How we handle your data

1. Data Controller

Delta Labs s.r.o., [registered address], IČO [number], email: welcome@deltalabs.fun.

We do not have a Data Protection Officer (DPO) - for data-related requests contact us directly at the email above.

2. Data We Collect

Contact form submissions

When you book an intro call or send an enquiry we collect:

• Name
• Work email address
• Company name (optional)
• Budget range (optional)
• Message / notes (optional)
• Requested meeting date and time

Server logs

Our hosting provider (Railway) automatically records standard access logs (IP address, browser type, pages visited, timestamps). These are retained for up to 30 days and used solely for security and diagnostics.

Analytics

We use Plausible Analytics - a privacy-first, cookieless analytics service based in the EU. Plausible does not use cookies, does not collect personal data, and does not track you across sites. No GDPR consent is required for Plausible. See plausible.io/privacy for details.

3. Lawful Basis for Processing

Data	Lawful basis
Contact form data	Legitimate interest (Art. 6(1)(f) GDPR) - responding to your enquiry and managing our business pipeline
Server logs	Legitimate interest - security and infrastructure management
Analytics (Plausible)	No personal data processed - GDPR does not apply

4. How We Use Your Data

• To schedule and conduct the intro call you requested
• To follow up on your enquiry
• To send a calendar invitation
• We do not use your data for marketing or share it with third parties for commercial purposes

5. Data Sharing

We do not sell your data. We share data only with service providers acting as our data processors:

• Railway (hosting / infrastructure) - EU data processing
• Google Workspace (Gmail) - email delivery and internal team communication. Data may be processed in the United States under Google's Standard Contractual Clauses and the EU–US Data Privacy Framework (adequacy decision, July 2023).
• Plausible Analytics - cookieless, anonymised analytics only

We may disclose data if required by Slovak or EU law, court order, or to protect our legal rights.

6. Data Retention

• Contact form submissions are retained for 2 years from the date of submission, then permanently deleted.
• Server access logs are deleted within 30 days.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access - request a copy of the data we hold about you
• Rectification - request correction of inaccurate data
• Erasure - request deletion of your data ("right to be forgotten")
• Restriction - request that we limit processing of your data
• Portability - receive your data in a structured, machine-readable format
• Objection - object to processing based on legitimate interest

To exercise any right, email us at welcome@deltalabs.fun. We will respond within 30 days.

8. Cookies

This site uses one cookie:

• Django session cookie (sessionid) - strictly necessary for the contact form CSRF protection. No personal data stored. No consent required.
• Cookie consent preference (cookie_consent) - remembers your dismissal of the cookie notice. Expires after 1 year.

We do not use advertising cookies, third-party tracking cookies, or social media cookies.

9. Supervisory Authority

If you believe we have handled your data unlawfully you have the right to lodge a complaint with the Slovak data protection authority:

Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava 27, Slovak Republic
dataprotection.gov.sk

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Material changes will be noted on the website.