Privacy Policy

1. Data controller

The controller of personal data in connection with the operation of this website is:

Ing. Michal Dvořák
Business ID (IČO): 24327484
Registered address: Podlomní 3042/29, 636 00 Brno-Židenice, Czechia
Sole trader registered in the Czech Trade Register.
Registering authority: Brno City Municipal Office (Magistrát města Brna)
Email: dvorak@graphia.cz
Phone: +420 724 554 400

The sole trader operates the website under the Graphia brand.

When delivering certain projects for our clients, we may process personal data on their behalf and according to their instructions. Such processing is governed by the relevant contractual arrangements.

2. What personal data we process

We only process data that is necessary for specific purposes. Depending on the circumstances, this may include in particular:

Contact and communication data

First name, surname, email address, phone number, company name, job title and the content of our communication.

Data related to our collaboration

Information needed to prepare quotes, deliver projects, issue invoices, communicate with clients and fulfil contractual or legal obligations.

Technical data

IP address, device and browser data, technical access logs, security logs and other data necessary to operate and protect the website.

Website usage data

Where you have given the relevant consent, also data about traffic, pages viewed, traffic sources and interactions with the website.

Cookie-related data

Information about your consent settings, technical identifiers and, where applicable, analytics identifiers.

Data published in testimonials

Name, photograph, professional or company affiliation and the content of a client review, where provided and approved for publication.

3. Purposes and legal bases of processing

We process personal data for the following purposes.

4. How long we keep personal data

We keep personal data only for as long as necessary for the stated purpose or for the period required by law.

Enquiries and general communication

We keep data for as long as needed to handle the enquiry and related communication. If no collaboration follows, we keep data only while there is a relevant purpose for further processing, in particular any continuation of business discussions or the protection of legal claims.

Contractual collaboration

We keep data needed to deliver a project for the duration of the collaboration and afterwards to the extent necessary to meet legal obligations and, where applicable, protect legal claims.

Accounting and tax records

We keep data contained in the relevant documents for the period set by applicable legislation according to the nature of each document.

Technical and security logs

We keep them for as long as necessary for operation, security and resolving any technical or security incidents, according to the actual settings of the services we use.

Analytics data

The retention period depends on the analytics service used and its settings. In Microsoft Clarity, regular session recordings are kept for 30 days by default. Selected analytics data, heatmaps and marked recordings may be kept for up to 9 months according to the provider's rules.

The duration of individual cookies is listed on the Cookies page.

Testimonials

We keep and publish personal data in client testimonials for as long as the relevant consent applies or until it is withdrawn. After consent is withdrawn, we stop publishing and further processing the data concerned, unless there is another appropriate legal ground for keeping it.

5. Who personal data may be shared with

To the extent necessary, personal data may be shared with service providers we use to operate the website and deliver projects. These include in particular:

• hosting and web infrastructure providers,
• website security providers,
• email and communication service providers,
• analytics service providers,
• authorised team members and collaborating specialists involved in communication or project delivery,
• accounting and administrative service providers, where we use them,
• public authorities, where required by law.

We only provide access to personal data to the extent appropriate for the specific purpose.

Where required by the GDPR, appropriate contractual arrangements must be in place with providers that process personal data for us as processors.

6. Cookies and analytics tools

On our website, we use essential cookies and similar technologies to provide the basic functions of the website, keep it secure and store user preferences. To analyse how the website is used, we also use the following services.

Setting and withdrawing consent

Consent to analytics cookies is voluntary. Rejecting them does not affect normal use of the website. You can change or withdraw your consent at any time via “Cookie Settings” in the website footer. Withdrawing consent does not affect the lawfulness of processing carried out on the basis of valid consent before its withdrawal.

Detailed information about the cookies we use, their providers, purposes and duration is available on the Cookies page.

7. Transfers of personal data outside the EEA

When using certain technical and analytics services, personal data may be processed or transferred outside the European Economic Area, in particular to the USA. Such transfers must be based on an appropriate safeguard mechanism under the GDPR.

This may include, in particular, the European Commission's adequacy decision under the EU-U.S. Data Privacy Framework for relevant certified recipients, standard contractual clauses or other mechanisms permitted by the GDPR.

We will provide information about the specific safeguards and available guarantees on request via our contact email. Details are also available in the documentation of the relevant providers.

8. Your rights

Under the GDPR, and subject to the relevant legal conditions, you have in particular the following rights:

• Right of access: You can request information about the processing of your personal data and obtain a copy of it.
• Right to rectification: You can request the correction of inaccurate personal data or the completion of incomplete data.
• Right to erasure: Under the conditions of the GDPR, you can request the deletion of your personal data.
• Right to restriction of processing: In cases set out by law, you can request that the processing of your data be restricted.
• Right to data portability: Where the legal conditions are met, you can obtain your personal data in a structured, commonly used and machine-readable format.
• Right to object: You can object to the processing of personal data based on our legitimate interest. We will assess the objection in accordance with the GDPR.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time.
• Right to lodge a complaint: If you believe that the processing of your data breaches the law, you can lodge a complaint with the competent supervisory authority.

To exercise your rights, contact us at dvorak@graphia.cz.

We respond to requests without undue delay, usually within one month at the latest. Under the conditions of the GDPR, this period may be extended by up to two further months.

9. Is providing personal data mandatory?

Providing contact details with a non-binding enquiry is voluntary. However, without the necessary contact details we may not be able to respond to your enquiry or prepare a quote.

When entering into and performing a contract, providing certain data may be necessary to deliver the collaboration or meet legal obligations.

Consent to analytics cookies is not a condition for using the website.

10. Automated decision-making

In operating graphia.cz, we do not carry out automated individual decision-making that would have legal or similarly significant effects on visitors within the meaning of Article 22 GDPR.

11. Supervisory authority

If you suspect a breach of data protection rules, you can contact:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7, Czechia
Phone: +420 234 665 111
Email: posta@uoou.gov.cz
Website: uoou.gov.cz

12. Contact and updates to this document

If you have any questions about the processing of personal data or wish to exercise any of your rights, please contact us:

Ing. Michal Dvořák
Email: dvorak@graphia.cz
Phone: +420 724 554 400