Privacy
Updated 12 September 2026.
Controller
Galimar s. r. o., Štúrova 1, 040 01 Košice, Slovakia. Company ID: 56096470, tax ID: 2122204865, VAT ID: SK2122204865. Contact: info@wildthyme.eu, +421 907 998 985.
Cookies and your choice
Our optional analytics starts only after you click “Approve cookies”. Refusing does not limit reading, contact options or forms. Consent is not preselected. You can change your choice or withdraw at any time through Cookies in the footer, as easily as accepting.
| Cookie | Purpose and condition | Duration |
|---|---|---|
wildthyme_consent | Necessary record of your choice, its time and policy version; set only after a choice. | 180 days |
wildthyme_eu_analytics_v1 | Optional random visitor identifier for our own analytics; only with consent. | 30 days |
wildthyme_eu_admin | Necessary session for login or a form you open, request-forgery protection and submission confirmation. Despite its name, public forms use it too. | Browser session |
wildthyme_eu_vid | Necessary abuse prevention when submitting forms; not used for analytics. | 30 days when newly set; the earlier version could last 1 year |
Withdrawal stops further analytics writes and expires analytics cookies in this browser, including the older wildthyme_eu_sid. It does not affect the lawfulness of processing before withdrawal. This button does not automatically erase earlier records; contact us to request erasure. An old analytics cookie is not used without current consent.
What analytics means
With consent we store the time, page path without query parameters, referral source without query parameters, UTM campaign labels, event type, any product ID, random visitor identifier and browser information. These are pseudonymous personal data, not anonymous visits. Only aggregate counts without identifiers may be anonymous. We use no advertising networks or third-party analytics. The legal basis is consent under GDPR Article 6(1)(a); optional cookie storage and access also follow § 109(8) of Slovak Act 452/2021.
The public site uses no localStorage or sessionStorage, or externally embedded maps or videos. Animation, images and fonts are hosted here. A WhatsApp or other external link opens that service only after you click; its own rules then also apply.
Other data and retention
- Orders and withdrawals: name, contacts, address, items and amounts; performance of the contract and statutory accounting duties, 10 years.
- Analytics events: 14 months.
- Voluntary “What were you missing?” text: text, language, page and time, 24 months. No IP or visitor identifier is attached; contact details you enter become part of the text. The purpose is improving content on the basis of legitimate interests, to which you may object. This field does not provide a reply.
- Form and login protection: random identifier and, where needed, a salted IP hash, 30 days; legitimate interest in security. Hashes and identifiers are pseudonymous, not anonymous.
- A failed e-mail delivery record can contain the full message and contact details for another delivery attempt; 30 days, outside the public directory.
The application does not store full IP addresses in its databases. Hosting server logs are separate; we do not claim that internet communication involves no IP processing. A maintenance mechanism handles configured retention periods; its actual execution is checked separately from consent.
Recipients and your rights
Hosting is provided by Websupport, s. r. o. If you order goods, delivery details are passed to the carrier. We do not sell data. Under the GDPR conditions you have rights of access, rectification, erasure, restriction, portability and objection. Statutory obligations may prevent immediate erasure of accounting records. Write to info@wildthyme.eu. You may complain to the Slovak Data Protection Authority.