAPTCHA may use its own security cookie.
I do not make solely automated decisions that produce legal effects concerning you or similarly significantly affect you.
Who has access to the data
Data is available to the controller and authorised people to the extent needed to handle your request. Hosting, email and anti-spam providers carry out technical processing. Professional advisers or competent authorities may also receive data where needed to meet a legal obligation or protect legal claims.
Google services may process data outside the European Economic Area. The specific provider, processing location and applicable transfer safeguards must be added to this draft based on the services and contracts in use.
How long data is retained
Draft: retention periods for completed enquiries, security records and backups must be confirmed against actual operations. Expiry of a verification link does not itself mean that the associated record has been deleted.
If an enquiry leads to a contract, the data needed to perform it is processed for the duration of the contract. Documents subject to statutory retention are kept as required by applicable law; material relating to a legal claim is retained only as long as necessary to establish, exercise or defend that claim.
Your newsletter email address is used until you withdraw consent. No further newsletters are sent after you unsubscribe; necessary records of consent and withdrawal may be retained separately to demonstrate compliance and protect legal claims. Account data is used while the account exists.
Your rights
Subject to the conditions of the GDPR, you can request access to and a copy of your data, correction of inaccurate data, erasure or restriction of processing. For automated processing based on consent or a contract, you may also have a right to data portability.
Where processing is based on legitimate interests, you have the right to object on grounds relating to your particular situation. You can object to processing for direct marketing at any time. You can withdraw consent at any time as easily as you gave it.
To exercise your rights, email info@roban.dev. I will normally respond within one month of receiving your request. For complex or numerous requests, this period may be extended by a further two months under the GDPR; I will explain the reason within the first month. Where necessary, I may reasonably verify your identity.
If you believe your data is being processed unlawfully, you have the right to complain to a supervisory authority. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic.
Exercise your rights at info@roban.dev
Slovak Office for Personal Data Protection — data subject rights (in Slovak)