Privacy policy

1. Who we are and how to reach us

The data controller is Solidus Tech s.r.o., registered office at Na poříčí 595, 738 01 Frýdek-Místek, Czech Republic, Company ID 29450837. For any matter concerning personal data, contact us at info@solidustech.cz or on +420 604 82 82 00.

We have not appointed a Data Protection Officer, as we are not required to do so. Your enquiries are handled directly by the company management.

2. What data we process, why and for how long

2.1 Inquiries submitted through the website

When you submit the inquiry form, we process your name, e-mail, telephone number, company name, company and VAT registration numbers, country, the text of your message and the list of requested items. We also store the IP address and the time your consent was given, together with the version of the terms and conditions displayed to you at that moment.

• Purpose: handling your inquiry, preparing a quotation and subsequent communication.
• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). For the consent record, our legitimate interest in being able to evidence the terms under which the inquiry was submitted (Art. 6(1)(f) GDPR).
• Retention: 3 years from the last communication. Where a contract results from the inquiry, we retain the data for the duration of the contract and thereafter for the statutory periods — in particular 10 years for tax documents under Czech VAT law.

2.2 Partner account

For registered partners we process the e-mail address, company name, a password hash (we never store or have access to the password itself) and the agreed discount rate.

• Purpose: operating partner access and displaying partner pricing.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Retention: for the duration of the partnership and 3 years thereafter.

2.3 Traffic statistics

We run our own lightweight traffic measurement without any third-party service. For each page view we store the page address, language, country code, device type, the referring domain and any search term used. We do not store your IP address — only an irreversible hash of it (SHA-256 with a salt), which is used to estimate the number of unique visitors and from which your IP address cannot be recovered.

• Legal basis: our legitimate interest in measuring and improving the website (Art. 6(1)(f) GDPR).
• Retention: no longer than 26 months.

2.4 Security records

To protect against form abuse and repeated login attempts we store the IP address, the time and the outcome of the attempt.

• Legal basis: our legitimate interest in securing the website (Art. 6(1)(f) GDPR).
• Retention: 7 days for login attempts, 30 days for form submissions.

3. Cookies and similar technologies

The website uses first-party cookies only — no advertising or third-party tracking cookies:

• PHPSESSID — technical session cookie, required for logging in and submitting forms. Expires when you close your browser.
• language — remembers your chosen language. Valid for 1 year.
• cookie_consent — stores your choice in the consent bar so you are not asked again. Valid for 1 year.

Necessary cookies are set on the basis of our legitimate interest in operating the website; refusing them would make the site unusable. Optional categories are set only with your consent, which you can change or withdraw at any time in the consent bar.

4. Who we share data with

We do not sell your data and we do not pass it to anyone for their own marketing purposes. We do, however, use suppliers who operate the website for us and who act as processors in that role:

• WEDOS Internet, a.s. (Czech Republic) — web hosting and database storage.
• Seznam.cz, a.s. (Czech Republic) — sending and delivering e-mail.

Data may also be disclosed to public authorities where required by law, and to our legal or accounting advisers to the extent necessary.

5. Third-party content and transfers outside the EU

The website uses fonts from Google Fonts and Adobe Fonts, and the Contact page embeds a Google Maps frame. When these load, your IP address and browser details are made available to the operators of those services (Google Ireland Limited, Adobe Systems Software Ireland Limited), which may process them on servers outside the European Economic Area. Any such transfer relies on the Standard Contractual Clauses approved by the European Commission or on an adequacy decision.

The map loads only on the Contact page. If you prefer to avoid loading third-party content, do not visit that page or use script blocking in your browser.

6. Your rights

In relation to your personal data you have the right:

• of access, and to obtain a copy of the data we process,
• to rectification of inaccurate data or completion of incomplete data,
• to erasure, where the reason for processing has ceased and no legal obligation prevents it,
• to restriction of processing,
• to data portability in a machine-readable format for data you provided to us,
• to object to processing based on legitimate interest — we will then stop processing unless we demonstrate compelling legitimate grounds,
• to withdraw consent where processing is based on it; withdrawal does not affect the lawfulness of processing carried out beforehand.

Simply send your request to info@solidustech.cz. We will respond within one month at the latest; for complex requests we may extend this by a further two months and will inform you if we do. To avoid disclosing data to the wrong person, we may need to verify your identity.

7. Complaint to a supervisory authority

If you believe we handle your data unlawfully, please contact us first. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz, or with the supervisory authority in your country of residence.

8. Security

The website runs exclusively over an encrypted HTTPS connection. Passwords are stored only as irreversible hashes, and administration access is restricted and protected against repeated login attempts. Only authorised staff have access to the data, and only to the extent necessary for their work.

9. Automated decision-making

We do not use automated decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you.

10. Changes to this policy

We may update this policy if our processing or the applicable legislation changes. The current version is always available on this page; the effective date is shown in the header.

This is a translation provided for information purposes. In case of any discrepancy, the Czech version of this document prevails.