Privacy and personal data

What we collect and why

We need your email address or telephone number to answer an enquiry. Your name, project description and preferences are optional. We also record the form language, receipt time and enquiry reference. Without contact details we cannot reply. Please do not send passwords or sensitive personal information.

For an individual enquiring about their own contract, processing supports steps requested before a contract under Article 6(1)(b) GDPR. For company contacts and other business correspondence, we rely on our legitimate interest in handling that communication under Article 6(1)(f). Enquiry details are not used for newsletters.

Retention

We keep web-form enquiry records for 30 days; automatic deletion checks run hourly. Later email correspondence, contracts and accounting documents are separate records. We retain them as needed for discussions, contract performance, legal claims and applicable legal obligations. The 30-day period does not apply to those records.

Access and site security

The web enquiry server is hosted in Germany by netcup GmbH. This form does not send data to advertising platforms or other external APIs.

Access is limited to authorised team members and, where necessary, technical hosting and administration providers, including netcup GmbH. Technical request logs may contain IP addresses, times, requested addresses and browser information. Our legitimate interest in site security supports their use to detect abuse and investigate faults.

Access logs rotate at 10 MiB. The configuration retains up to three archives and removes archives older than 72 hours during operational rotation. The current file remains until the next rotation.

Measurement and automated decisions

Optional analytics and advertising tracking are disabled. We do not automatically attach advertising UTM tags to enquiries or save them in browser storage. Enquiries are not subject to automated decisions producing legal or similarly significant effects.

Your rights

Subject to GDPR conditions, you can request access, correction, erasure, restriction and data portability. You can object to processing based on legitimate interests. We normally respond within one month and explain any lawful extension. You may also complain to the Czech supervisory authority, Úřad pro ochranu osobních údajů, at uoou.gov.cz.