Legal · GDPR · Last updated: 30 September 2026

Privacy Policy

Who processes your personal data on this website, what we collect, why, how long we keep it and what rights you have.

Only what you send us, used to answer youEU our servers are in GermanyConsent analytics and ads cookies only after you allow themGDPR you can see, change or delete your data
01

Who we are

The controller of your personal data is ElWebCraft platform s.r.o.

  • IČO: 21985863
  • Registered office: Čenětická 2413/1a, 149 00 Praha 4 – Chodov, Czech Republic
  • Registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 409383
  • Email: sales@elementwebcraft.com
  • Phone: +420 775 255 567

We have not appointed a Data Protection Officer, as we are not required to. For any question about your data, write to sales@elementwebcraft.com.

02

Requests through the website form

When you ask for a free estimate or a call, we process:

  • your name;
  • your email or Telegram username;
  • the service you are interested in (website, automation or both), the request type and, for a call, the chosen time;
  • your message, if you write one;
  • the language of the site and the time of the request;
  • your country — we determine it from your IP address using a database stored on our own server. The IP address itself is not stored and is not sent anywhere; we keep only the country code. (IP geolocation by DB-IP, db-ip.com, CC BY 4.0.)

Purpose: to reply to your request, prepare an estimate or arrange the call.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Determining the country is our legitimate interest in routing the request to the right person and language (Art. 6(1)(f) GDPR).

Giving us your name and a contact is necessary — without them we cannot reply. Everything else is optional.

03

Communication by email, phone and Telegram

If you write or call us directly, we process your contact details and the content of the conversation to answer you and, where relevant, to prepare and fulfil a contract.

Legal basis: steps before entering into a contract and performance of a contract (Art. 6(1)(b) GDPR), and our legitimate interest in keeping business correspondence (Art. 6(1)(f) GDPR).

04

Cookies, analytics and advertising

Necessary — remembering your language and your cookie choice. These are stored without consent because the site cannot work properly without them.

Statistics — Google Analytics shows us how visitors use the site (pages viewed, device, approximate location). It runs only if you allow statistics cookies.

Marketing — Meta Pixel (Facebook, Instagram) measures the results of our ads and lets us show ads to people who visited the site. It runs only if you allow marketing cookies. For collecting and sending this data to Meta, we and Meta Platforms Ireland Ltd. are joint controllers.

Google Ads — measures which of our Google ads led to a request. If you allow marketing cookies and send a request, the email or phone number from the form is hashed in your browser (turned into an irreversible code) and only then sent to Google, so Google can match the request with a click on our ad. It runs only if you allow marketing cookies.

Legal basis: your consent (Art. 6(1)(a) GDPR and § 89(3) of Act No. 127/2005 Coll.). Consent is managed by Cookiebot. You can change or withdraw it at any time with the link below or “Cookie settings” at the bottom of every page — withdrawal does not affect processing that happened before.

05

Who receives the data

We do not sell your data. It is processed only by service providers who work for us under data processing agreements:

  • Hetzner Online GmbH, Germany — hosting of the website and the request database;
  • Google Ireland Ltd. / Google LLC — business email (Google Workspace), a working spreadsheet with requests (Google Sheets), Google Analytics and Google Ads (Google Ads only with your consent);
  • Telegram — notifications about new requests to our team chat;
  • Meta Platforms Ireland Ltd. — Meta Pixel, only with your consent;
  • Usercentrics A/S (Cookiebot), Denmark — storing your cookie consent.

We may also disclose data where the law requires it, for example to public authorities.

06

Transfers outside the EU

Our servers are in Germany. Some providers may process data outside the European Union:

  • Google and Meta — in the USA, on the basis of the EU–U.S. Data Privacy Framework and the European Commission’s standard contractual clauses;
  • Telegram — notifications about a request (name, contact, service and message) pass through Telegram’s servers, which may be located outside the EU.
07

How long we keep data

  • Requests and correspondence — 2 years from our last contact, then we delete them.
  • If we sign a contract — for as long as accounting and tax laws require (up to 10 years).
  • Cookies — for the time shown in the cookie settings; your consent choice is kept for 12 months.
08

Your rights

Under the GDPR you have the right to:

  • access your personal data and get a copy;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict processing;
  • data portability;
  • object to processing based on our legitimate interest;
  • withdraw your consent at any time;
  • lodge a complaint with the supervisory authority — Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.

To use any of these rights, write to sales@elementwebcraft.com. We will reply within one month.

09

Security

The site works only over an encrypted connection (HTTPS). Access to requests is limited to the people who handle them, and the servers are protected against unauthorised access.

10

Automated decisions

We do not make decisions about you by automated means only, and we do not create profiles that would have legal or similarly significant effects on you.

11

Changes to this policy

If we change how we process data, we will update this page and the date at the top.

→