Effective from 11 November 2026

1. Who we are

We are Studio Stopa, a branding studio based in Piešťany, Slovakia. We run
the website www.studiostopa.com and process personal data on it.

The controller of personal data is Studio Stronger s.r.o., Špačinská cesta 34,
917 01 Trnava, Slovakia, Company ID (IČO) 51 053 799.
The studio is run by Ján Groman.

Contact: hello@studiostopa.com, phone +421 905 833 369.

2. What data we process and why

Contact form (pages /contact-us/ and /sk/kontaktujte-nas/)
From the form we process your name, e-mail address and message, and any
other information you choose to include. We use this data to reply to your
enquiry and, if it leads to a project, to prepare and perform the contract.
Legal basis: steps prior to a contract or performance of a contract
(Article 6(1)(b) of the GDPR).

Newsletter in the footer
We process your e-mail address so we can send you updates about our work
and studio news. Legal basis: your consent (Article 6(1)(a) GDPR). You may
withdraw consent at any time, for example via a link in the e-mail or by
writing to hello@studiostopa.com. Withdrawal does not affect the lawfulness
of processing before the withdrawal.

E-mail and phone
If you write or call us, we process your contact details and the content
of the message so we can handle your request. Legal basis: steps prior to
a contract or performance of a contract, or our legitimate interest in
replying (Article 6(1)(b) or (f) GDPR).

If an enquiry becomes a project, we also keep the data needed for the
collaboration, invoicing and bookkeeping. Legal basis: the contract and
our legal obligations in accounting and tax (Article 6(1)(b) and (c) GDPR).

Form protection (Google reCAPTCHA)
Our pages use Google reCAPTCHA to help distinguish people from automated
spam. Google may process technical data about your browser and device,
and may set cookies. Legal basis: our legitimate interest in protecting
the website and forms from abuse (Article 6(1)(f) GDPR).

Google Business Profile
We have a Google Business Profile. If you message us or leave a review
there, Google processes that data under its own terms, and we may see
your name and message. Legal basis: our legitimate interest in
communicating with people who contact us and in managing our public
profile (Article 6(1)(f) GDPR).

Server logs
Our hosting provider may briefly store technical data in server logs,
such as IP address and the date and time of a visit. We use this to run
and secure the website. Legal basis: our legitimate interest in operating
and protecting the site (Article 6(1)(f) GDPR).

3. How long we keep the data

These are our proposed retention periods. If we change them, we will
update this text.

• Enquiries from the form, e-mail or phone: two years after the last
communication. If an enquiry becomes a project, we keep the data needed
for the collaboration for the duration of the work and then for as long
as accounting and tax rules require (typically 10 years).
• Newsletter: until you withdraw consent, or until we discontinue the
newsletter.
• Server logs: typically 90 days, unless the law or the handling of a
security incident requires a longer period.
• Language cookie: 1 year.
• Data processed by Google (reCAPTCHA, Business Profile) is also subject
to Google’s own retention periods.

4. Who may receive the data

We share data only as needed for the purposes above:

• Websupport s. r. o., Karadžičova 12, 821 08 Bratislava, Slovakia,
Company ID (IČO) 36 421 928 – website hosting and the mailbox
hello@studiostopa.com.
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
– reCAPTCHA and Google Business Profile. Some processing may also be
carried out by Google LLC in the United States.

We may also disclose data to public authorities if the law requires it.

5. Transfers outside the European Union

When we use reCAPTCHA and Google Business Profile, data may be transferred
to the United States. Google uses approved safeguards for such transfers,
in particular an adequacy decision (for example the EU–US Data Privacy
Framework) or standard contractual clauses. See Google’s privacy policy
for details.

6. Cookies

We use the following cookies and similar technologies:

• pll_language – a Polylang cookie. It stores your language choice for
1 year so we can show the correct version of the site. It is needed
for the multilingual website to work.
• reCAPTCHA – Google may set its own cookies when checking that you are
not a robot. Their duration and scope are determined by Google.

We do not use analytics tools (for example to measure website traffic)
at present. If we add them later, they will run only with consent,
typically through a cookie banner. We will update this text at that time.

7. Your rights

You have the right:

• to access the personal data we process about you,
• to have inaccurate data corrected or incomplete data completed,
• to have data erased, where the legal conditions are met,
• to restrict processing,
• to data portability for data you provided to us on the basis of
consent or a contract,
• to object to processing based on our legitimate interest,
• to withdraw consent at any time (this applies in particular to the
newsletter).

You can exercise these rights by writing to hello@studiostopa.com.
We will reply without undue delay and at the latest within one month.

If you believe we process data in breach of the rules, you have the
right to lodge a complaint with the Office for Personal Data Protection
of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej
republiky), Galvaniho Business Centrum II, Galvaniho 7/B, 821 04
Bratislava, Slovakia, https://dataprotection.gov.sk.

8. Changes to this text

If we change this text, we will publish the new version on this page
and update the effective date.