Privacy

Effective from 19 August 2026

The short version

This website measures traffic, but only once you allow it. Until you decide on the consent bar, nothing is stored in your browser — no cookie and no identifier. The measurement tools do load straight away and send one anonymous record of the page view; exactly what is in it, we set out below. Without consent, all that remains of you is the hosting provider's technical log — which is created whenever any page on the internet is opened, and without which the site could not be delivered at all.

If you do consent, we measure with two tools and they are not the same: Conseto is our own, uses no cookies, and the data stays in the European Union; Google Analytics is Google's tool, it does use cookies, and some of the data reaches the United States.

You can withdraw consent at any time with a single click — the button is in section 3 and in the footer. The long version is below because the law requires it, but nothing in it contradicts these three paragraphs.

1. Who we are

The controller within the meaning of Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on personal data protection is:

We have not appointed a data protection officer, because we do not carry out processing for which the law requires one. On data protection matters, write directly to the address above.

2. What happens when you open this website

The site is static, with no sign-in and no user accounts. The fonts are stored on our own server, not at Google, so they load without any third party learning about you.

The hosting provider does, however, like every web server, process the technical data needed to deliver the page: IP address, time of the request, page address, browser type. These records are created even when you refuse measurement — without them the page cannot be delivered. They serve operation and security; we do not use them for profiling and we do not combine them with measurement data.

3. Traffic measurement

Measurement starts only after you permit it. On your first visit a consent bar is shown. Until you decide on it, no cookie is stored in your browser. One anonymous record of the page view does go out, however — it contains the page address, where you came from, browser type, screen resolution, time zone and IP address. There is nothing in it by which your visits could be joined together. Refusing is an equal option: the site works the same and nothing is hidden from you.

The legal basis for measurement is your consent under Art. 6(1)(a) GDPR and under § 109(8) of Act No. 452/2021 Coll. on electronic communications. We have no other legal basis by which we would get around consent, and we are not looking for one.

Conseto — our own tool

Conseto is a tool we built ourselves and operate ourselves. It is not a third-party service to which we would hand your data over; we process it ourselves.

Conseto stores no cookies in your browser. If you give consent, it stores an identifier cs_v in the browser's local storage, by which it recognises a repeat visit from the same device. Until you consent, not even that is created. It records what happened on the page: which address was opened, where you came from, what type of device and browser you use, and how long you stayed on the page.

Your IP address does reach us when the record is sent, because without it the connection would not exist at all. It is used to derive the approximate country and to filter out robots and our own visits.

Google Analytics 4

Google Analytics 4 is a tool provided by Google. Towards us the processor is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; its parent Google LLC in the United States also takes part in the processing.

Unlike Conseto, Google Analytics does store cookies in your browser — _ga and _ga_<ID> — and uses them to distinguish repeat visits from the same browser. Under Google's default setting they last two years.

The purpose is statistical: how many people visit the site and where they come from. We do not switch on advertising targeting or any link to advertising accounts.

According to its own documentation, Google does not store full IP addresses in Google Analytics 4 — it uses them to derive an approximate location and then discards them. We state this as Google's claim, not as ours: what happens inside Google is Google's responsibility.

How to withdraw consent

Consent is not irreversible. It can be withdrawn at any time, with one click, without giving a reason and without consequence. The button opens the same window as the bar on your first visit, only with your current setting.

Cookie settings

Withdrawal takes effect going forward: it does not change the lawfulness of processing carried out before it (Art. 7(3) GDPR). Cookies already in your browser you can also delete yourself in its settings.

This button is a permanent way back. The consent bar will not show itself again after you have decided, which is why the same button is also in the footer.

The flag by which we switch off our own visits

So that we do not skew the statistics with our own work, Conseto has a switch. Anyone who opens any address on this site with the parameter ?cs_admin=1 gets a flag cs_admin stored in the browser, valid for two years, and measurement is switched off entirely on that device. It contains no data about any person and it is cancelled with the parameter ?cs_admin=0.

We write it here because it is the only thing this site stores in the browser even without consent to measurement — and it stores it only for someone who asks for it themselves through the shape of the address.

4. When you write to us

If you send us an email, we process what you send us in the message: typically a name, an email address, a company name and a description of what you are dealing with.

We do not use your email address for marketing mailings and we do not sell it to anyone.

5. Who the data reaches

We do not sell data and we do not provide it to third parties for their own purposes. We use the following processors, which process data solely for us and on our instructions:

Conseto itself is not a third party — it is our product and we process the data from it ourselves. What is in the list is therefore only the company that provides the servers for Conseto.

We may also disclose data to our accounting and legal advisers and to public authorities, where the law requires it of us.

6. Transfers outside the EU

We have built the operation so that data stays in the European Union: email and delivery of the site both run in Frankfurt, and our own measurement is ours. Two exceptions we admit openly.

Vercel Inc. is a company established in the USA, so access by its personnel to the technical logs cannot be ruled out. This transfer is covered by a data processing agreement with the standard contractual clauses approved by the European Commission under Art. 46 GDPR.

Google Analytics 4 means a transfer to the United States to Google LLC. It relies on the European Commission's adequacy decision for the EU–US Data Privacy Framework (Art. 45 GDPR), in which Google LLC is certified, and additionally on the standard contractual clauses (Art. 46 GDPR) in Google's data processing terms.

If this transfer troubles you, refuse measurement or withdraw your consent. Google will then receive no cookies and no data tied to your device. Its tag does still load, and when a page is opened one anonymous signal goes to it without an identifier — the mode Google calls Consent Mode. The rest of the site works without it exactly the same.

7. Your rights

As a data subject you have the right:

• to withdraw consent to measurement at any time (Art. 7(3)) — the button is in section 3 and in the footer,
• of access to the data we process about you (Art. 15),
• to rectification of inaccurate data (Art. 16),
• to erasure (Art. 17),
• to restriction of processing (Art. 18),
• to data portability (Art. 20),
• to object to processing based on legitimate interest (Art. 21).

Just write to norbert@stenvard.com. We reply within one month at the latest. We ask you for no fees and no forms.

If you believe we are handling your data incorrectly, you have the right to lodge a complaint with the supervisory authority:

8. When we run something for you

This notice concerns this website and correspondence with us. If we have built and run a system for you that holds data about your customers or employees, you are the controller of that data and we are the processor. In that case the relationship is governed by a separate data processing agreement under Art. 28 GDPR, which we conclude for every engagement, including the rules on where data is stored, on data isolation and on confidentiality.

9. Automated decision-making

We carry out no automated decision-making or profiling with legal effect for you on the basis of data from this website. Measurement serves statistics, not the assessment of individuals.

10. Changes

If this notice changes, we will publish a new version at this address with a new effective date. Earlier versions we can produce on request. This English text is a translation provided for convenience; in the event of any discrepancy, the Slovak version at stenvard.com/ochrana-udajov prevails.

An earlier version claimed that this website did not track visitors and used no cookies. On the day we deployed measurement, that stopped being true — hence this document.