Privacy Policy

1. Data controller identification

The data controller responsible for personal data processed through this website is Kezate, with its registered office at Botanická 16, Brno, Czech Republic, reachable at [email protected] or +420 736 605 107. For the purposes of Regulation (EU) 2016/679 (the "GDPR") and Act No. 110/2019 Sb., on the Processing of Personal Data, Kezate acts as the controller for all personal data described in this policy.

2. Scope of this Privacy Policy

This policy applies to personal data collected through the kezate.info website, including data submitted via the contact form, and, where a monitoring agreement is in place, contact details associated with the operation of that agreement. It does not extend to third-party websites that may be linked from these pages.

3. Categories of personal data we process

We process identification data (full name), contact data (email address, telephone number), the content of any message submitted through the contact form, and, where applicable, basic technical data generated by your browser such as IP address and browser type, collected through cookies as described in our Cookie Policy.

4. Purposes and legal basis for processing

Contact data submitted through the form is processed to respond to your enquiry, on the basis of Article 6(1)(b) GDPR, being a step taken at your request prior to any potential agreement, or Article 6(1)(f), our legitimate interest in responding to enquiries directed to us. Optional analytics cookies are processed only with your consent under Article 6(1)(a) GDPR.

5. How contact form submissions are handled

The contact form on this website is configured to open your local email client with a pre-filled message addressed to [email protected]. Submitted content is transmitted through your own email provider rather than stored on our web server, meaning the message becomes part of our regular email correspondence, subject to the retention rules described in section 9.

6. Cookies and tracking technologies

This website uses cookies to operate correctly and, where consent is given, to understand aggregate visitor behaviour. Full details of the categories used, their purpose, and retention periods are set out separately in our Cookie Policy, which forms part of our overall approach to data protection.

7. Recipients of personal data

Personal data may be accessible to staff involved in responding to enquiries and, where technically necessary, to hosting and email service providers acting as processors under a data processing agreement compliant with Article 28 GDPR. We do not sell personal data or share it with third parties for their own marketing purposes.

8. International data transfers

Where a service provider we use, such as a hosting or analytics provider, is located outside the European Economic Area, any transfer of personal data is carried out only where an adequate level of protection is ensured, for example through the European Commission's standard contractual clauses or an applicable adequacy decision.

9. Data retention periods

Contact form correspondence is generally retained for as long as necessary to address the enquiry and for a reasonable period afterward for record-keeping, typically not exceeding twenty-four months unless a longer period is required by an ongoing contractual relationship or applicable legal obligation. Cookie data is retained according to the periods specified in the Cookie Policy.

10. Security measures

We apply reasonable organisational and technical measures appropriate to the nature of the data processed, including restricted access to correspondence and use of secure connections for this website, in order to protect personal data against unauthorised access, loss, or alteration.

11. Your rights and how to exercise them

Under the GDPR and Act No. 110/2019 Sb., you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, to data portability where applicable, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Requests can be sent to [email protected].

12. Supervisory authority and complaints

If you consider that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, or with the supervisory authority of your habitual residence within the European Union.