Privacy policy

1. Data controller

The controller of the personal data submitted through the contact form on this website is:

Company

JP Bodlák Engineering s.r.o.

Company ID / VAT ID

05481783 / CZ05481783

Registered office

Svémyslice 35, 250 91 Svémyslice, Czech Republic

Registration

Commercial Register kept by the Municipal Court in Prague, Section C, Insert 264385

Email

office@jpbe.cz

Phone

+420 601 361 442

The controller has not appointed a data protection officer, as the nature and scope of its activities do not require one under the GDPR.

2. What personal data we process

We process only the data you enter in the contact form yourself, together with the technical data necessary to protect the form from abuse:

• identification data: full name, company name;
• contact data: business email and phone number, if you provide one;
• content of the communication: the selected enquiry topic and the text of your message;
• technical and operational data: the sender IP address and the time of submission.

The form does not accept attachments and contains no field for special categories of personal data under Article 9 of the GDPR. Please do not include sensitive personal data in your message.

The IP address and time of submission are used solely to limit the number of submissions from a single source and to detect automated abuse of the form. They are not included in the enquiry email and are not used for analytics or to identify visitors.

3. Purposes and legal basis for processing

• handling your enquiry and communicating about the next step — steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR);
• protecting the form against automated abuse and spam — the controller’s legitimate interest in securing the website (Article 6(1)(f) GDPR);
• retaining the communication in case legal claims need to be established or defended — the controller’s legitimate interest (Article 6(1)(f) GDPR);
• compliance with legal obligations where the enquiry leads to a contractual relationship and the related accounting and tax records — compliance with a legal obligation (Article 6(1)(c) GDPR).

We do not use the data from the form to send marketing messages and we do not pass it on for marketing purposes. We do not carry out automated decision-making or profiling within the meaning of Article 22 of the GDPR.

4. How long we keep personal data

• enquiries that did not lead to cooperation: 12 months from the last communication;
• enquiries that led to cooperation: for the duration of the cooperation and a further 4 years after it ends, having regard to limitation periods;
• accounting and tax records arising from subsequent cooperation: for the period laid down by the Czech Accounting Act and the Value Added Tax Act, as a rule 10 years from the end of the relevant tax period;
• technical records of form submissions (IP address and time): 30 days.

Once these periods expire we erase the data, or continue to process it only where a legal regulation requires us to.

5. Recipients of personal data

Your enquiry is read only by the authorised people at the controller who handle it. Beyond them, the data reaches the following processors and recipients:

We do not pass personal data to third parties for their own marketing purposes and we do not sell it.

6. Transfers to third countries

The web hosting is operated by ZONER a.s., a Czech company, and involves no transfer of data outside the European Union.

Microsoft, as the provider of email services, may process data on servers outside the European Union, including the United States. Any such transfer is covered by standard contractual clauses approved by the European Commission, or by the EU-US Data Privacy Framework.

7. Your rights

In connection with the processing of your personal data you have the following rights:

• the right of access to your personal data (Article 15 GDPR);
• the right to rectification of inaccurate or incomplete data (Article 16 GDPR);
• the right to erasure (Article 17 GDPR);
• the right to restriction of processing (Article 18 GDPR);
• the right to data portability (Article 20 GDPR);
• the right to object to processing based on legitimate interest (Article 21 GDPR).

You can exercise your rights by emailing office@jpbe.cz. We will respond within one month of receiving your request at the latest.

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:

Authority

Office for Personal Data Protection

Address

Pplk. Sochora 27, 170 00 Prague 7, Czech Republic

Website

uoou.gov.cz

8. Security of personal data

We have adopted appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or misuse. The website runs exclusively over an encrypted HTTPS connection, the form is protected against automated abuse, and only authorised people have access to the mailbox.

The website keeps no database of enquiries and does not store them on the hosting server. A submitted enquiry is delivered directly to the controller’s mailbox.

9. Cookies and data stored in your browser

This website uses no cookies at all. We do not measure traffic, we use no analytics or marketing tools, and we load no third-party scripts, fonts, maps, videos or other content. That is why you will not find a cookie consent banner here — there is nothing to consent to.

A notice bar at the bottom of the page summarises how we handle the details submitted through the contact form. It is not a consent banner and nothing is allowed or refused through it; its single button closes it.

When you close the notice, a single item named “jpbe-privacy-notice-dismissed” with the value “1” is stored in your browser’s local storage so that the notice does not appear again. This value stays on your device only, is never sent to us or to anyone else, and is not used to identify or track you. You can remove it by clearing the site data in your browser.

Should we introduce any measurement in the future, we will update this policy first and ask for consent in advance, before any measurement tool goes live.

10. Changes to this policy

We may update this policy, for example in response to changes in legislation or in the tools we use. The current version is always available at this address.