Martin Adamec
IČO: 19552319
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
info@kontaktyb2b.pl
This policy covers visitors, people submitting enquiries, customers and their representatives. It explains data obtained from you under Article 13 GDPR. Information about personal data collected from public business sources is provided separately in the GDPR information notice.
The site runs on a Hostinger virtual private server in Frankfurt, Germany using encrypted HTTPS connections. Technical logs may contain IP address, request date and time, requested URL, method, response status, referrer and browser information. They support reliable delivery, security and abuse prevention under Article 6(1)(f) GDPR, our legitimate interest in operating a secure service. Technical logs are retained for no more than 30 days. The web-server access log does not record the contact form body.
Separate infrastructure backups run weekly; older copies are replaced under the provider’s cycle. Deletion from the active system does not mean immediate erasure from every backup. Backup access is limited to recovery and security; required erasures and restrictions must be reapplied after restoration.
We process the identity, company and registration details, email, telephone, selected market or industry and message that you provide. Form metadata includes submission time, IP address, browser information and form language. Required fields are marked. We use these data to answer the enquiry and prepare an offer: Article 6(1)(b) GDPR for steps requested by a prospective contracting individual, or Article 6(1)(f) for ordinary business correspondence and representatives, reflecting our interest in responding to business enquiries and preventing abuse. The checkbox acknowledges the privacy information and the request; it is not newsletter consent.
Messages are passed to the operator’s email system. If local email hand-off fails, a recovery record is stored outside the public website directory. Successful local hand-off is not a guarantee of final delivery, and successfully handed-off submissions are not separately archived by the form handler. Uncompleted enquiries are retained for 12 months after the last contact; this also applies to recovery records, using submission time if no later contact is recorded. The operator manages the same retention period in the mailbox. Contract records are treated separately under section 6.
Rights requests contain your identity or company name, optional identifier, reply email, relevant record details and message, plus the metadata described above. They are handled under Article 6(1)(c) GDPR to comply with rights obligations. Correspondence is kept only as necessary to resolve the request and document the duty or relevant claims. Minimal suppression identifiers may be retained to prevent re-inclusion, under Article 6(1)(c) and, where applicable, Article 6(1)(f); their continued necessity is reviewed. These records are not treated as ordinary sales enquiries.
For contracts, invoices and payment we process identification, contact, order and payment data under Article 6(1)(b) and (c) GDPR; representatives’ details are used under Article 6(1)(f) for business communication. Contract, accounting and tax documents are kept for applicable statutory periods and as necessary for legal claims, separately from uncompleted enquiries. A statutory obligation can prevent erasure while that obligation applies.
The current website does not set application cookies or use sessions, local storage, Google Analytics, Google Ads or similar optional tracking. Fonts, scripts and images are served locally. Ordinary links may take you to another operator’s website, where its own privacy rules apply. This notice will be updated before optional tracking is introduced, with consent obtained where required.
Recipients may include hosting, email and IT service providers, payment institutions and accounting or professional advisers where needed, and authorities where disclosure is required by law. Access is limited to the relevant purpose and subject to applicable confidentiality, security and data-protection requirements. Website enquiries are not sold as marketing lists.
Any access or transfer outside the EEA must have a lawful basis and meet GDPR Chapter V requirements, for example an applicable adequacy decision or appropriate safeguards such as standard contractual clauses with any required supplementary measures. Public availability alone is not a transfer mechanism. Contact the controller for information about the recipients and safeguards relevant to your data and how to obtain a copy.
Providing enquiry data is voluntary, but sufficient contact and request information is needed to respond. Contract and invoice details may be necessary to conclude or perform a contract or comply with law. A rights request need not use our form; only proportionate information necessary to identify the person and record may be required. This website does not make solely automated decisions with legal or similarly significant effects.
Subject to the GDPR conditions, you may request access, correction, erasure, restriction and, where applicable, portability. If processing is based on consent, you may withdraw it without affecting earlier lawful processing. For legitimate-interest processing, you may object on grounds relating to your particular situation; processing must stop unless overriding compelling grounds or legal claims justify continuation. For direct marketing, objection is unconditional and processing for that purpose must stop. Contact the controller or use the objection form. We respond without undue delay, normally within one month; any lawful extension and its reasons are explained within that first month. Requests are generally free; only the GDPR’s exceptional conditions permit a fee or refusal.
You may complain to the Czech Úřad pro ochranu osobních údajů (uoou.gov.cz) or another competent supervisory authority, including the Polish UODO (uodo.gov.pl), in particular in your place of habitual residence, work or the alleged infringement.
Direct privacy and data-protection enquiries to the controller using the contact details above. The same channel accepts all requests to exercise GDPR rights.
This notice reflects the processing described on 16 October 2026. Material changes to purposes, recipients or technology will be reflected in an updated notice and communicated as required by law.
