Privacy policy (GDPR)

1. Data controller

The controller of personal data is Pavel Götz, ID No. 14373271, a natural person carrying on business under Czech law and registered in the Czech trade register.

Registered office and place of business: Teplice, Czech Republic. Delivering projects abroad (for example in Switzerland) does not change the controller’s registered office or place of business.

Contact: email info@pa-ges.eu, phone +420 602 587 980, web https://www.pa-ges.eu.

The controller has not appointed a data protection officer because the GDPR does not require it.

2. What data I process

The scope of data depends on how you communicate with me. It typically includes:

• identification data (first and last name, and company name where relevant),
• contact details (email, phone),
• enquiry data (project details, message, website or application requirements),
• technical data about the website visit to the extent needed to run it (for example an IP address in the hosting provider’s server logs),
• data needed to perform a contract and keep accounts (billing details, ID number, registered office) if a collaboration is agreed.

3. Purposes and legal bases

I process personal data only for the following purposes and on these legal bases under Article 6 GDPR:

• handling an enquiry and pre-contract communication — consent (Art. 6(1)(a)) and/or steps prior to entering into a contract (Art. 6(1)(b)),
• performing a contract to create a website, application or related services — performance of a contract (Art. 6(1)(b)),
• complying with legal obligations, in particular accounting and tax duties — legal obligation (Art. 6(1)(c)),
• defending legal claims and keeping a record of communication — legitimate interest (Art. 6(1)(f)),
• technical operation and security of the website — legitimate interest (Art. 6(1)(f)).

4. Contact form and consent

The enquiry form on the website can only be submitted after you tick the consent to personal-data processing. Without that consent I will not process the form data.

You may withdraw consent at any time by emailing the controller. Withdrawal does not affect the lawfulness of processing carried out before it. If a contract is already being performed, processing may continue on another legal basis.

5. Retention period

I keep data from an unresolved enquiry for the time needed to handle it and then usually for 12 months if no collaboration is agreed.

Contract-related data is kept for the duration of the collaboration and then for as long as legal claims may be brought (usually 3 years).

Accounting and tax records are kept for the period required by law, usually 10 years.

Technical hosting logs are kept only for as long as needed to operate and secure the website.

6. Recipients and processing abroad

I do not pass data to third parties for their own marketing. Data may only be processed by processors who provide me with technical infrastructure, in particular:

• the website hosting and deployment provider (Vercel, USA) — transfers outside the EU are based on standard contractual clauses and other GDPR safeguards,
• email and communication providers if I use them to handle an enquiry,
• an accountant, tax adviser or public authorities where the law requires it.

7. Cookies and similar technologies

The website uses strictly necessary cookies and similar stored data without which the page cannot be displayed reliably (for example an operational session, security, and language settings). I store your language choice in a cookie and in localStorage so the site opens in the selected language on the next visit. These files do not require consent.

The website does not currently use third-party cookies for marketing tracking. If that changes, I will update this information and request consent where required.

8. Your rights

In relation to personal data you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. Where the legal basis is consent, you have the right to withdraw it.

Send your request to the controller’s email address. I will respond without undue delay, within 30 days at the latest; the period may be extended in justified cases.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

9. Security

I take appropriate technical and organisational measures to prevent unauthorised access, loss or misuse of data. Access to enquiries is limited to me as the controller and, where needed, verified processors to the extent required to run the services.

10. Changes to this document

I may update this document if the scope of services, the technologies used or the legal requirements change. The current version is always published on this page, including the date of the last update.