Privacy policy

Data controller

The controller of personal data is:

Kamil Salikhov
Bratislava, Slovakia
E-mail: info@umiworkshop.sk
Phone: +421 952 229 704

A person who works with the controller on running Umi Workshop also has access to personal data to the extent necessary. They process it solely on the controller’s instructions and is bound by a duty of confidentiality.

What data we process, why and for how long

• Quote requests. Through the “Get a quote” form we collect your full name, e-mail and phone number (optional). If you contact us via WhatsApp, e-mail or phone, we also process what you tell us in the message or call. We use the data only to contact you and prepare an offer. Legal basis: if you ask as a sole trader in your own name, steps prior to entering into a contract (Art. 6(1)(b) GDPR); if you ask on behalf of a company, our legitimate interest in handling the enquiry of the company you represent (Art. 6(1)(f) GDPR). If no cooperation follows, we delete the data no later than 12 months after our last communication.
• Cooperation and invoicing. If we work together, we process contact persons’ and billing details for the duration of the cooperation to perform the contract (point (b)), and keep accounting records for as long as the law requires (point (c)).
• Basic visitor statistics (Cloudflare Web Analytics): pages viewed, referrer, device type and country. No cookies and no profiles; we only see aggregated figures. Legal basis: our legitimate interest in knowing how the website is used (point (f)).
• Recordings of website use (Microsoft Clarity): only with your consent (point (a)). Details below under Cookies and analytics.
• Website security and protecting the form against bots: IP address and technical request data, short term. Legal basis: our legitimate interest in secure operation (point (f)).

Right after you submit the form we send you one automatic confirmation that we received your request. We send no marketing newsletters and we do not sell your data. Providing your data is voluntary; without your name and e-mail, however, we cannot send you an offer. We do not use automated decision-making or profiling.

Who receives the data

Processors that handle data for us and on our instructions:

• Cloudflare, Inc. (USA) – website hosting, receiving the form and visitor statistics.
• Plus Five Five, Inc. (Resend) (USA) – sending the request e-mail and the confirmation.
• Websupport, s.r.o. (Slovakia) – our e-mail inbox on the umiworkshop.sk domain.

Independent controller: Microsoft (Microsoft Ireland Operations Limited and Microsoft Corporation, USA) – the Clarity service, only if you have allowed it. Microsoft also processes this data for its own purposes under its Privacy Statement.

If you message us on WhatsApp, WhatsApp Ireland Limited also processes the messages under its own terms.

Transfers outside the European Economic Area

Cloudflare, Resend and Microsoft may process data in the USA. The transfer relies on the European Commission’s adequacy decision (EU) 2023/1795 (EU–US Data Privacy Framework) and on standard contractual clauses. We will send you a copy of the safeguards on request.

Your rights

You have the right to access your data, have it corrected or erased, restrict its processing and receive it in a portable format. You can object at any time to processing based on legitimate interest. You can withdraw your analytics consent at any time with the “Cookie settings” button in the footer; withdrawal does not affect processing carried out before it.

Just write to info@umiworkshop.sk and we will reply within one month. If you believe we are not handling your data correctly, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

Cookies and analytics

Without your consent the website stores no analytics or advertising cookies. In your browser it only remembers your light or dark mode choice (umi-theme) and your analytics decision (umi-consent). Both are needed for a function you chose yourself and are never sent anywhere. Cloudflare Web Analytics uses no cookies.

Microsoft Clarity – only with your consent. If you allow analytics in the banner, Clarity records how the website is used (clicks, scrolling, mouse movement, pages visited, device and browser type) and turns this into reports, heatmaps and visit recordings. Form fields (name, e-mail, phone) are masked in the recordings. Clarity sets the cookies _clck and _clsk on our domain, and Microsoft sets CLID, ANONCHK, MR, MUID and SM on its own domains. Advertising storage is turned off.

Recordings are kept for 30 days; selected recordings and heatmaps for up to 9 months. Until you give consent, Clarity does not start at all. After you withdraw consent we switch Clarity off, reload the page and delete Clarity’s cookies on our domain. We ask for your consent again after 6 months.

Training participants

We receive participants’ names and work e-mails from the company that ordered the training and use them only to organise it. During the training each participant uses AI tools under their own account and that tool’s terms; we have no access to company data.