Legal

Privacy Policy & GDPR

How we collect, use, and protect your personal data — in plain language.

1. Data Controller

The controller of your personal data is Vojtěch Horák, acting on behalf of 7 nápadů s.r.o., with registered office at Křelovice 13, 330 36 Pernarec, Company Reg. No. 095 238 55, VAT CZ09523855.

Contact: horak@7divs.com | +420 737 817 413

No Data Protection Officer (DPO) has been appointed, as the company does not meet the thresholds requiring mandatory DPO designation under Article 37 GDPR.

2. Personal Data We Collect

We collect personal data only to the extent necessary to fulfil the purposes described below. Depending on how you interact with us, this may include:

  • Identification data: name, surname
  • Contact data: email address, telephone number
  • Communication data: content of messages sent via our contact form or by email
  • Technical data: IP address, browser type, pages visited (only if analytics is enabled)

We do not collect special categories of personal data (sensitive data) as defined in Article 9 GDPR.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

  • Responding to your enquiry or message — legal basis: legitimate interest (Article 6(1)(f) GDPR) or performance of a contract (Article 6(1)(b) GDPR)
  • Fulfilment of a contract for services — legal basis: performance of a contract (Article 6(1)(b) GDPR)
  • Compliance with legal obligations (accounting, tax records) — legal basis: legal obligation (Article 6(1)(c) GDPR)
  • Newsletter communications — legal basis: your explicit consent (Article 6(1)(a) GDPR)

We do not carry out automated decision-making or profiling with legal or similarly significant effects.

4. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

  • Enquiry and contact data: up to 3 years from last contact, or until you request erasure
  • Contractual data: 10 years from contract termination (statutory accounting obligation)
  • Newsletter consent: until you withdraw consent
  • Technical/analytics data: up to 26 months (GA4 default retention)

5. Data Recipients and Third-Party Transfers

Your personal data is processed primarily by the controller. We may share data with processors acting on our behalf (e.g. email hosting, cloud infrastructure), always under a data processing agreement ensuring equivalent protection.

We do not sell your personal data. We do not transfer data to third countries outside the European Economic Area without appropriate safeguards.

6. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access (Article 15): obtain confirmation of whether we process your data and receive a copy
  • Right to rectification (Article 16): request correction of inaccurate or incomplete data
  • Right to erasure / 'right to be forgotten' (Article 17): request deletion of your data where no overriding legal basis applies
  • Right to restriction of processing (Article 18): request that processing be limited in certain circumstances
  • Right to data portability (Article 20): receive your data in a structured, machine-readable format
  • Right to object (Article 21): object to processing based on legitimate interest
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at horak@7divs.com. We will respond within 30 days.

7. Right to Lodge a Complaint

If you believe we are processing your personal data in violation of applicable law, you have the right to lodge a complaint with the supervisory authority:

  • Office for Personal Data Protection (ÚOOÚ)
  • Pplk. Sochora 27, 170 00 Prague 7
  • uoou.cz | +420 234 665 111

We kindly ask that you contact us first, so we can resolve the matter directly.

8. Cookies and Analytics

Our website may use cookies and analytics tools (e.g. Google Analytics 4) to understand how visitors use the site. Where required by law, we will request your consent before placing non-essential cookies.

You may manage or withdraw cookie consent at any time via your browser settings or our cookie preferences panel (if displayed).

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our data practices. The current version is always available on this page. Material changes will be communicated by email if you have provided one.

Last updated: May 2025.