Request a quote

PAGEMAKE / PRIVACY

Privacy policy

How and why we process your personal data, how long we keep it, and the rights you have under the European Union General Data Protection Regulation (GDPR).

Last updated: 10 October 2026

1. Controller details

The PageMake website and service are operated by, and the controller of our own client data is:

VeronaJob s.r.o.
Registered office
Záhradnícka 997/9, 932 01 Veľký Meder, Slovakia
Company ID
56915811
Tax ID
2122496618
VAT ID
SK2122496618

Personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and the applicable Slovak legislation.

2. What data do we process?

For private individuals

  • Full name.
  • Email address and phone number.
  • Billing address.
  • The content of quote requests and messages.
  • Order, contract and payment details.

For businesses

  • Company name and registered office.
  • Company ID, tax ID and VAT ID, where applicable.
  • Name, phone number and email address of the contact person.
  • Quotes, contracts and invoicing information.

During website development

Texts, images and documents provided by the client, together with the technical information and access needed for development.

Technical data

IP addresses actually recorded, server logs and technical data required for the website to function.

We only request and process the data needed for the purpose concerned.

3. Why do we process the data?

We process personal data for the following purposes:

  • Receiving and answering quote requests.
  • Keeping in contact with clients.
  • Preparing and performing contracts.
  • Developing and operating websites.
  • Providing hosting services.
  • Invoicing and accounting.
  • Customer support and complaint handling.
  • IT security.
  • Marketing communication, where there is an appropriate legal basis.

4. Legal basis for processing

Depending on the activity, processing takes place on the following legal bases:

Preparing or performing a contract – Article 6(1)(b) GDPR

Handling quote requests from private clients and providing the services ordered.

Legal obligation – Article 6(1)(c) GDPR

Meeting invoicing, accounting and tax obligations.

Legitimate interest – Article 6(1)(f) GDPR

Server security, handling legal claims and, after a proper balancing test, business communication with the contact persons of companies.

Consent – Article 6(1)(a) GDPR

Consent-based marketing and any statistical or advertising processing that requires consent.

5. How long we keep data

Quote requests that do not lead to a contract: 90 days

We keep the personal data from such requests for no longer than 90 days from the last substantive contact with the client.

When the retention period ends, we delete the data or irreversibly anonymise it, unless further retention is required by a legal obligation or a properly justified legal claim.

Completed orders

We keep contract data for as long as necessary to perform the service, meet legal obligations and handle any legal claims. The exact periods are to be set for each category of data.

Invoicing and accounting data

For the period required by the applicable Slovak accounting and tax legislation, typically 10 years.

Marketing data

Until consent is withdrawn or the predefined retention period expires.

Server logs and technical data

For the period set out in the actual operating and security policy.

6. Own servers and hosting

VeronaJob s.r.o. provides the PageMake website and the hosting service sold to clients on server infrastructure that it operates itself.

VeronaJob s.r.o. is responsible as controller for PageMake's own quote, contract and client relationship data.

For personal data stored on clients' websites, VeronaJob s.r.o. usually acts as a processor where the client determines the purposes and means of the processing.

Where necessary, such services are covered by a separate data processing agreement in line with Article 28 GDPR.

The actual physical location of the servers and any external infrastructure providers will be specified in the final documentation.

7. Who can access the data?

Only authorised persons can access personal data.

Where necessary to provide the service, staff, developers, system administrators and accounting providers performing the relevant task may be given access.

When we use external processors, we conclude the required data protection agreements.

AI integration services

For AI integration (for example a chat assistant), the texts to be processed are handled over API by the AI provider named in the contract (for example OpenAI, Anthropic or Google), acting as a processor. The provider, where the data is stored and, for transfers outside the EU, the safeguards applied (for example standard contractual clauses) are set out in the contract.

We do not sell personal data to third parties.

8. Data security

We apply appropriate technical and organisational measures to protect personal data.

These include in particular:

  • Restricting access rights.
  • Protecting systems and access.
  • Encrypted data transfer.
  • Backups.
  • System updates and security checks.
  • Proper handling of personal data breaches.

The measures are applied in line with the actual technical set-up.

9. Your rights

Under the conditions of the GDPR, data subjects have the right to:

  • Request information about and access to their personal data.
  • Request the correction of inaccurate data.
  • Request the erasure of their personal data.
  • Request the restriction of processing.
  • Object to processing based on legitimate interest.
  • Exercise the right to data portability in specific cases.
  • Withdraw their consent at any time.

As a rule, we respond to requests within one month.

10. Marketing and newsletters

PageMake sends marketing messages only in accordance with the applicable data protection and electronic communications rules.

Where the legal basis for marketing is consent, it is voluntary, given separately and can be withdrawn at any time.

Marketing consent is not a condition for requesting a quote.

12. International data transfers

If a provider we use processes personal data outside the European Economic Area, the transfer may only take place under the appropriate conditions and safeguards required by the GDPR.

We provide detailed information about any such transfers based on the providers actually used.

13. Complaints and supervisory authority

For data protection questions, data subjects can contact VeronaJob s.r.o. through the PageMake data protection contact.

Data subjects may lodge a complaint with the competent data protection supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky

14. Changes to this policy

The controller may update this policy when legislation or its processing activities change.

The current version will be available on the PageMake website.

PAGEMAKE / COOKIES

Cookie policy