Privacy Policy

1. Who Is Responsible for Your Personal Data

The controller responsible for the processing of personal data on this website is Bc. Sofia Mária Zvonárová, operating as a sole proprietor in Slovakia.

If you have any questions about this Privacy Policy or about how your personal data is handled, you can contact us at sofia@flamia.studio.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed through flamia.studio, including when you browse the website, submit a contact form, request a quote, send us an email, book a call, or otherwise interact with our website or related communication channels.

This policy does not automatically apply to third-party websites, platforms, or tools that may be linked from our website. Those services operate under their own privacy terms and policies.

3. Personal Data We May Collect

Depending on how you interact with the website, we may collect or receive the following categories of personal data:

• Contact and enquiry data such as your name, email address, phone number, company name, website URL, and the content of your message.
• Project-related information that you voluntarily provide when describing your business, website, marketing needs, goals, deadlines, budget expectations, or related context.
• Technical and usage data such as IP address, browser type, device data, operating system, referring pages, pages visited, timestamps, and basic server log information.
• Cookie and similar technology data where such tools are active on the website and where your consent is required and obtained.

4. How We Collect Personal Data

We collect personal data directly from you when you fill in a form, email us, request a quote, or otherwise contact us. We also collect some technical data automatically through the operation of the website, server logs, and cookies or similar technologies where applicable.

5. Purposes of Processing and Legal Bases

We process personal data only where there is a lawful basis to do so and only for a defined purpose.

a) Responding to enquiries and pre-contract communication

We use your contact details and the content of your message to respond to your enquiry, discuss your request, prepare a proposal, or take steps prior to a potential contract.

Legal basis: performance of pre-contract steps at your request and, where applicable, our legitimate interest in handling business communications.

b) Website operation, maintenance, and security

We process limited technical data to keep the website functioning, maintain security, detect abuse, prevent spam, and protect the integrity of the website and related systems.

Legal basis: our legitimate interest in operating a secure and functional website.

c) Compliance with legal obligations

In some cases, we may process personal data where necessary to comply with legal, accounting, tax, regulatory, or record-keeping obligations.

Legal basis: compliance with a legal obligation.

d) Protection of legal claims and business interests

Where necessary, we may process relevant personal data for the establishment, exercise, or defence of legal claims, and for protecting our rights, property, or business operations.

Legal basis: our legitimate interest in protecting our legal and business interests.

e) Analytics, measurement, and non-essential cookies

Where analytics, preference, or marketing cookies and similar technologies are used on the website, we rely on your consent where consent is required under applicable law.

Legal basis: your consent.

6. Recipients and Categories of Processors

We may share personal data with service providers who help us run the website or provide business communications, only to the extent necessary for the relevant purpose.

• website hosting and infrastructure providers,
• website maintenance, security, and anti-spam providers,
• email and communication service providers,
• form handling, scheduling, or CRM tools if used on the website,
• analytics or consent management tools where enabled,
• professional advisers such as accountants, lawyers, or IT providers where necessary,
• public authorities where disclosure is required by law.

Where another party processes personal data on our behalf, we use appropriate contractual and organisational safeguards as required by applicable law.

7. International Transfers

Because some digital tools or infrastructure providers may be located outside the European Union or European Economic Area, your personal data may in some cases be transferred to countries outside the EU or EEA, including the United States.

Where such transfers take place, we rely on an appropriate transfer mechanism under applicable data protection law, such as an adequacy decision, the EU-US Data Privacy Framework where applicable, or standard contractual clauses and related safeguards.

8. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the relevant purpose and for as long as required by law or needed to protect our legitimate interests.

• General enquiries and quote requests: usually up to 12 months from the last meaningful communication, unless a project relationship starts or a longer retention period is justified.
• Project and contractual communication: for the duration of the relationship and afterwards for the period required by accounting, tax, legal, and evidentiary obligations.
• Technical logs and security records: usually for the shortest practical period, commonly up to 90 days unless longer retention is needed for security or incident handling.
• Consent-based processing: until consent is withdrawn or until the relevant tool, cookie, or setting expires or is reconfigured.

9. Your Rights

Subject to applicable law, you may have the following rights in relation to your personal data:

• the right to access your personal data,
• the right to request rectification of inaccurate or incomplete data,
• the right to request erasure where legal conditions are met,
• the right to request restriction of processing,
• the right to data portability where applicable,
• the right to object to processing based on legitimate interests,
• the right to withdraw consent at any time where processing is based on consent,
• the right to lodge a complaint with a supervisory authority.

To exercise your rights, contact us at sofia@flamia.studio.

10. Cookies and Similar Technologies

The website may use cookies and similar technologies to ensure functionality, remember technical preferences, maintain security, understand website performance, and improve user experience.

a) Strictly necessary cookies

These cookies are required for the technical operation and security of the website and for remembering essential settings such as cookie preferences where applicable.

b) Analytics, preference, or marketing cookies

If the website uses non-essential cookies or similar technologies for analytics, behavioural measurement, advertising, or comparable purposes, those technologies should be activated only after you have given consent where consent is legally required.

c) Managing your preferences

You can manage or withdraw your cookie preferences through the cookie settings mechanism made available on the website. You can also adjust some settings through your browser, although doing so may affect website functionality.

11. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, unlawful disclosure, misuse, alteration, or destruction. Even so, no website, email transmission, or online service can be guaranteed to be completely secure at all times.

12. Children’s Privacy

This website and our services are not directed to children. We do not knowingly collect personal data from children through the website as part of our ordinary business activities. If you believe personal data of a child has been submitted to us unintentionally, contact us and we will address it appropriately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or website-related changes. The latest version will always be published on this page.

Last updated: 26 March 2026

14. Contact and Supervisory Authority

If you have questions about this Privacy Policy or want to exercise your rights, contact us using the details below.

You also have the right to lodge a complaint with the supervisory authority in Slovakia: