Privacy Policy

Last updated: 2025-01-01

Privacy and security illustration

webdesignexpertcz ("we", "us", or "our") is a web design business based in the Czech Republic. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website, communicate with us, or use our services. We process personal data in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR) and related Czech legislation.

Categories of data. We may collect contact details (name, email, phone), business information (company name, role), technical data (IP address, device identifiers, browser and OS details), and usage information (pages viewed, time on page, referring URLs). Where you choose to provide additional details in free‑text fields, we will process the content for the purpose of addressing your request.

Sources of data. We collect data directly from you (for example, when you fill in a form or contact us by email or phone) and automatically through cookies or similar technologies that measure engagement and site performance. You can manage cookie preferences via your browser settings and our consent banner.

Lawful bases. We rely on legitimate interests to operate and improve our site, respond to inquiries, and market related services. We rely on consent for optional communications and analytics where required. We rely on contract to deliver agreed services and support. In limited cases, we may rely on legal obligation to retain records required by accounting or regulatory rules.

Purposes of processing. We use personal data to provide services, answer questions, prepare proposals, manage relationships, improve user experience, secure our systems, measure performance, and comply with laws. We minimize data collection and design retention schedules aligned with purpose and legal requirements.

Retention. We retain personal data for as long as necessary to fulfill the purposes outlined above. In general, inquiry records are kept for up to 24 months, project documentation for the duration of the engagement and a reasonable archive period, and invoicing records for the period required by Czech accounting rules. When data is *** longer required, we securely delete or anonymize it.

Sharing. We may share data with trusted processors who provide hosting, email delivery, analytics, or accounting services. These partners act on our instructions, implement appropriate security measures, and are bound by data processing agreements. We may also share data when required by law or to protect our rights or the rights of others.

International transfers. Where data is transferred outside the European Economic Area, we implement appropriate safeguards such as Standard Contractual Clauses, and we assess the legal environment of the destination to ensure a level of protection essentially equivalent to that of the EU.

Security. We apply administrative, technical, and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. Measures include access controls, encryption in transit, environment hardening, backups, and regular review of dependencies and configurations.

Cookies and similar technologies. Our site may use strictly necessary cookies to ensure core functionality, as well as optional analytics cookies that help us understand performance. Optional technologies operate only after you provide consent via our banner. You can update your preferences at any time by clearing cookies or adjusting browser settings.

Your rights. Subject to conditions and exemptions under GDPR, you have the right to access, rectify, erase, and port your personal data, and to restrict or object to certain processing. Where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of processing performed before withdrawal.

Exercising rights. To exercise rights or to ask questions about this policy or our practices, please contact us at [email protected] or call + (420) 60 591-34-82. We will verify your identity before responding and aim to reply within one month, subject to complexity and volume of requests.

Children. Our services are intended for business users and are not directed to individuals under the age of 16. If you believe a minor provided personal data, contact us and we will take appropriate steps to remove the information.

Changes to this policy. We may update this Privacy Policy to reflect operational, legal, or regulatory changes. Updates will be posted on this page with a revised "Last updated" date. Material changes may be communicated through additional notices.

Legal notice for CZ. For additional legal information, including supplier identification and statutory disclosures relevant in the Czech Republic, please refer to the legal section available via the "Legal information" link in our site navigation.