Privacy policy

1. Data controller

The controller is Štěpán Frais, Reg. No. 21459495, with its registered office at Dr. Martínka 1489/1, 700 30 Ostrava (the “controller”). Contact: [email protected].

2. Data we process

• Enquiries: name, e-mail, message and subsequent communication.
• Customers and representatives: identification, contact and billing details, account data, user permissions and communication.
• Paid-feature orders: the feature, selected plan and price, confirmation time, ordering user, authority declaration and accepted terms version.
• Operation and security: IP address, request time, device or browser type, sign-in records, error and security events.
• Website visits: after consent, pages visited, approximate location, referral source and device or browser information.

Required details are necessary to handle a request, create an account or provide the service. Other details are voluntary.

3. Purposes and legal bases

• handling enquiries and taking pre-contract steps at your request;
• concluding and performing a contract, account administration, support and billing;
• compliance with accounting, tax and other legal obligations;
• our legitimate interests in secure operation, protection of legal claims, prevention of misuse and communication with customer representatives.
• measuring and improving the public website based on your consent.

Depending on the circumstances, processing is based on a contract or pre-contract steps, a legal obligation, our legitimate interests or consent. Consent can be withdrawn at any time.

4. Retention

• enquiries that do not lead to a contract: up to 12 months after the last communication;
• account, contract and order records: for the contract term and generally 4 years afterwards to protect legal claims;
• accounting and tax records: for the statutory period;
• operational and security records: only as long as necessary to secure the service and resolve an event.

5. Recipients and transfers

We disclose data only as necessary to authorised staff and suppliers supporting service operation and security, data storage, message delivery, customer support, payments, accounting or legal services. Public authorities may receive data where required by law. Recipients are bound by law, contract or confidentiality.

Where a supplier processes data outside the European Economic Area, we rely on an adequacy decision or other lawful safeguards. Information about the applicable safeguard is available on request.

6. Data entered into CRM by Owlio by a customer

For personal data entered into the service by a customer, the customer is generally the controller and we act as its processor. We process it under the customer's documented instructions and the Czech data processing agreement. Requests concerning this data should primarily be sent to the organisation that gave you access.

7. Cookies and automated decisions

The website stores your appearance setting and your analytics choice. With your consent, it uses Google Analytics provided by Google Ireland Limited. The service sets _ga and _ga_* cookies to distinguish visitors and sessions, with a default lifetime of up to two years. It also measures pricing views, plan selections, and completed forms, but never their contents. The analytics script is not loaded without consent.

You can change your consent at any time using Cookie settings. We use no marketing cookies and no automated decision-making or profiling that produces legal or similarly significant effects.

8. Your rights

Depending on the circumstances, you may have the right to access, rectification, erasure, restriction, portability and to object to processing based on legitimate interests. Exercise your rights at [email protected].

You can also lodge a complaint with the Czech Data Protection Authority.

9. Changes

The current policy is always available on this page with its effective date.