Legal

Privacy policy

Information on the processing of personal data under Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679.

Last updated: August 2026

1. Controller

The controller of your personal data is Ladient s. r. o., with its registered seat at Pri Slanej 1950/51, 982 01 Tornaľa, Slovak Republic, Company ID (IČO): 53332113, VAT ID: SK2121336888. We operate this website under the toprod.io brand.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Requests reach us directly at the address in section 10.

2. What this website does

This is a marketing website for an engineering service. There are no user accounts, no login, and no payment processing here. We process personal data for three purposes only:

• Answering your enquiry. If you submit a contact or teardown request, we use what you send to reply and to discuss whether we can help.
• Understanding which pages are useful. Aggregated statistics about how the site is used, so we know what to write more of. This runs only with your consent.
• Keeping the site available and secure. Server logs kept by our host, used to serve pages and to identify abuse.

We do not sell personal data, we do not use it for advertising, we do not profile you, and we make no automated decisions about you within the meaning of Article 22 GDPR.

3. Legal basis for processing

• Article 6(1)(b) — steps prior to entering a contract. Handling an enquiry you initiated about our services.
• Article 6(1)(a) — consent. Analytics cookies and the statistics derived from them. You give this in the banner and may withdraw it at any time.
• Article 6(1)(f) — legitimate interests. Keeping the site online and secure, and retaining business correspondence for a reasonable period. Our interest is in operating a functioning business; we consider the impact on you minimal, and you may object under section 9.

4. Categories of personal data

What we receive depends entirely on what you do:

• If you submit a form: your name, e-mail address, the message you write, and optionally a repository or product URL and your intended timeline. Nothing on our forms is required beyond name, e-mail, and message.
• If you accept analytics: IP address (used by Google to derive approximate location, and not stored by us in raw form), device and browser characteristics, pages viewed, referring link, and interactions such as clicking a button.
• If you simply read the site: the technical data any web server receives — IP address, timestamp, requested page, and user agent — recorded in our host's logs.

We do not knowingly process special categories of personal data under Article 9 GDPR, and we ask you not to send such data through our forms. If your enquiry concerns a codebase containing personal data, please do not paste that data to us — we will agree appropriate terms, including a data processing agreement where required, before we access any system of yours.

5. Cookies and local storage

Analytics is switched off until you accept it. Until then, no analytics cookies are set — this is enforced technically through Google Consent Mode, not merely promised. Declining costs you no functionality.

To change your choice, clear this site's data in your browser settings; the banner will appear again on your next visit. You can also block or delete cookies entirely through your browser.

6. Recipients and processors

We are a small company and use established providers rather than running our own infrastructure. Each processes personal data on our behalf under a data processing agreement, except where noted that they act as their own controller.

We do not otherwise share your personal data with third parties, except where we are legally obliged to do so, or where it is necessary to defend a legal claim.

7. Transfers outside the EEA

Netlify and Calendly are established in the United States, so your data may be processed there. Such transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on Standard Contractual Clauses adopted by the Commission under Article 46(2)(c) GDPR, together with supplementary technical measures such as encryption in transit. You may request a copy of the relevant safeguards at the address in section 10.

8. Security and retention

This site is static: it holds no database, and no personal data is stored on the web server itself. Concretely, we apply:

• encryption of all traffic in transit via HTTPS/TLS;
• form submissions held in our host's administration area, reachable only with multi-factor authentication;
• access on a need-to-know basis, which in practice means the people who answer enquiries;
• analytics configured without advertising features or cross-site identifiers.

How long we keep things:

• Form submissions and related correspondence: for as long as needed to deal with your enquiry, and up to 24 months afterwards so we can pick up a conversation you may return to. Longer only where a contract results, in which case statutory accounting retention periods apply.
• Analytics data: retained by Google Analytics for a maximum of 14 months, then deleted automatically.
• Server logs: retained by our host for a short period for security purposes, typically no more than 30 days.

9. Your rights

In relation to your personal data you have the following rights:

Access

To be told whether we process your personal data, and to receive a copy of it.

Rectification

To have inaccurate or incomplete data about you corrected.

Erasure

To have your data deleted where there is no overriding reason for us to keep it.

Restriction

To have processing paused while a dispute about accuracy or legality is resolved.

Portability

To receive data you gave us in a structured, machine-readable format.

Objection

To object to processing we base on legitimate interests.

Withdraw consent

To withdraw analytics consent at any time, with no effect on processing already carried out.

We answer requests without undue delay and within one month at the latest. Exercising these rights is free of charge, and we will not ask you to justify a request.

10. Contact

For anything concerning your personal data — including exercising the rights above — contact us at kristian.dienes@ladient.sk. Write to us in English or Slovak, whichever you prefer.

11. Supervisory authority

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, Slovak Republic — dataprotection.gov.sk. You may also complain to the supervisory authority where you live or work.

12. Changes to this policy

If we add or remove a service that touches personal data, we update this page and the date at the top. Where a change materially affects you, we will say so here rather than leaving you to spot the difference.