Privacy policy

1. Controller

2. Data processed

Depending on the form and enabled component settings, the following categories may be processed:

• Name and other identifying information entered in the form.
• Email address, telephone number and preferred callback time.
• Subject, message and comments supplied by you.
• Submission page, submission time and technical anti-abuse information.
• IP address and an approximate location derived from the IP address, if enabled.

3. Purposes and legal bases

We process form data to receive, answer and document enquiries, arrange callbacks, protect the forms against misuse and maintain reliable communication. The applicable legal basis depends on the context of your request.

• Article 6(1)(a) GDPR where processing is based on your consent.
• Article 6(1)(b) GDPR where your request concerns a contract or pre-contractual steps.
• Article 6(1)(f) GDPR for secure and efficient enquiry handling and prevention of misuse, after balancing the relevant interests.

Fields marked as required are necessary to transmit and handle the request. Without them, the form cannot be submitted or the request may not be answered. Providing other fields is voluntary.

4. IP address and approximate location

An IP address is personal data. Quick Contact uses it only according to the enabled settings and for the purposes described below. IP-based location is approximate and does not provide a precise address.

• The IP address is included in the administrative notification email.
• The IP address is not stored in the Quick Contact database record. It may still appear in the notification email and ordinary server or email logs.
• For approximate country, region, city and timezone resolution, the IP address is transmitted over HTTPS to the IPWhois service. Its privacy information is available at ipwho.is.

5. Recipients and service providers

Access is limited to persons and processors who require the data for handling the enquiry, operating the website or delivering email.

• Authorised staff or contractors responsible for responding to enquiries.
• The configured hosting, SMTP or email provider used to transmit and store notifications.
• IPWhois receives the IP address when geolocation is enabled. Depending on the provider's processing locations, data may be processed outside the EEA; the controller must verify the applicable safeguards.

Quick Contact does not use the submitted data for automated decision-making or profiling.

6. Retention

Quick Contact database records are retained for up to 365 days and expired records are removed when a new form is submitted. Related email messages, backups or records required by statutory duties or legal claims may follow different retention periods.

7. Security

The forms use CSRF protection, validation, submission throttling, a hidden anti-bot field and optional CAPTCHA. Data is transmitted using the security provided by the website and configured mail transport. No internet transmission can be guaranteed to be completely secure.

8. Your rights

Subject to the legal requirements and exceptions, you have the following rights under the GDPR:

• Access to your personal data and information about its processing.
• Correction of inaccurate or incomplete data.
• Erasure of personal data where the legal conditions are met.
• Restriction of processing where the legal conditions are met.
• Data portability for processing covered by Article 20 GDPR.
• Objection to processing based on legitimate interests.
• Withdrawal of consent at any time with future effect; prior processing remains lawful.

9. Right to complain

You may lodge a complaint with a competent data protection supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.