Privacy policy
Draft for approval. The management of Cognera s.r.o. has not approved this text yet, so it is not in effect. The retention periods and the list of processors are proposed and may change.
On this page we explain what personal data we process when you visit the cognera.cz website or write to us through the contact form, why we do it, and what rights you have. This policy is based on Article 13 of the General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”).
Controller
The controller of your personal data is Cognera s.r.o., with its registered office at Panská 571, 391 55 Chýnov, company ID (IČO) 23743514, registered in the commercial register kept by the Regional Court in České Budějovice, section C, insert 35720.
For anything about personal data, email us at info@cognera.cz or write to our registered office. You can also call us at +420 607 204 423.
We have not appointed a data protection officer, because the law does not require us to.
Why we process data and on what basis
Answering your inquiry
When you write to us through the contact form, we process the data you enter: your name, email, and message, and also your phone number and company name if you give them. We use them to answer you, to agree on the next steps, and to prepare an offer.
The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering the inquiries you send us (Article 6(1)(f) GDPR). If we start working together, we continue to process the data under the contract and under the law, for example accounting and tax law.
Protecting the form from abuse
When you send the form, we process your IP address, the time it was sent, and your email address. We use them to check that the form is not sent by a robot, to limit how many times it can be sent from one address, and to record the submission in the server’s operational log. We also attach the IP address and the time to the message the form delivers to us.
The bot check (ALTCHA) runs on our own server and uses no third-party service. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).
Running and securing the website
Each time a page loads, the web server records the IP address, the time, the address of the requested page, and the browser’s identification. We need these records to keep the website running, to find errors, and to detect attacks. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).
Our legitimate interests
By legitimate interest we mean that we want to:
- answer the inquiry you send us and agree on the next steps with you,
- protect the form from spam and robots, and the website from attacks,
- keep the website running and fix its errors.
You can object to processing based on legitimate interest at any time, as described in Your rights.
Who we share data with
We do not sell personal data and do not pass it to anyone for their own purposes. Only these processors, who provide the technology for us, work with it:
- Hetzner Online GmbH, Germany: runs the server the website runs on and where the operational records are stored.
- Microsoft Ireland Operations Limited, Ireland: runs the Microsoft 365 email service through which the form delivers messages to us and in which we keep them.
Public authorities may also obtain the data where the law provides for it.
Transfers outside the European Union
We store the data in the European Union. As part of its services, Microsoft may make the data available to its parent company, Microsoft Corporation, in the USA. Such a transfer relies on the European Commission’s decision on an adequate level of protection (the EU-US Data Privacy Framework, Commission Implementing Decision (EU) 2023/1795), under which Microsoft Corporation is certified.
How long we keep data
- Inquiries from the form and the emails that follow: 12 months from the last communication, unless we start working together. If we do, the retention period follows the contract and the statutory periods.
- The server’s operational and security records: 30 days.
- Data used to limit how often the form can be sent (IP address and email): held only in the server’s memory and never written anywhere. The limit applies for 5 minutes to an IP address and for 1 hour to an email address, and the data is gone when the server restarts at the latest.
Your rights
In connection with the processing of your personal data, you have the right:
- of access to your personal data (Article 15 GDPR),
- to rectification of inaccurate data (Article 16 GDPR),
- to erasure of your data (Article 17 GDPR),
- to restriction of processing (Article 18 GDPR),
- to data portability (Article 20 GDPR),
- to object to processing based on legitimate interest (Article 21 GDPR).
Send us your request by email to info@cognera.cz or by post to our registered office. We will answer without undue delay, and within one month at the latest.
If you believe that our processing breaks the law, you can lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.
Required data and automated decision-making
We need your name, email, and message to be able to answer you, so the form marks them with an asterisk as required. You do not have to give your phone number or company name. Browsing the website requires no data from you.
We do not make automated decisions about you and do not carry out profiling.
Effective date and changes
The company’s management will add the effective date when it approves the text.
We will update this policy when the way we process personal data changes. You will always find the current version on this page.