Privacy Policy (GDPR)
Last updated: February 2, 2026
1. Controller
The controller of your personal data is Adam Domankuš, sole trader operating under the trade name ZCRM, Slovakia (hereinafter referred to as "we" or "us").
Contact details:
Email: ZCRM@zairou.dev
2. Categories of Personal Data
Depending on how you use our website and services, we may process the following categories of personal data:
- Identification data: name, email address, phone number (if provided).
- Communication data: messages and other information you send via forms, email, chat, or an AI assistant.
- Technical data: IP address, device type, browser, operating system, language settings.
- Usage data: pages visited, clicks, session events and interactions.
- Cookie identifiers: identifiers stored in cookies or similar technologies.
3. Purposes of Processing and Legal Basis
We process personal data only when we have a valid legal basis under GDPR. The typical purposes and legal bases are:
- Responding to inquiries and communication (e.g., contact form, email, chat, AI assistant) — legitimate interest (Art. 6(1)(f)) or contract steps (Art. 6(1)(b)) if your inquiry relates to ordering services.
- Providing services and fulfilling a contract — contract (Art. 6(1)(b)).
- Billing and accounting (where applicable) — legal obligation (Art. 6(1)(c)).
- Website security and abuse prevention — legitimate interest (Art. 6(1)(f)).
- Marketing emails — consent (Art. 6(1)(a)) where required. You can withdraw consent at any time.
- Analytics and service improvement (e.g., via Google Tag Manager) — consent (Art. 6(1)(a)) for non-essential tracking.
4. Recipients and Processors
We may share personal data with service providers (processors) who help us operate the website and deliver services. Typical categories include:
- Website hosting and infrastructure providers
- Email and communication providers
- Analytics and measurement providers (Google via Google Tag Manager)
- Cookie consent management provider (YesCookie)
These providers process personal data only under our instructions and under GDPR-compliant contractual terms.
5. International Data Transfers
Some providers (for example, Google) may process personal data outside the European Economic Area. Where applicable, we rely on approved transfer safeguards such as Standard Contractual Clauses and/or adequacy decisions, as required by GDPR.
6. Retention Period
We keep personal data only for as long as needed for the purposes described above, unless a longer retention period is required by law.
- Contact inquiries and communication: up to 12 months
- Marketing emails: until you withdraw consent or unsubscribe
- Analytics data: up to 14 months (depending on configuration)
- Contract and invoicing data: for the period required by applicable laws
7. Cookies and Tracking
We use cookies and similar technologies for essential website functionality and, with your consent, for analytics. Non-essential cookies and tracking tools are activated only after you provide consent via the cookie banner (managed via YesCookie).
8. Your Rights
Under GDPR, you have the following rights (subject to applicable conditions):
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent at any time (where processing is based on consent)
- Right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic
To exercise your rights, contact us using the email above. We may need to verify your identity before fulfilling a request.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes access control, secure storage, and reasonable monitoring.
10. Automated Decision-Making
We do not perform automated decision-making or profiling that produces legal or similarly significant effects on you.
11. Changes to this Policy
We may update this Privacy Policy from time to time. The most recent version will always be published on this page, with the "Last updated" date adjusted accordingly.