Privacy and personal data (GDPR)

What we process and why

• Customers and suppliers — name, contact details, addresses, tax identifiers; needed to fulfil contracts, quotes, orders and invoicing (legal basis: contract).
• Customer portal accounts — e-mail and sign-in records, so you can access your documents and enquiries (legal basis: contract).
• Marketing — your e-mail, only if you gave consent; you can withdraw it at any time and every message carries an unsubscribe link (legal basis: consent).
• Business correspondence — e-mail addresses and message content needed to answer you (legal basis: legitimate interest).
• Employees and administrators — employment and account records (legal basis: contract and legal obligations).

How long we keep it

Issued invoices and accounting records are kept for 10 years, as the law requires. Other personal data is kept only as long as needed: old leads, enquiries and mail logs are automatically anonymized or removed after their retention window.

Your rights

• Access and portability — on request we export everything we hold about you as a structured file.
• Erasure (the right to be forgotten) — on request we anonymize your personal data everywhere the law allows; issued invoices must stay, but your personal fields are frozen only there.
• Consent — granting and withdrawing is recorded with a timestamp; withdrawing is as easy as granting.
• Rectification and objection — write to us and we will correct or stop the processing in question.

To exercise any right, contact the operator of this site (see the contact in the footer). Every request is logged and answered without undue delay.

How your data is protected

• Personal mailboxes are visible only to their owner — not even an administrator can read them.
• Uploaded files live in a private store and are served only through permission-checked downloads.
• Outgoing e-mail is restricted to known contacts, so your address is never sprayed.
• We use no advertising or third-party tracking; see the cookies page for the full list.