Privacy policy
Last updated:
This policy explains what personal data comka collects through comka.eu, why, and what you can do about it. It’s short because we collect very little.
Who is responsible
The controller of your data is comka. For anything in this policy, write to hello@comka.eu.
What we collect
When you use the contact form: your name, company, email address, website or store link (optional), the marketplaces you ticked (optional), your message, the language of the page, and which “Who we help” link you clicked before writing, if any.
When you email us: your email address and what you write.
When you visit the site: your IP address and the technical data every browser sends, such as the browser type. Our hosting provider processes them to deliver the pages, keep the site secure and stop spam. We also count visits with Cloudflare Web Analytics, which uses no cookies and builds no profile of you.
We don’t ask for sensitive data. Please don’t put any in your message.
Why we use it, and on what legal basis
- To reply to your message and, if you ask for one, to prepare a proposal. Legal basis: your request (Article 6(1)(b) GDPR, steps taken at your request before a contract).
- To keep the site secure and the form free of spam. Legal basis: our legitimate interest in running a safe website (Article 6(1)(f) GDPR).
- To count visits in total, so we know which pages people use. Legal basis: our legitimate interest (Article 6(1)(f) GDPR). No cookies, no tracking across other sites.
We don’t sell your data, use it for advertising or make automated decisions about you.
Who else handles it
The website doesn’t store form messages. The form sends one email to our inbox, through these providers, who process data on our behalf:
- Cloudflare, Inc. hosts the website, runs the spam check on the form (Turnstile) and counts visits (Web Analytics). Turnstile looks at technical signals, such as your IP address and browser, to tell people from bots. See Cloudflare’s privacy policy and the Turnstile privacy addendum.
- Resend delivers the form email to our inbox. It sends from its EU region (Ireland) and keeps a copy of each email and its logs for 30 days.
- Google (Google Workspace) hosts our mailbox, where your message and our replies are kept.
Cloudflare and Resend are based in the United States, and Google may also process data there. When data leaves the EU, it is protected by the safeguards the GDPR requires, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long we keep it
- Your message and our emails: as long as we need them to answer you and, if we work together, for that relationship and any legal retention period after it. If we don’t end up working together, we delete them 12 months after our last contact.
- Resend’s copy of the form email: 30 days.
- Technical logs at Cloudflare: a few days, unless they’re needed to investigate an attack.
Your rights
You can ask us at any time to see the data we hold about you, correct it, delete it, limit how we use it, object to its use or get a copy in a portable format. Write to hello@comka.eu. We reply within one month at the latest.
If you think we’ve handled your data wrongly, you can also complain to a data protection authority, for example the one in the EU country where you live or work.
Changes
If we change this policy, we’ll update this page and the date at the top.