Privacy Policy

Who the controller is

The controller of your personal data within the meaning of Regulation (EU) 2016/679 (GDPR) is:

I have not appointed a data protection officer — you can come to me directly about anything at info@lagom.cz.

What data I process

Data from the contact form

When you fill in the form on the website, I process: your name, e-mail, phone number (if given), the address of your current website (if given) and the text of your message.

• Purpose: to reply to your enquiry and to discuss possible cooperation.
• Legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
• Retention period: 12 months from the last communication, if no contract is concluded.

Client data

If we enter into a contract, I also process billing details and the data necessary to provide the service (contact persons, access credentials).

• Legal basis: performance of the contract (Article 6(1)(b)) and compliance with a legal obligation in the case of accounting and tax documents (Article 6(1)(c)).
• Retention period: for the term of the contract and then a further 3 years (the limitation period); accounting and tax documents for the period laid down by law, as a rule 5 years.

Server logs

The web server automatically records the IP address, the date and time of the request, the browser type and the page address. This serves to keep the site secure and stable.

• Legal basis: legitimate interest in securing the website (Article 6(1)(f) GDPR).
• Retention period: 30 days at most.

Who I share data with

I do not sell personal data and I do not pass it on for third-party marketing purposes. Only the following processors are involved in processing it:

• Hetzner Online GmbH (Germany) — operation of the server that runs the website, the contact form and the internal enquiry records. The processing takes place in the European Union.
• Zoho Corporation B.V. (the Netherlands) — the mailbox and sending the e-mail confirming receipt of your enquiry. The data is stored in a European datacentre.
• Telegram FZ-LLC (United Arab Emirates) — an instant notification of a new enquiry. The notification sent contains the data from the form. This is a transfer to a third country for which no adequacy decision has been issued; the transfer is necessary for the performance of a contract, or for steps taken at your request prior to entering into one (Article 49(1)(b) GDPR). If you would rather not be notified this way, write to me directly at info@lagom.cz.

Data may also be passed on to public authorities where the law requires me to do so.

Cookies

This website uses strictly necessary cookies only. I do not use analytics, advertising or any other tracking tools — no Google Analytics, no social network pixels.

• cc_cookie — stores your choice in the cookie bar so that the website does not ask you again on every visit. Valid for 6 months.

Fonts are hosted directly on this server, so your browser does not connect to any third party when the page loads. Data from the form is only sent at the moment you submit it yourself.

Strictly necessary cookies do not require consent — the website would not work without them. You can change your choice at any time: open cookie settings. Cookies can also be deleted directly in your browser settings.

Your rights

In relation to your personal data, you have the right:

• to access the data and to a copy of the data processed,
• to have inaccurate or incomplete data corrected,
• to erasure (the “right to be forgotten”),
• to restriction of processing,
• to data portability,
• to object to processing based on legitimate interest,
• to lodge a complaint with the supervisory authority, which is the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7.

You can exercise your rights by writing to info@lagom.cz. I will reply within one month at the latest. So that I don’t hand data to the wrong person, I may ask you to verify your identity.

Security

The website and the form run exclusively over an encrypted connection (HTTPS). Only I and the people directly involved in delivering work for a client have access to the data. Access passwords and keys are stored separately from the application.

Automated decision-making

There is no automated decision-making or profiling that would have legal effects for you.