01 / Scope
Who this policy applies to
This policy applies to visitors to pumpyourbiz.com, people who submit enquiries through a form or the project calculator, and anyone who contacts PUMP AGENCY by email, messaging platform or social network listed on the website.
It has been prepared with regard to Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection.
02 / Data controller
Who determines the purposes of processing
The data controller is a sole trader registered in the Slovak Republic and operating under the PUMP AGENCY / Pump Your Business Agency brand.
Sole trader: Roman Fodlash
ID No: 56327561
TIN: 3122034586
VAT status: Not registered for VAT
Registration authority: District Office Bratislava
Trade Register number: 110-343435
Start date: 19.08.2024
Privacy enquiries: [email protected]
03 / Data categories
What data we process
- Contact details: email, phone, link to social network or other contact that the user enters in the field;
- Identity data: your name or company name, where provided voluntarily;
- Enquiry details: comments, project description, project type, budget and any other information provided voluntarily;
- Calculator data: selected project format, scope, languages, content, SEO, design, forms, features, animation, estimated price range and delivery timeframe;
- Technical data: submission page, referrer where available, IP address, date and time, and browser User-Agent;
- Correspondence: subsequent communication by email or your chosen messaging platform.
04 / Sources
Where does the data come from?
Most of the data comes directly from the user. Technical data is generated automatically by the browser, web server and form processor. If the request is sent by a representative of the company, information about the company and the contact person may come from this representative.
05 / Purpose and legal basis
Why and on what basis
| Purpose | Data | GDPR legal basis | Typical retention period |
|---|---|---|---|
| Responding to an enquiry, clarifying the brief and preparing a proposal | Contact details, name where provided, brief and project parameters | Art. 6(1)(b): steps taken at the user’s request before entering into a contract | Up to 12 months after the last meaningful communication, unless a contract is concluded |
| Calculation and analysis of configuration | All selected parameters, calculation of price and term | Art. 6(1)(b) | Up to 12 months after last communication |
| Security, abuse prevention and diagnostics | IP address, date, page, User-Agent and technical logs | Art. 6(1)(f): legitimate interest in protecting the website and its services | Usually up to 30 days for server logs; data in a Telegram message is retained with the enquiry |
| Protecting legal rights and resolving disputes | Enquiry, correspondence and technical confirmation | Art. 6(1)(f) and, where required, Art. 6(1)(c) | For the applicable limitation period and any mandatory retention period |
If an enquiry leads to a contract, further processing of project data, accounting records and contractual documents is governed by applicable law and the contract documentation.
06 / Required information
What you need to provide
In simple forms and in the final step of the configurator, only contact is required. Name, company, comment and task details are voluntary. Without contact, the operator will not be able to respond, so sending the form is impossible.
The processing of the request does not require separate consent: the legal basis is pre-contractual actions on the initiative of the user. Do not send special categories of data, identity documents, payment details or other people's data unless this is agreed separately and is not necessary.
07 / Telegram
How enquiries are delivered
After a form is submitted, the server creates a message and sends it through the Telegram Bot API to a private chat used by the operator to handle enquiries. The message contains the form or configurator data together with the page, IP address, time and User-Agent.
Telegram is a separate service provider and processes data under its own privacy policy. You do not need a Telegram account to submit a form on this website.
08/Recipients
Who can access it?
- the operator and authorized team members who need the data to respond;
- Telegram / Telegram Bot API as a delivery channel;
- technical contractors where access is necessary for properly managed support;
- public authorities if disclosure is expressly required by law.
Current public forms do not transfer enquiries to a CRM, email-marketing platform or separate website database.
09 / Transfer outside the EEA
International infrastructure
Telegram uses international infrastructure, so handling enquiries may involve transferring data outside the European Economic Area. The processing location depends on Telegram’s infrastructure and terms.
Clicking on links to WhatsApp, Messenger, and social media also means engaging with international platforms on their owners’ terms.
10 / Storage and disposal
How long enquiries are retained
Enquiries that do not lead to a contract are deleted or anonymised no later than 12 months after the last meaningful communication, unless they are needed to protect legal rights. The operator regularly clears the Telegram chat and other working copies. Contractual and accounting records are stored separately for the periods required by law.
11 / Cookies and storage
What the website uses
The website uses technical storage required for the interface and, after consent, analytics cookies:
tt-dark-mode-onin localStorage - saves the selected light or dark theme;pump-cookie-consent-v1in localStorage — stores your consent choice;_gaand_ga_*— Google Analytics cookies created only after analytics is accepted.
Technical storage supports the interface. Analytics cookies are not required for the website to work and can be rejected or changed at any time through “Cookie settings”.
12/Analytics
Google Analytics only after consent
The website uses Google Analytics 4 with measurement ID G-95Y696KZRM to measure visits, page usage and important interactions. The Google tag loads only after analytics is accepted; no data is sent to Google Analytics before that choice.
Advertising storage, ad personalisation and Google Signals remain disabled. You can reject consent or change your choice at any time through “Cookie settings”. The service provider is Google Ireland Limited; further information is available in Google’s privacy documentation.
13 / AI
Enquiries are not forwarded to AI
In the current implementation, form and configurator data is not shared with AI models for analysis, response generation, or training. If such processing occurs, the policy and technical implementation should be updated prior to its launch.
14 / Automatic solutions
No profiling
The configurator automatically adds the selected prices and terms, but does not evaluate the identity of the user and does not make decisions with legal or similarly significant consequences. Profiling and fully automated decision-making under Art. 22 GDPR does not apply.
15 / User rights
Your data protection rights
Subject to the conditions set out in the GDPR, you may request access to your data, rectification, erasure, restriction of processing or data portability; object to processing based on legitimate interests; and ask not to be subject to a fully automated decision.
Send your request to the operator's official email address: [email protected]. The operator may request reasonable proof of identity and will normally respond within one month.
16/Complaint
Slovak supervisory authority
You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic: official information about your rights. Appeal to the supervisory authority does not deprive the user of other remedies.
17 / Security
Organisational and technical measures
Access to the Telegram configuration is restricted at server level, form fields are validated on the server, message output is escaped and production forms send data over HTTPS. Automated submissions are limited through a hidden honeypot field, completion-time checks, request-origin checks and IP-based rate limiting. Access to enquiries should be granted only to people who need it. No transmission over the internet can be guaranteed to be absolutely secure.
18 / Children
A website for a business audience
The site and forms are not intended for independent use by children. The operator does not knowingly collect data from children. If such data has been transferred without proper reason, inform the operator to delete them.
19/External references
Messengers and social networks
Switching to Telegram, WhatsApp, Messenger, Instagram, Facebook, LinkedIn or case sites brings the user to an external resource. Further processing is determined by the policy of the respective service. The site uses regular links, not built-in social widgets.
20/ Changes
Policy updates
The Policy is updated when the forms, recipients, analytics, processing purposes or legislation change. The year of the current edition is indicated at the beginning of the page. Significant changes can be further highlighted on the site.
21 / Contacts
Data questions
For the processing of personal data, the exercise of rights or the removal of information write to [email protected]
22 / Legal basis
Main sources
Policy is based on GDPRLaw of the Slovak Republic No. 18/2018 Z. z. and applicable regulations on electronic communications and electronic commerce.