This policy explains what personal data we process in connection with the wrapforge.sk website and the WrapForge™ software, why we process it and what rights you have. It is drawn up under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection.
1.1. The controller is Draftex s. r. o., Pod Juhom 7666, 911 01 Trenčín, Slovakia, Company ID: 55192858, Tax ID: 2121932857, VAT ID: SK2121932857, registered in the Commercial Register of the District Court Trenčín, section: Sro, file no. 44884/R.
1.2. Contact for data protection matters: info@draftex.sk, phone +421 911 999 332. We have not appointed a Data Protection Officer, as the law does not require us to.
2.1. Contact form. When you write to us through the form on the site, we process the data you enter: first name, last name, e‑mail address, phone number (optional), company name (optional), industry, type of enquiry and the message text. Only the first name, last name, e‑mail, type of enquiry and message are required — the rest is up to you.
2.2. Submission log. For every form submission we record the date and time, the type of enquiry, the sender's IP address and the delivery result. If sending fails, we also record the reason. The log helps us troubleshoot delivery problems and defend against abuse of the form. It is stored in a folder that is blocked from web access, and once it reaches 512 kB the oldest part is discarded.
2.3. Protection against bulk sending. So the form cannot be abused to send mass mail, we store the time of the last submission and the number of messages per day for each IP address. The IP address is not stored in readable form but as a hash computed with a random salt, from which the original address cannot be derived. We delete these files after 24 hours.
2.4. The hosting server keeps its own technical access logs (IP address, time, requested address, browser type). These logs are created by the hosting provider and we process them on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in the operation and security of the server and in resolving technical faults. Their retention follows the hosting provider's settings and normally does not exceed 6 months.
2.5. Licence server and customer records. If you use the WrapForge™ software, licence activation takes place against our licence server. During activation and licence checks we transmit the licence key, a technical fingerprint of the computer, the name of the signed-in operating system user, the computer name and the program version. For a purchased licence we keep customer records: company name, company ID, tax ID, VAT ID, contact person's name, e‑mail, phone and billing address. We process this data to perform the contract (Art. 6(1)(b) GDPR), to protect the licence against misuse (legitimate interest, Art. 6(1)(f) GDPR) and to meet accounting obligations (Art. 6(1)(c) GDPR).
2.6. Scanned data and the patterns you create are never uploaded anywhere — they stay solely on your computer. The program does not send the contents of your projects to any server.
2.7. We do not use any analytics, statistics or advertising tools and we do not track visitor behaviour. We do not build profiles and we do not make automated decisions producing legal or similarly significant effects within the meaning of Art. 22 GDPR. The automatic check of licence key validity (e.g. refusing activation when the number of seats is exceeded) is a technical verification of a contractual condition, not profiling.
| Purpose | Legal basis | Retention |
|---|---|---|
| Handling your enquiry, sending a trial key or a quote | steps prior to entering into a contract at your request — Art. 6(1)(b) GDPR | 3 years from the last communication |
| Defence against abuse of the form and operational security | legitimate interest — Art. 6(1)(f) GDPR | log until discarded at 512 kB, counters 24 hours |
| Performance of the contract for a purchased licence | performance of a contract — Art. 6(1)(b) GDPR | for the term of the licence and a reasonable period after it ends |
| Operation and security of the server (hosting technical logs) | legitimate interest — Art. 6(1)(f) GDPR | per the hosting provider's settings, normally up to 6 months |
| Accounting and tax obligations (invoices) | legal obligation — Art. 6(1)(c) GDPR | 10 years under Act No. 431/2002 Coll. on Accounting |
4.1. We do not sell your data and do not pass it to third parties for marketing purposes.
4.2. To the extent necessary, the data is accessible to our hosting and mailbox provider — Websupport s. r. o., Karadžičova 7608/12, 821 08 Bratislava, Slovakia, Company ID: 36421928 — which also operates the server that runs our licence server. It acts as our processor and is bound by a data processing agreement.
4.3. In justified cases we may provide data to public authorities where the law requires it (e.g. the tax office or law enforcement).
4.4. We do not transfer data outside the European Economic Area. The site loads no content from foreign servers — fonts and images are stored directly on our hosting, so your IP address never reaches any third party while you browse the site.
5.1. The site uses no analytics or advertising cookies. We do not use Google Analytics, advertising pixels or any traffic-tracking tools.
5.2. We use a single cookie, strictly necessary for the contact form to work:
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| PHPSESSID | Holds the verification question (“What is 3 + 5?”) so the server can check your answer when the form is submitted. It is set only once you start filling in the form — not while you simply browse the site. Without it the form could be abused to send bulk mail. | until you close the browser | strictly necessary |
5.3. Strictly necessary cookies do not require your consent under Article 5(3) of Directive 2002/58/EC (and § 109(8) of Slovak Act No. 452/2021 Coll.) — they are required to provide the service you asked for. That is why we do not show a consent dialog, only an informational notice.
5.4. You can delete or block cookies at any time in your browser settings. If you block all cookies, the contact form cannot be submitted — in that case please write to us directly at info@draftex.sk.
5.5. The site stores a single piece of information in your browser's local storage — that you closed the cookie notice — so it is not shown repeatedly. This information never leaves your computer, is not sent to any server and is not linked to any person. You can remove it by clearing the site data in your browser.
6.1. You have the right of access to your data and to a copy of it, the right to rectification of inaccurate data, to erasure (“the right to be forgotten”), to restriction of processing, to data portability to another controller, and the right to object to processing based on legitimate interest.
6.2. Should we ever process data based on your consent, you have the right to withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out before it. For the processing described in this policy we neither need nor request consent.
6.3. Send your request to info@draftex.sk. We handle it free of charge within one month at the latest; for more complex requests we may extend the period by up to two further months and will let you know. If we cannot grant a request, we will explain why and tell you how to lodge a complaint. We may ask for additional details to verify your identity.
6.4. If you believe our processing breaches the rules, you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, phone +421 2 3231 3214, e‑mail statny.dozor@pdp.gov.sk, www.dataprotection.gov.sk.
7.1. The site is served exclusively over an encrypted connection (HTTPS). Form messages are delivered to our mailbox over an encrypted SMTP connection with server certificate verification.
7.2. The submission log and the counters are stored in a folder the web server refuses to serve, and cannot be downloaded over the internet.
7.3. Only authorised staff of the controller have access to the mailbox with enquiries.
8.1. Filling in the form is voluntary. Without the required fields (first name, last name, e‑mail, type of enquiry and message) we cannot handle your enquiry — we need to know who is asking and where to reply. The form also contains a hidden field and a verification question used solely to tell a human from a machine; we do not store their contents.
8.2. When ordering a licence, providing billing details is a contractual requirement and also a requirement of the Accounting Act — without them we cannot issue or invoice the licence. The data sent during activation is necessary to verify the key; without it the software cannot be activated.
9.1. We may update this policy from time to time, in particular if the scope of processed data or the legislation changes. The current version is always available at this address.
9.2. This policy takes effect on 24 August 2026.