PERSONAL DATA
Privacy policy
This document explains which personal data we process, why we need it and how you can exercise your rights.
Last updated: 23 September 2026
This is a tailored draft. Before launch, the controller must add verified business details and obtain legal review where appropriate.
1. Controller
Controller: SITEKER — [ADD THE LEGAL NAME OR SOLE TRADER NAME AND BUSINESS ADDRESS]. Contact: info@siteker.com or the contact form.
2. Enquiry data
The form collects your name, company, email, phone, project type, project description, submission time, source and consent-text version.
- Purpose: responding, preparing a quote and taking steps at your request before a contract.
- Legal basis: Article 6(1)(b) GDPR. The form confirmation shows you have received this information.
- Retention: normally no more than 24 months after the last substantive communication, unless a longer period is legally required or needed for legal claims.
3. News and offers
Newsletter signup is currently unavailable. Any previously submitted consent remains recorded with its date, source and text version.
- Legal basis: consent under Article 6(1)(a) GDPR.
- You may withdraw consent through the contact form.
- Newsletter delivery is not configured.
4. Providers and infrastructure
- Cloudflare Workers hosts the application and provides network and security infrastructure.
- Cloudflare D1 stores enquiries and newsletter-consent evidence.
- Resend sends the owner notification and visitor confirmation when configured.
- Google Gemini processes content deliberately sent to the AI assistant; contact-form details are not sent to the model.
5. Processing outside the EU/EEA
Some providers may operate infrastructure or support outside the EU/EEA. The exact scope depends on account settings and provider terms. Before launch, the controller must verify regions, data-processing terms and safeguards.
6. Your rights
Subject to GDPR conditions, you may request access, correction, deletion, restriction, portability or object to processing through the contact form. You may also complain to the Information Commissioner of the Republic of Slovenia.
7. Security and required data
We use HTTPS, rate limits, server validation, a honeypot, protected admin access and server-side secrets. Starred fields are required to handle your enquiry.
8. Changes
We update this document when forms, purposes or providers change. The latest revision date appears above.