Privacy Policy

1) Who we are (data controller)

This website is branded and presented as moonwisp.ink. For legal and administrative purposes, the operator and data controller is DETOA Albrechtice, located at Jiřetín pod Bukovou 6, 468 43 Jiřetín pod Bukovou.

If you have any questions about this policy or want to exercise your privacy rights, you can contact us by email at [email protected]. We do not provide phone support for privacy requests. Email is the fastest and most reliable method for verification and record keeping.

13) What data we collect

We collect data to operate moonwisp.ink, keep the site secure, provide account-related functionality, measure performance, and, if you consent, support advertising measurement and remarketing. Depending on how you interact with the website, we may collect the following categories of information:

• Full name
• Email address
• Phone number
• IP address
• Browser type and version
• Device type and operating system
• Cookies and tracking identifiers
• Usage data (pages visited, time on site, click paths)
• Form submission content
• Conversion events (form submits, calls, purchases)

If a specific data element is optional, we aim to collect only what is reasonably necessary to provide the feature you request. For example, you can browse most pages without creating an account. If you register, we collect the details needed to create and maintain your account.

1) Cookie categories

Cookies are small text files stored on your device. We use cookies and similar technologies to support core site functionality and, with your permission, to measure performance and deliver advertising. We group cookies into exactly three categories:

2) Marketing cookies disclosures

The following disclosures describe how marketing and advertising technologies may operate when you consent to marketing cookies. These statements apply only when marketing cookies are enabled in your cookie preferences.

3) Consent requirements

Our cookie consent banner offers three choices: “Accept All”, “Reject Non-Essential”, and “Manage Preferences”. Analytics and marketing cookies are not activated until you consent. Your selection is stored in localStorage for 12 months and can be changed at any time.

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

You may withdraw consent at any time by clicking 'Manage cookie preferences' in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.

4) Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

5) Lead Forms and Contact Requests

When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.

Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).

Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.

You may request deletion of your data at any time by contacting us at the email address in this policy.

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

6) Google Services and Advertising

This website uses the following Google services:

• Google Analytics 4: collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
• Google Ads Conversion Tracking: records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.
• Google Remarketing: allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).
• Google Tag Manager: deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

7) Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:

• Page views and time on site
• Specific conversion events (form submissions, purchases)
• Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

8) Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

9) Landing Page Integrity Statement

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

10) Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address in this policy if you believe we have received data from a minor.

11) International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly.

12) User Rights (GDPR Articles 15 to 22)

If you are located in the EEA or UK, you have the following rights:

• Access (Art. 15): request a copy of data we hold about you
• Rectification (Art. 16): correct inaccurate or incomplete data
• Erasure (Art. 17): request deletion (right to be forgotten)
• Restriction (Art. 18): limit how we process your data
• Portability (Art. 20): receive your data in a structured, machine-readable format
• Objection (Art. 21): object to processing based on legitimate interest
• Withdraw consent (Art. 7.3): revoke consent at any time without penalty

To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

• EU users: https://edpb.europa.eu
• UK users: https://ico.org.uk

14) Legal Basis for Processing (GDPR Art. 6)

We process personal data under the following legal bases, depending on the context:

• Contact form data: consent (Art. 6.1.a) and contract performance (Art. 6.1.b)
• Analytics data: consent (Art. 6.1.a)
• Marketing/remarketing data: consent (Art. 6.1.a)
• Security and fraud prevention: legitimate interest (Art. 6.1.f)

Where consent is used as the legal basis, you can withdraw consent at any time via the cookie preferences panel. Where legitimate interest is used, we balance our interests with your rights and expectations and implement safeguards appropriate to the risk.

15) Retention Periods

We keep personal data only as long as necessary for the purposes described in this policy. Retention periods include:

• Contact form submissions: 2 years
• Analytics data (GA4): 14 months
• Marketing cookies (Google Ads): up to 540 days
• Email communications: duration of relationship + 1 year
• Server logs: 90 days
• Cookie consent records: 3 years (audit requirement)

If we are required by law to retain certain records longer (for example, accounting or compliance obligations), we will do so and restrict access to those records.

Additional notes on security

We use reasonable administrative, technical, and organizational safeguards to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us by email so we can investigate.

We recommend using a unique password and keeping your device software up to date. If you use a shared device, sign out after use and avoid saving credentials in a public browser.

Policy metadata

Last Updated: January 15, 2026. Effective Date: January 15, 2026. Changes to this policy will be announced via a homepage banner at least 14 days before taking effect.