Privacy
Policy

1. Data Controller

The controller of personal data is:

2. What Personal Data We Process

We process only the personal data that you voluntarily provide to us through the contact form on this website:

• Name (optional)
• E-mail address
• The URL of your website or e-shop (optional)
• The content of your message

We do not request or process any other personal data (personal identification number, date of birth, banking details, etc.).

3. Purpose and Legal Basis of Processing

We process your personal data for the purpose of responding to your inquiry and communicating with you prior to any potential business cooperation.

The legal basis for processing is the legitimate interest of the controller under Article 6(1)(f) of the GDPR — specifically, the interest in responding to questions and inquiries submitted via the contact form.

We do not use your data for automated profiling or for decision-making with legal effects.

4. Retention Period of Personal Data

We retain personal data for the duration of the business communication and for the period strictly necessary to handle the inquiry — for a maximum of 2 years from the last contact.

After this period expires, or upon your request, your data will be deleted.

5. Recipients of Personal Data

We do not sell or transfer your personal data to third parties for commercial purposes. We use one processor for the processing:

• Formspree, Inc. — a US company that provides the technical processing of submitted forms. Data may be stored on servers outside the EU. Formspree processes data in accordance with its own terms available at formspree.io.

We have no other recipients. We do not transfer your data to public authorities except where required by law.

6. Your Rights

In connection with the processing of personal data, you have the following rights:

• Right of access — you may request information about what data of yours we process
• Right to rectification — if your data is inaccurate, you may request its correction
• Right to erasure — you may request the deletion of your personal data
• Right to restriction of processing — under certain conditions you may request the restriction of processing
• Right to object — you have the right to object to processing based on legitimate interest
• Right to data portability — you may request that your data be provided in a machine-readable format

Exercise all rights by e-mail at info@nebyra.cz. We will respond without undue delay, no later than within 30 days.

7. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority:

8. Changes to This Policy

This policy may be updated from time to time. The current version is always available on this page, with the effective date indicated.

In the event of material changes, we will notify you by e-mail if we are in contact.