Personal data
Privacy Policy
We value your trust. On this page we explain what personal data we process when you visit koncedo.cz or contact us, why we do so and what rights you have.
01
Data controller
The data controller is KONCEDO, s.r.o., company registration number 19766599, with its registered office at Na Brně 1972, Nový Hradec Králové, 500 06 Hradec Králové, registered in the Commercial Register maintained by the Regional Court in Hradec Králové, Section C, File 51822.
You may contact us regarding personal data protection by email at info@koncedo.cz, by telephone on +420 602 778 241 or by post at our registered office address. We have not appointed a Data Protection Officer as we are not subject to this obligation.
02
What data we process and why
Contact form and email communication. When you contact us, we process your first name and surname, email address, telephone number (if provided), information on whom you represent, and the content of your message. We use this data exclusively to deal with your enquiry and for follow-up communication. The legal basis is the negotiation of a potential contract at your request (Article 6(1)(b) of the GDPR) and our legitimate interest in responding to the enquiries you send us (Article 6(1)(f) of the GDPR). We cannot reply to you without your name, email address and the text of your message; all other data is provided on a voluntary basis.
Protecting the form against misuse. To prevent bulk sending of unsolicited messages, when the form is submitted we store a one-way hashed fingerprint of the IP address, from which the address itself cannot be recovered. The fingerprint stops being used after ten minutes. The legal basis is our legitimate interest in operating the website securely.
Server log files. Each time you visit the website, the server automatically records technical data such as your IP address, the date and time of access, the page requested and the browser type. This is used to ensure the security and reliable operation of the website on the basis of our legitimate interest.
We do not use personal data for marketing, profiling or automated decision-making.
03
How long we keep data
We retain messages from the contact form and email correspondence for the period necessary to deal with enquiries and any subsequent communication. If no business relationship is established, we will delete the data no later than three years after the last contact. If a business relationship is established, data retention is governed by the contractual relationship and statutory time limits. The web hosting provider retains server logs only for the limited period necessary to ensure security and the smooth running of the service.
04
Who we share data with
We do not sell your data or pass it on to third parties for their own purposes. Only authorised members of our team who are handling your enquiry have access to it.
We use a web hosting and email service provider to operate our website and email service; this provider processes the data solely in accordance with our instructions as a data processor. Data may also be transferred to public authorities where required by law. Apart from Google Maps, as described below, we do not transfer data outside the European Union.
05
Google Maps
On the homepage, we display a map of our company’s registered office using Google Maps so that we can easily show you where to find us. When the map is loaded, your browser connects to the servers of Google Ireland Limited or, where applicable, Google LLC (USA), which will thereby receive your IP address and technical details about your browser.
Data transfers to the USA are carried out in accordance with the EU–US Data Privacy Framework. The legal basis is our legitimate interest in presenting our company’s headquarters in a clear and accessible manner (Article 6(1)(f) of the GDPR). If you are signed in to your Google account, Google may associate your visit with your account. You may object to this processing or block the map via your browser’s settings or add-ons. Further details can be found in Google’s privacy policy.
07
Your rights
In relation to the processing of personal data, you have the right to:
- obtain information about what personal data we process about you, and a copy of it,
- request the rectification of inaccurate data or the completion of incomplete data,
- request the erasure of your data if it is no longer necessary or if we are processing it unlawfully,
- request a restriction on processing,
- receive the data you have provided to us in a structured, machine-readable format,
- object to processing based on our legitimate interest,
- withdraw your consent at any time where processing is based on consent.
You can exercise your rights by emailing info@koncedo.cz. We will reply without undue delay, within one month at the latest. If you believe that the processing constitutes a breach of the regulations, you may lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
08
Security and changes to this policy
Communication with the website takes place via an encrypted HTTPS connection. Access to personal data is restricted to those who need it to process your enquiry, and we protect it using appropriate technical and organisational measures.
We may update this policy, for example, if there are changes to the way the website operates or to the law. The current version is always published on this page.