Privacy Policy

Data We Collect

• Contact form data: name and email address provided voluntarily when you submit an enquiry.
• Newsletter data: email address submitted via the newsletter subscription form.
• Technical data: IP address, browser type, pages visited, and timestamps collected automatically by the web server and, where consent is given, by analytics tools.
• Cookie data: information stored in cookies as described in our Cookie Policy.

Legal Basis for Processing

• Contract performance (Article 6(1)(b) GDPR): processing contact form submissions to respond to your enquiry.
• Legitimate interests (Article 6(1)(f) GDPR): server log data processed to maintain security and diagnose technical issues.
• Consent (Article 6(1)(a) GDPR): analytics and marketing cookies, and newsletter subscriptions, processed only where you have given explicit consent.

How We Use Your Data

• To respond to questions submitted via the contact form.
• To send occasional informational updates to newsletter subscribers.
• To monitor and improve site performance and security.
• We do not use personal data for automated decision-making or profiling with legal or similarly significant effects.

Data Retention

• Contact form submissions: retained for up to 24 months from the date of enquiry, or until you request deletion.
• Newsletter subscriptions: retained until you unsubscribe.
• Server logs: retained for up to 12 months for security purposes.
• Cookie consent records: retained for 12 months.

Data Sharing

We do not sell personal data. Data may be shared with:

• Hosting providers processing data on our behalf under data processing agreements.
• Analytics service providers where you have consented to analytics cookies.
• Authorities where required by applicable Czech or EU law.

International Transfers

Where data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or on an adequacy decision, to ensure an equivalent level of protection.

Your Rights

Under GDPR and Czech law, you have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your data where there is no overriding legal basis for retention.
• Restriction: request that processing be restricted in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdrawal of consent: withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).

Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.

Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after changes are published constitutes acknowledgment of the updated policy.

Contact

For any questions about this policy or about how we handle your data: [email protected] or by post to Sienkiewiczova 2072, Ústí nad Labem, Czech Republic.