This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data Controller

We act as the Data Controller for the personal data collected through our website. If you have any questions, you can contact us at:

Email: tomkas.consulting@gmail.com

2. Information We Collect

We may collect the following categories of personal data:

• Personal identification information: name, email address, phone number.
• Technical data: IP address, browser type, device information.
• Usage data: pages visited, time spent on the site, click behavior.
• Cookies and tracking technologies: used for analytics, functionality, and marketing.

3. How We Use Your Information

We process your personal data for the following purposes:

• To provide and maintain our website.
• To respond to inquiries.
• To improve user experience.
• To comply with legal obligations.
• For analytics and performance monitoring.
• With consent, for marketing communications.

4. Legal Bases for Processing (GDPR)

We rely on the following lawful bases under GDPR:

• Consent (Art. 6(1)(a)) for marketing and optional cookies.
• Contract (Art. 6(1)(b)) when you provide data necessary for us to deliver services.
• Legitimate interests (Art. 6(1)(f)) for website functionality and security.
• Legal obligation (Art. 6(1)(c)) when required by law.

5. Cookies

We use cookies to enhance your browsing experience. You may manage cookie preferences through your browser or our cookie banner.

6. Data Sharing

We may share your information with:

• Service providers (e.g., hosting, analytics).
• Legal authorities when required.
  We do not sell or rent personal data.

7. Data Retention

We retain personal data only as long as necessary for the purposes described or as required by law.

8. Data Transfers Outside the EU

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs).

9. Your GDPR Rights

You have the right to:

• Access your personal data.
• Request rectification.
• Request erasure (“right to be forgotten”).
• Restrict processing.
• Object to processing.
• Request data portability.
• Withdraw consent at any time.

To exercise these rights, please contact us at the provided email.

10. Security

We implement technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

11. Links to Other Websites

Our website may contain links to external sites. We are not responsible for their privacy practices.

12. Updates to This Policy

We may update this Privacy Policy periodically. The updated version will be posted on this page with the revised date.