Privacy policy
Last updated: 21 August 2026
This policy explains how we handle the personal data you provide through the contact form on this website. We take your privacy seriously and only process the data we genuinely need to handle your enquiry.
1. Data controller
The data controller is Andrej Gondáš, business ID (IČO) 29536197, VAT ID CZ686632538, registered at Chudenická 1059/30, 102 00 Praha 10 – Hostivař, Czech Republic. Sole trader listed in the Czech Trade Register. You can reach us at ahoj@winly.marketing — we answer questions about personal data within 30 days at the latest.
2. What data we process
We process the data you enter in the form yourself: your name, email address, optionally your phone number, your company website address and the content of your message (a description of what you need).
3. Purpose and legal basis
We process the data to handle your enquiry, prepare a non-binding audit and proposal, and follow up. The legal basis is taking steps at your request prior to entering into a contract, or our legitimate interest in responding to your enquiry (Art. 6(1)(b) and (f) GDPR).
4. Retention period
We keep personal data for as long as it takes to handle the enquiry and the conversation that follows, and no longer than 24 months from the last contact. If the conversation turns into a contract, retention follows the rules of that engagement and our statutory obligations.
5. Sharing with third parties
We do not share your data with third parties for marketing. To run the website and the form we use processors — the hosting and form service Netlify, and Google Tag Manager for traffic measurement. They process data under data processing agreements and in line with the GDPR. Measurement tools only start after your consent, see point 6.
6. Cookies and measurement
We use Google Tag Manager on this site to run traffic measurement. No analytics or advertising cookie is set before you consent to it — the default state is “denied” (Google Consent Mode v2) and only your choice in the bar shown on your first visit changes that. If you pick “Necessary only”, we also delete any analytics cookies already set. Your choice is remembered in the browser’s local storage rather than in a cookie, and you can change or withdraw it at any time using the button below.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to object to processing, and to data portability. You also have the right to lodge a complaint with the relevant data protection authority. You can exercise your rights via the contact in point 1.