Privacy policy and cookies

Last updated: 4 July 2026

1. Data controller

The operator of tempestorm.sk and controller of personal data is:

DataStorm s.r.o.
Záhradná 10, 962 12 Detva, Slovakia
Reg. No (IČO): 50145622
Tax ID (DIČ): 2120208552
VAT ID (IČ DPH): SK2120208552
E-mail: info@tempestorm.sk

2. What data we process

Technical data — IP address, browser type, operating system, time of visit. Processed automatically by the web server for operation and security.
Contact form data — name, e-mail, phone, message content. You send these voluntarily when you contact us. The form is protected from bots by Cloudflare Turnstile, which processes technical data (e.g. IP address) for verification.
AI chat data — the content of messages you write to our AI assistant, and your e-mail if you voluntarily leave it in the chat. Please do not enter sensitive personal data into the chat.
Analytics data — anonymized data about behaviour on the site (pages visited, time on page, country, interactions such as clicks and scrolling). Processed only with consent via Google Analytics 4 and Microsoft Clarity. Clarity creates anonymized interaction recordings and heatmaps; text you type into forms is masked.

3. Purpose and legal basis

Replying to your enquiry — when you contact us. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) or pre-contractual relationship (Art. 6(1)(b) GDPR).
Performance of a contract — when working together we process data needed to fulfil obligations. Legal basis: Art. 6(1)(b) GDPR.
Traffic analysis — measuring site effectiveness via GA4. Legal basis: consent (Art. 6(1)(a) GDPR).
Site security — access logging to detect attacks and protecting the form from spam (Cloudflare Turnstile). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
AI assistant — answering questions about the product; messages are processed by an AI model and conversations are stored for service quality and follow-up. Legal basis: legitimate interest (Art. 6(1)(f) GDPR), or pre-contractual relationship (Art. 6(1)(b) GDPR) when you leave contact details.

4. Retention period

Contact form data: 3 years from the last communication
Server logs: 30 days
Analytics data (GA4): 14 months
Analytics data (Microsoft Clarity): session recordings 30 days, aggregated statistics 13 months
AI chat conversation logs: 12 months
Accounting documents: 10 years (Accounting Act)

5. Who we share data with

We do not share your data with third parties except for these processors:

Hosting provider — the server running the site
Google Ireland Ltd. — Google Analytics 4 (only with consent). Data may also be processed outside the EU with an adequate level of protection.
Microsoft Ireland Operations Ltd. — Microsoft Clarity, website usage analysis (only with consent). Data may also be processed outside the EU with an adequate level of protection.
Cloudflare, Inc. — Turnstile, protecting the contact form from bots (processes technical data such as IP address; no marketing use).
Anthropic, PBC — processing AI assistant messages to generate replies (USA, standard contractual clauses; messages are not used to train models).
E-mail provider — for receiving and sending e-mails

6. Your rights

As a data subject you have the following rights under GDPR:

Right of access to the data we process about you
Right to rectification of inaccurate or incomplete data
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time (e.g. by changing cookie settings)
Right to lodge a complaint with the supervisory authority

To exercise your rights, write to us at info@tempestorm.sk.

7. Cookies

We use the following categories of cookies:

Strictly necessary

Essential for the site to work, cannot be turned off. They do not require your consent.

Analytics (Google Analytics 4, Microsoft Clarity)

Help us understand how the site is used. Processed only with consent — without it the analytics scripts do not load at all.

Name	Purpose	Duration
_ga	Distinguishes unique visitors (GA4)	2 years
_ga_*	Session state for GA4	2 years
_clck	Visitor identifier for Microsoft Clarity	12 months
_clsk	Links interactions into one session (Clarity)	1 day

Marketing and functional

We currently use no marketing or third-party functional cookies. If we add them, we'll place them in the relevant category and ask for new consent.

8. Changing cookie settings

You can change your preferences at any time:

9. Contact

Address questions about the processing of personal data to:
DataStorm s.r.o. · E-mail: info@tempestorm.sk · Záhradná 10, 962 12 Detva, Slovakia

10. Supervisory authority

Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27
Web: dataprotection.gov.sk

Name	Purpose	Duration
PHPSESSID	Session identification (form CSRF protection)	until browser is closed
ts_consent	Records your cookie preferences	12 months