Last updated: May 2026
This Privacy Policy explains how we collect, use, and protect your personal data when you visit laser-technology.eu or contact us through this website. We are committed to protecting your privacy in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
1. Data Controller
Yaroslav Fedun (Sole Proprietor / FOP)
Tax ID (RNOKKP): 2704400177
Address: Vul. Viliamsa 140/2, Dnipro, 49000, Ukraine
Email: info@laser-technology.eu
Phone: +38 098 555 02 12
EU Representative (Article 27 GDPR):
FixTime Engineering s.r.o., VAT ID: CZ09434348
Na Zlíchove 240/5, 152 00 Praha 5, Czech Republic
Contact: Sielivanov Maksym
Email: fixtime.engineering@gmail.com | Phone: +420 703 668 000
For any questions about data processing or to exercise your rights, contact the Data Controller or the EU Representative.
2. What Data We Collect and Why
2.1 Enquiry and Contact Forms
Data collected: first name, phone number, email address, message, IP address, timestamp, consent record.
Purpose: Responding to your enquiry and arranging a consultation.
Legal basis: Article 6(1)(b) GDPR – pre-contractual measures; Article 6(1)(f) – legitimate interest in responding to business enquiries.
Retention: 3 years from the date of last contact.
2.2 Orders and Purchases (WooCommerce)
Data collected: name, delivery address, email, phone, order details, payment information (processed by payment provider – not stored on our servers).
Purpose: Order fulfilment; after-sales support; compliance with accounting obligations.
Legal basis: Article 6(1)(b) GDPR – performance of a contract; Article 6(1)(c) – legal obligation (accounting/tax).
Retention: 5 years from the transaction date (statutory accounting period).
2.3 Marketing Communications
Data collected: email address, name (optional), date and text of consent.
Purpose: Sending promotional materials and offers – only where you have given explicit consent.
Legal basis: Article 6(1)(a) GDPR – your freely given, specific consent.
Retention: Until you withdraw your consent. Unsubscribe at any time via the unsubscribe link in any email.
2.4 Website Analytics (Google Analytics 4)
Data collected: anonymised IP address, pages visited, session duration, device type, browser, geographic region.
Purpose: Understanding how visitors use our website to improve content and user experience.
Legal basis: Article 6(1)(a) GDPR – your consent via the cookie banner.
Processor: Google Ireland Limited | Privacy Policy
Retention: 26 months (GA4 default).
2.5 Advertising and Remarketing (Meta Pixel)
Data collected: pages visited, actions taken, device and browser identifiers, IP address.
Purpose: Measuring advertising effectiveness; showing relevant ads to previous visitors.
Legal basis: Article 6(1)(a) GDPR – your consent via the cookie banner.
Processor: Meta Platforms Ireland Limited | Privacy Policy
Retention: 180 days.
2.6 Spam Protection (Google reCAPTCHA)
Data collected: IP address, browser behaviour data, cookie identifiers.
Purpose: Distinguishing human users from bots to protect our forms from spam.
Legal basis: Article 6(1)(f) GDPR – legitimate interest in website security.
Processor: Google Ireland Limited | Privacy Policy
Retention: Session / up to 6 months.
2.7 Cookie Consent Management (CookieYes)
Data collected: anonymised IP address, consent choice, date and time.
Purpose: Recording proof of your consent as required by GDPR.
Legal basis: Article 6(1)(c) GDPR – legal obligation to document consent.
Processor: CookieYes Limited | Privacy Policy
Retention: 1 year.
3. Third-Party Processors
- Google LLC / Google Ireland Ltd — Analytics, reCAPTCHA. Privacy Policy
- Meta Platforms Ireland Limited — Advertising pixel. Privacy Policy
- CookieYes Limited — Consent management. Privacy Policy
- WooCommerce / Automattic Inc. — E-commerce platform. Privacy Policy
- Hosting provider — Website infrastructure (EU-based hosting).
We do not sell your personal data to any third party.
4. Your Rights Under GDPR (Articles 15–22)
Right of access (Art. 15): Request a copy of the personal data we hold about you.
Right to rectification (Art. 16): Ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17): Ask us to delete your data where there is no compelling reason to continue processing it.
Right to restriction (Art. 18): Ask us to temporarily suspend processing of your data.
Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
Right to object (Art. 21): Object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting prior lawful processing.
To exercise any rights, contact us at: info@laser-technology.eu or our EU Representative: fixtime.engineering@gmail.com. We respond within 30 days.
5. International Data Transfers
5.1 The Data Controller (Yaroslav Fedun, FOP) is established in Ukraine, which is a country outside the European Economic Area (EEA) and is not currently the subject of an adequacy decision under Article 45 GDPR.
5.2 Even where personal data is stored on servers located within the EEA (our hosting infrastructure), the Data Controller may access this data from Ukraine in order to respond to enquiries, fulfil orders or provide after-sales support. Such access constitutes an international transfer of personal data to a third country within the meaning of Chapter V GDPR.
5.3 Transfers to the Data Controller in Ukraine are carried out on the basis of one of the following safeguards:
- Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Article 46(2)(c) GDPR (Commission Implementing Decision (EU) 2021/914), Module 1 (controller-to-controller), executed between the EU Representative and the Data Controller; and/or
- The derogation under Article 49(1)(b) GDPR where the transfer is necessary for the performance of a contract with you or pre-contractual measures taken at your request (e.g. responding to an enquiry, processing an order).
5.4 The Data Controller has carried out a Transfer Impact Assessment (TIA) taking into account the laws of Ukraine, the categories of personal data involved (basic contact and order data, no special categories) and the nature of the recipient. Supplementary technical and organisational measures (encryption in transit, restricted access, EU Representative as the primary contact for data subjects and supervisory authorities) are in place.
5.5 You may obtain a copy of the relevant transfer safeguards, including a copy of the executed Standard Contractual Clauses (with commercial information redacted), by contacting the EU Representative at fixtime.engineering@gmail.com.
6. Right to Lodge a Complaint
If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.
Poland – UODO:
ul. Stawki 2, 00-193 Warsaw | uodo.gov.pl | kancelaria@uodo.gov.pl
Czech Republic – UOOU:
Pplk. Sochora 27, 170 00 Prague 7 | uoou.cz | posta@uoou.cz
7. Cookies
We use cookies on this website. For detailed information, see our Cookie Policy. You can change or withdraw your cookie consent at any time by clicking “Cookie Settings” in the footer.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our website uses HTTPS encryption. Access to personal data is restricted to authorised personnel only.
9. Changes to this Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. The date of the latest revision is shown at the top of this page.
10. Contact
Email: info@laser-technology.eu
EU Representative: FixTime Engineering s.r.o. | fixtime.engineering@gmail.com
Na Zlíchove 240/5, 152 00 Praha 5, Czech Republic