Privacy Policy
Last updated · 5 May 2026
1. Who we are
This website (plasmatic.io) is operated by Plasmatic Solutions s. r. o., a limited liability company registered under the laws of the Slovak Republic.
- Registered office
- Podunajská 23/G, 821 06 Bratislava — Podunajské Biskupice, Slovensko
- IČO
- 55 144 462
- DIČ
- 2121882675
- IČ DPH
- SK2121882675
- Contact
- hello@plasmatic.io
For the purposes of the EU General Data Protection Regulation (Regulation 2016/679, “GDPR”), Plasmatic Solutions s. r. o. is the data controller for personal data collected through this website.
2. What this policy covers
This policy explains what personal data we collect when you visit plasmatic.io or contact us, how we use it, who we share it with, how long we keep it, and what rights you have over it.
It applies to our public marketing website. It does not cover client engagements, where a separate Data Processing Agreement applies between Plasmatic Solutions s. r. o. and the client.
3. Personal data we collect
We collect personal data in two ways:
- Information you give us when you fill in our contact form or send us an email — typically your name, email address, company name, an optional phone number, and the content of your message. The contact form is delivered to us by opening your own email client (a
mailto:link); we do not store form submissions on our servers. - Technical informationautomatically collected by our hosting provider, including your IP address, the pages you request, the date and time of the request, and basic request headers (such as your browser’s user-agent string). This is standard server-log information used for operating, securing and debugging the website.
We do not set advertising or analytics cookies, and we do not run third-party tracking on this site at this time. If we add analytics in the future, this policy will be updated and a cookie notice will be shown.
4. Why we use it (legal basis)
- To respond to your enquiry — when you contact us about a project or question. Legal basis: performance of, or steps to enter into, a contract (Art. 6(1)(b) GDPR).
- To operate, secure and debug the website — using server logs to detect abuse, investigate incidents and keep the site available. Legal basis: our legitimate interest in running a secure service (Art. 6(1)(f) GDPR).
- To meet legal and accounting obligations — where a project goes ahead, we may need to retain certain records under Slovak tax and accounting law. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
5. Who we share it with
We do not sell personal data and we do not share it with advertising networks. We share it only with service providers that help us run the website and our business, under written agreements that limit how they may use it:
- Hosting & CDN — Vercel Inc. (United States), which hosts plasmatic.io and processes server-log data on our behalf. Vercel relies on the EU Standard Contractual Clauses for international data transfers.
- Email — emails you send us are delivered and stored by our email provider. The contents of those emails are accessible only to Plasmatic Solutions s. r. o. staff.
- Authorities — where we are legally required to do so (e.g. by a court order or tax authority).
6. International transfers
Where personal data is processed outside the European Economic Area (for example by US-based hosting providers), we rely on transfer mechanisms recognised under GDPR — primarily the European Commission’s Standard Contractual Clauses, together with appropriate technical and organisational safeguards.
7. How long we keep it
- Enquiry emails — kept for as long as needed to handle the conversation, and then for up to 24 months in case the conversation resumes, after which they are deleted or anonymised.
- Server logs — retained by our hosting provider for a short period (typically up to 30 days) for operational and security purposes.
- Records required by law — kept for the periods required by Slovak accounting, tax and commercial legislation (typically 10 years for accounting records).
8. Your rights under GDPR
If we hold personal data about you, you have the right to:
- access a copy of that data;
- have inaccurate data corrected;
- have your data erased, where applicable;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent;
- lodge a complaint with the Slovak Data Protection Office (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk) or your local supervisory authority.
To exercise any of these rights, email us at hello@plasmatic.io. We will respond within one calendar month.
9. Security
We use commercially reasonable technical and organisational measures to protect personal data against unauthorised access, loss or alteration. No system can be guaranteed to be 100% secure; if we ever become aware of a personal data breach affecting you, we will notify you and the relevant supervisory authority in line with our obligations under GDPR.
10. Children
This website is intended for businesses and adult professionals. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in the law. The “Last updated” date at the top of this page shows when it was most recently changed. Material changes will be highlighted on the website.
12. Contact us
Questions, requests or complaints about how we handle personal data can be sent to:
Plasmatic Solutions s. r. o.
Podunajská 23/G, 821 06 Bratislava — Podunajské Biskupice, Slovensko
hello@plasmatic.io