Privacy Policy

2.1. Data you voluntarily provide

Through the contact form or direct communication:

• name and surname;
• phone;
• email;
• message content;
• company details (if provided);
• any additional data provided voluntarily.

2.2. Data collected automatically

During website visits:

• IP address and approximate location;
• browser type and operating system;
• device technical data;
• server log files;
• cookies (necessary, analytics, marketing — based on consent).

Detailed information is available in our Cookie Policy.

2.3. Data related to contractual relationships

If you enter into a contract with the Company:

• identification data;
• company registration details;
• payment information;
• agreements, invoices, project correspondence.

We process data only when lawful and necessary.

3.1. Handling requests and communication

Purpose: responding to inquiries, providing information. Basis: your consent — GDPR Art. 6(1)(a).

3.2. Contract preparation and performance

Purpose: project execution and administration. Basis: contract necessity — Art. 6(1)(b).

3.3. Legal compliance

Purpose: accounting, tax reporting, document retention. Basis: legal obligation — Art. 6(1)(c).

3.4. Legitimate interest

Purpose: security, fraud prevention, website protection. Basis: Art. 6(1)(f).

3.5. Analytics and marketing (with consent)

Purpose: traffic analysis, website improvement, advertising. Basis: consent — Art. 6(1)(a).

No processing without consent.

We may use personal data for:

• handling your inquiry;
• preparing a commercial offer;
• communicating as part of a client relationship;
• fulfilling contractual obligations;
• accounting and tax compliance;
• ensuring website security;
• improving user experience.

5.1. Data processors (under contract)

• hosting providers;
• IT and email services;
• accounting firms;
• legal consultants;
• project contractors (if needed).

All processors comply with GDPR Art. 28.

5.2. Authorities

When required by law.

5.3. Third parties — never

We do not sell or transfer data.

• form submissions — up to 12 months or until consent is withdrawn;
• contractual documentation — 10 years;
• accounting documents — 10 years;
• cookies — per Cookie Policy;
• server logs — 30 days.

Data is deleted or anonymized after expiration.

Under GDPR, you have the right to:

• access your data;
• rectification;
• erasure;
• restriction of processing;
• data portability;
• object;
• withdraw consent;
• file a complaint with ÚOOÚ (www.uoou.cz).

ÚOOÚ address: www.uoou.cz

We commit to responding to requests within the timeframes set by the GDPR.

We apply technical and organizational safeguards:

• secure EU hosting;
• encrypted data transfer (SSL/TLS);
• access control;
• regular security updates;
• data minimization.