Privacy Policy

Last updated: June 16, 2026

This Privacy Policy explains how we collect, use, and protect your personal data when you visit smash.company or get in touch with us.

Data Controller

The data controller responsible for your personal data is Smash, s. r. o., with registered office at Bendíkova 15828/16, 080 01 Prešov, Slovakia. Company ID (IČO): 46 007 041. VAT ID: SK2023175561. Registered in the Commercial Register of the District Court Prešov.

For any privacy-related questions, contact us at info@smash.company.

What Data We Collect

We collect your name, email address, and any details you choose to share when you contact us by email or through a contact form to enquire about a project.

We use privacy-friendly, cookieless analytics (DataFast) to understand how the site is used. This collects only aggregated, non-identifying information such as pages viewed, referring source, approximate country, device type, and browser. It does not use cookies, does not track you across other websites, and does not build a personal profile of you.

We also process technical data such as your IP address and browser information through our hosting provider for security and operational purposes.

Why We Collect It and Legal Basis

We use the details you send us to respond to your enquiry and to discuss and deliver a potential project. The legal basis is the performance of a contract or steps taken at your request prior to a contract under Article 6(1)(b) of the GDPR, and our legitimate interest in answering enquiries under Article 6(1)(f).

We use analytics data to understand how visitors interact with our website and improve it. Because this analytics is cookieless and does not identify you, the legal basis is our legitimate interest under Article 6(1)(f) of the GDPR.

We process technical data to host and operate the website securely. The legal basis is our legitimate interest under Article 6(1)(f) of the GDPR.

Cookies and Analytics

We do not use any analytics, advertising, or tracking cookies. Our analytics provider, DataFast, is cookieless and stores nothing on your device. The only cookie our website may use is a single necessary cookie that remembers your cookie preference.

You can manage that preference at any time using the "Manage Cookies" link in the footer. Your choice does not affect your ability to use the website.

Who We Share Data With

We share your data only with processors who help us operate the website and our business. Websupport, s.r.o., based in Bratislava, Slovakia, provides our website hosting and email infrastructure. DataFast provides privacy-friendly, cookieless website analytics in aggregated, non-identifying form.

We do not sell your data. We do not share it with third parties for their own marketing purposes.

How Long We Keep Your Data

We keep enquiry and project correspondence for as long as necessary to provide our services and to meet our legal and accounting obligations, and no longer than required by law.

Aggregated, non-identifying analytics data is retained by our analytics provider in line with their retention policy. Server logs are retained by our hosting provider for up to 6 months.

Your Rights

Under the GDPR, you have the right to access the personal data we hold about you, to rectify inaccurate or incomplete data, and to erase your data, also known as the right to be forgotten.

You have the right to restrict or object to the processing of your data, the right to data portability, and the right to withdraw your consent at any time.

You also have the right to lodge a complaint with a supervisory authority. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), www.dataprotection.gov.sk.

To exercise any of these rights, contact us at info@smash.company. We will respond within 30 days.

International Transfers

Where any of our processors transfer data outside the European Economic Area, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or participation in the EU-U.S. Data Privacy Framework.

Security

We use industry-standard technical and organizational measures to protect your data, including HTTPS encryption, secure hosting, and limited access to personal data. No method of transmission over the internet is 100% secure, but we work to use commercially acceptable means to protect your data.

Children

Smash is not directed to children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have collected such data, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Significant changes will be communicated via a prominent notice on the website.

Contact

For any questions about this Privacy Policy or how we handle your data, contact Smash, s. r. o., Bendíkova 15828/16, 080 01 Prešov, Slovakia, or email info@smash.company.