| Purpose | Data processed | Legal basis | Retention |
| Handling enquiries sent via the contact form | Name, e-mail, phone, business name, message content | Legitimate interest / pre-contractual steps (Art. 6(1)(b) and (f) GDPR) | Duration of communication + 1 year; if cooperation begins, per the business relationship |
| Marketing and advertising (Meta/Facebook remarketing) | Cookies, device identifiers, on-site behaviour data | Consent (Art. 6(1)(a) GDPR) | Until consent is withdrawn, max. 13 months |
| Website analytics (Google Analytics) | Cookies, IP address (anonymised), visit data | Consent (Art. 6(1)(a) GDPR) | Until consent is withdrawn, max. 14 months |
| Contract performance and invoicing (B2B partners) | Billing details, company ID, contact person | Contract performance and legal obligation (Art. 6(1)(b) and (c) GDPR) | 10 years under the Accounting Act |