Privacy policy

The controller is SYSNETSHIELD, s.r.o., Company ID 19831889, a limited liability company registered in the Czech Republic with its registered office in Prague. For anything related to personal data protection, you can reach us at [email protected]. We have not appointed a data protection officer (DPO) because the law does not require us to; we handle your questions and requests at the email address above.

We process only data from the forms on this website, and how much of it there is depends on which form you use. In the full form on the contact page you fill in your name, your email address, optionally your company name, and the text of your message; from those we can tell what you need, reply to your inquiry, and arrange any work that follows. The reason you are writing comes with them, that is, whether this is an inquiry or a request for a sample report; it follows from the link that brought you to the form.

The short form at the end of some pages has a single field, for your email address. It collects no name and no message text, because it has no field for either; you can write those to us at any time later.

The address of the page you came to the form from is something we add ourselves. With the short form it is always the page the form stands on; with the form on the contact page only if you came to it from the short form at the end of another page, or from the button that takes its place there, and otherwise no address is recorded at all. It tells us what your inquiry is about, so we can come back to you on the substance, and it shows us which pages bring inquiries.

With both forms we also store your IP address and the time of submission, to protect the forms against abuse and spam.

For the content of your inquiry, the legal basis is Article 6(1)(b) of the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679): taking steps at your request prior to entering into a contract. The same basis carries the email address from the short form: you leave it with us so that we get back to you. For the page address we pursue two legitimate interests: replying to you on the substance, and knowing which pages bring inquiries. For the IP address and the time of submission it is our legitimate interest in protecting the website, and all of these interests rest on Article 6(1)(f) GDPR. Submitting either form is voluntary; without an email address, however, we cannot reply to you.

One, and only if you ask for it. When you switch the language, your browser stores a cookie named lang holding a single value, cs or en, so that the next page you open comes up in the language you chose. It lasts 30 days, and another click on the switcher renews it. We never set it from our server.

The same is true of the automatic redirect: when the website reads the language your browser asks for and opens the matching version, nothing is written to your device. The cookie belongs to this website only and carries no identifier, we keep no record of it on our side, and remembering your language is all it does. You can delete it in your browser settings like any other cookie.

Apart from that one cookie, the website sets nothing for tracking, analytics, or advertising. We measure traffic with Plausible, which uses no cookies: it stores nothing in your browser, does not identify individual people, and works only with aggregate numbers (how many people visited which page).

You will still not find a cookie consent banner here. The language cookie is stored only when you ask for it by clicking the switcher, it lasts 30 days, it does not track you, and it does nothing else; for a cookie like that we do not consider a banner necessary. We do have to tell you about it, and that is what this section does, including how long it lasts and how to delete it.

We do not sell your data or pass it on for marketing. We store the inquiry from the form on our own server located in the European Union, and to run the website we use two processors, which also process the data in the EU:

• Plausible: traffic measurement without cookies and without personal data, data held in the EU.
• Amazon Web Services (AWS SES): delivery of email from the forms on this website to our mailbox, EU region (Frankfurt).

Beyond these processors, we disclose data to a third party only when the law requires us to, for example at the request of law enforcement authorities.

We keep the inquiry from the form for as long as we are handling it and for at most 6 months after that, so that we can pick up the conversation where it left off; after that period we delete it. If the inquiry leads to a contract, retention is governed by that contract and by statutory retention periods. Traffic measurement data is aggregate and contains no personal data; we do not link it to any specific person.

Under GDPR you have the rights of access, rectification, erasure, restriction of processing, and data portability, and the right to object to processing based on legitimate interest. You can exercise any of these rights by email to [email protected]; we will verify that the request genuinely comes from the data subject and handle it without undue delay.

If you believe that we handle your data in breach of data protection law, you have the right to lodge a complaint with a supervisory authority. In the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), based in Prague (uoou.gov.cz).