--- title: "Privacy policy | Roundly" description: "How Roundly Consulting s.r.o. collects, uses and protects personal data — website, cookies, analytics, donations and your GDPR rights." url: https://roundly-consulting.com/privacy-policy language: en --- # Privacy policy How we collect, use and protect personal information when you visit this website or donate to our open-source work. Last updated: October 3, 2026 ## 1\. Introduction This Privacy Policy explains how Roundly Consulting s.r.o. ("we," "us," or "our") collects, uses, and protects personal information when you visit our website at roundly-consulting.com (the "Website"), and when you donate to our open-source work by card through Stripe, as a member through Patreon, or in cryptocurrency. ## 2\. Data controller The data controller for personal data collected through this Website is: **Roundly Consulting s.r.o.** Tolstého 5 811 06 Bratislava Slovakia You can contact us regarding data protection matters through our [contact form](https://roundly-consulting.com/contact.md). ## 3\. Information we collect We collect the following types of information: **Contact form submissions:** When you request a quote or contact us, we collect your name, e-mail address, company name, budget range and any message you provide. Submissions are delivered to us through Web3Forms (see section 11). **Usage data:** We use Google Tag Manager (GTM) to manage analytics scripts on our Website, including Google Analytics, to collect anonymous usage data such as pages visited, time on site, referral source, and general geographic location. Google Analytics data is collected using cookies and is processed by Google LLC under their [Privacy Policy](https://policies.google.com/privacy). **Cookies:** We use essential cookies required for the Website to function (e.g., language preference) and, with your consent, analytics cookies managed through Google Tag Manager. See section 10 for full details on our cookie usage. **Donations:** When you donate through Stripe, Patreon or in cryptocurrency, we receive donation data from the payment provider or the blockchain. See section 4 for details. ## 4\. Donations When you donate to our open-source work, we process personal data under our [Donation terms](https://roundly-consulting.com/donation-terms.md): **Card donations via Stripe:** Stripe processes your payment. We receive your name, e-mail address, billing country or address where collected, the amount, currency, date and status of the payment, and limited card information such as the card brand and last four digits — never your full card number. Stripe processes payment data as an independent controller under its [Privacy Policy](https://stripe.com/privacy). **Memberships via Patreon:** Patreon processes your membership and payments. We receive your Patreon name, e-mail address and membership details (such as status, start date and payment history). Patreon processes your data as an independent controller under its [Privacy Policy](https://www.patreon.com/policy/privacy). **Crypto donations:** We process the transaction data recorded on the public blockchain — the sending and receiving addresses, amount, date and transaction hash — and any information you send us about a donation, for example when you ask about it. A wallet address can be personal data if it can be linked to you. **Sanctions and ransomware screening:** We check every incoming crypto donation with online screening tools that compare the sending addresses and the history of the funds against sanctions lists and addresses linked to ransomware, hacks, fraud and other crime. The tools receive the public transaction data and return a risk assessment, which we keep with the donation record. Screening is automated, but decisions to refuse, freeze or report a donation are made by us. **Reporting to authorities:** If a donation is flagged, or we suspect it comes from crime or sanctions evasion, we may share the transaction data, screening results and any information we hold about the donor with the Police Force of the Slovak Republic, including its Financial Intelligence Unit, or with other competent authorities in Slovakia or abroad. **Public blockchains:** Transactions on a blockchain are public and permanent. We cannot change or delete data recorded on a blockchain; your rights apply to the copies we keep in our own records. ## 5\. How we use your information We use your information to: \- Respond to your quote requests and inquiries \- Prepare the quote you requested \- Record, process and account for donations \- Screen crypto donations for sanctions and ransomware exposure, prevent fraud and cooperate with authorities \- Analyze Website traffic and usage patterns to improve our content and user experience \- Comply with legal obligations We do not sell, rent, or share your personal information with third parties for marketing purposes. ## 6\. Legal basis for processing We process your personal data based on: **Pre-contractual steps:** To prepare a quote you requested (Art. 6(1)(b) GDPR). **Legitimate interest:** To operate and improve our Website and respond to inquiries. **Consent:** For analytics cookies (Google Analytics), where you voluntarily submit your contact information through our forms, and for occasional marketing communication where you give it. You can withdraw consent at any time — cookie consent through the cookie settings in the website footer. **Donations:** To receive and process your donation under our Donation terms (Art. 6(1)(b) GDPR); to keep accounting records and respond to lawful requests from authorities (Art. 6(1)(c) GDPR); and, based on our legitimate interests (Art. 6(1)(f) GDPR), to screen crypto donations, prevent fraud and misuse of our wallets, report suspected crime, and establish, exercise or defend legal claims. **Legal obligation:** Where required by applicable law. ## 7\. Data retention Contact form submissions are retained for as long as necessary to fulfill the purpose for which they were collected, typically up to 24 months. Google Analytics data is retained for 14 months and is automatically deleted after this period. Cookie consent preferences are stored for 12 months. Donation records — including data received from Stripe or Patreon and crypto transaction data — are kept for 10 years after the end of the year they relate to, as required by Slovak accounting law. Screening results are kept for the same period; for flagged donations we keep the related records for as long as proceedings with the authorities or legal claims require. Data recorded on public blockchains is permanent and outside our control. ## 8\. Your rights Under GDPR, you have the right to: \- Access the personal data we hold about you \- Request correction of inaccurate data \- Request deletion of your data \- Object to or restrict processing of your data \- Request data portability \- Withdraw consent at any time (including cookie consent via the cookie settings in our footer) Some rights are limited where we must keep data by law — for example, accounting records of donations cannot be deleted before the retention period ends. You can object to processing based on our legitimate interests, including crypto screening, but we may continue where we have compelling legitimate grounds or need the data for legal claims. To exercise any of these rights, please contact us through our [contact form](https://roundly-consulting.com/contact.md). ## 9\. Data security We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and secure hosting infrastructure. ## 10\. Cookies Our Website uses Google Tag Manager (GTM) to manage the loading of analytics scripts. GTM itself does not set cookies or collect personal data — it acts as a container that deploys other tags (such as Google Analytics) based on your consent preferences. **Essential cookies (always active):**
preferred-localeStores your preferred language so the site displays in the correct language1 year
cc_cookieStores your cookie consent preferences1 year
**Analytics cookies (require consent, managed via GTM):**
_gaGoogle Analytics — distinguishes unique visitors2 years
_ga_*Google Analytics — maintains session state2 years
_gidGoogle Analytics — distinguishes visitors (24h)24 hours
_gcl_*Google Tag Manager — stores campaign and conversion data90 days
Analytics cookies are only set after you give consent through our cookie banner. You can change your preferences at any time by clicking "Cookie settings" in the website footer. If you reject analytics cookies, any previously set analytics cookies will be automatically deleted. ## 11\. Third-party services **Google Tag Manager (GTM):** We use Google Tag Manager to manage and deploy analytics scripts on our Website. GTM itself does not collect personal data or set cookies — it serves as a tag management system that loads other services (such as Google Analytics) based on your consent. GTM is operated by Google LLC. **Google Analytics:** We use Google Analytics 4 (GA4), deployed via GTM, to analyze Website traffic. Google Analytics uses cookies to collect anonymous data about your visit. This data is processed by Google LLC, which may transfer data to servers in the United States. Google is certified under the EU-US Data Privacy Framework. You can opt out of Google Analytics by declining analytics cookies in our cookie banner or by installing the [Google Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout). **Web3Forms:** Our contact form is delivered through Web3Forms, a form-to-e-mail service. The data you submit is transmitted to our e-mail and is not used by Web3Forms for any other purpose. See the [Web3Forms Privacy Policy](https://web3forms.com/privacy). **Hosting:** Our Website is hosted on Cloudflare Pages, a global content delivery and hosting platform operated by Cloudflare, Inc. Cloudflare may process certain technical data (such as IP addresses) for security and performance purposes. We do not embed third-party advertising or social media tracking scripts. **Stripe:** Card donations are processed by Stripe. See the [Stripe Privacy Policy](https://stripe.com/privacy). **Patreon:** Memberships are processed by Patreon, Inc. See the [Patreon Privacy Policy](https://www.patreon.com/policy/privacy). **Blockchain screening tools:** Online sanctions and ransomware screening services receive the public transaction data of crypto donations (addresses and transaction hashes) and return a risk assessment. We do not send them your name or contact details. ## 12\. International data transfers When you consent to analytics cookies, data collected by Google Analytics may be transferred to Google servers in the United States. These transfers are protected by the EU-US Data Privacy Framework and Google's standard contractual clauses. Additionally, website hosting data may be processed on Cloudflare's global network, including servers in the United States. Cloudflare participates in the EU-US Data Privacy Framework and maintains standard contractual clauses for international transfers. Stripe and Patreon may process donation data in the United States and other countries outside the EEA; these transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on standard contractual clauses. ## 13\. Changes to this policy We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. ## 14\. Supervisory authority If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky).