1. Who is the controller
The controller is Timur Cimerman, sole trader (self-employed), company ID (IČO) 56643454, with its address at 29. augusta 5682/36A, 058 01 Poprad, Slovakia ("Klientera", "we"). For any data protection question, write to info@klientera.com.
2. What data we process and why
- Enquiry and free preview: name, email, phone, company name and industry, and whatever you write to us. We use it to prepare the preview and reply. Legal basis: steps before entering a contract and our legitimate interest in answering prospects.
- Order and panel account: billing details, email, website content (texts, photos, logo), settings, messages and requests. Legal basis: contract.
- Payments: Stripe processes the payment. We never see or store your card number; we receive the payment status, the last four digits of the card and billing details. Legal basis: contract and legal obligation.
- Accounting and tax: invoices and records. Legal basis: legal obligation.
- Support and communication: emails and messages we exchange. Legal basis: contract and legitimate interest.
- Security and operations: IP address and technical logs, to protect the site from abuse and fix errors. Legal basis: legitimate interest.
- Source of the visit: if you arrive from an ad, we keep where you came from (UTM parameters) for the length of your visit and attach it to the enquiry you send. That tells us which ad works. Legal basis: legitimate interest.
- Traffic measurement and advertising: only with your consent, see the Cookie policy. Legal basis: consent. You can withdraw it at any time.
3. Who receives your data
We do not sell your data. We use providers who process it only for us under a data processing agreement:
- Stripe (payments and subscriptions),
- Supabase (database, EU region),
- Vercel (website hosting),
- Resend (sending emails),
- Cal.com (call booking),
- Shopify (only if you have an e-shop),
- internal tools that notify us of a new enquiry (e.g. Slack),
- PostHog, Google and Meta (only if you accept analytics or marketing cookies).
We pass data to public authorities only when the law requires it.
4. Transfers outside the EU
Some of these providers may process data in the USA. We rely on the EU Standard Contractual Clauses or on the provider's certification under the EU-US Data Privacy Framework.
5. How long we keep data
- Enquiries that did not become an order: up to 36 months after the last contact.
- Customers: for the duration of the contract and three more years (limitation period).
- Accounting records: as the law requires, in Slovakia usually 10 years.
- Cookie data: see the Cookie policy.
6. Your rights under the GDPR
If the GDPR applies to you (EU and EEA), you have the right to access, rectify, erase, restrict, port your data and to object to processing based on legitimate interest. You can withdraw consent at any time; this does not affect what happened before.
Write to info@klientera.com. We reply within one month at the latest. If you think we mishandle your data, you can complain to the Slovak Office for Personal Data Protection (Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk) or to the supervisory authority in your own country.
7. US customers (CCPA/CPRA and other state laws)
We respect the rights of California residents and residents of other US states and apply them to all US customers, whether or not the law requires us to.
- Data we collect (past 12 months): identifiers and contact details (name, email, phone, IP address), commercial information (business and order details), internet and device activity, payment details (via Stripe), and the content you send us.
- Sources: you, your use of the website, and ad platforms if you contact us through an ad.
- Purposes: providing the service, payments, support, security, measuring and improving the website.
- Sale and sharing: we do not sell personal information. If you accept marketing cookies, advertising tools (Meta, Google) may use data about your visit to show targeted ads, which California law calls "sharing" for cross-context behavioral advertising. Without your consent these tools are not loaded.
- Sensitive data: we do not collect it or use it for any purpose beyond what the law allows.
You have the right to know what data we hold about you, to ask us to delete or correct it, to opt out of sale and sharing, and not to be treated worse for using these rights. You can opt out in the cookie settings (the "Cookie settings" link in the footer) or with the Global Privacy Control signal in your browser, which we honor.
Send your request to info@klientera.com. We confirm it within 10 days and respond within 45 days. To verify your identity we may ask for details we already hold. You can also use an authorized agent.
8. Our customers' websites
If you have a website from us and visitors fill in a form on it, we process their data on your behalf. You are the controller and we are the processor. We send you a data processing agreement on request.
9. Children and security
The service is meant for anyone who wants a website or online shop for their business or activity, even without a company ID (a website also for private purposes), and not for anyone under 18. We encrypt data in transit (HTTPS), limit access, and leave payment data to Stripe.
10. Changes
We may update this policy. The current version is always on this page, with the date of the last change in the header. We will tell you about material changes.