1. Data Controller
The data controller is INVISOFT s.r.o., ID No. 28674545, registered at Vranové 1. díl 265, 468 22 Malá Skála, Czech Republic (hereinafter "the controller"). Contact e-mail: info@invisoft.eu.
2. Personal Data We Process
We process the following personal data:
- Data you provide to us – by e-mail or through the contact form: first and last name, e-mail address, company name and job title, the details you select in the form (e.g. team size, area of interest) and the content of your message.
- Advertising measurement data – only if you consent to cookies: online identifiers stored in Google Ads cookies, information about your device and browser, the pages you visited and whether you sent us an enquiry after clicking one of our ads (see section 3).
- Technical data – as with any website, your browser transmits technical data (e.g. IP address, browser type and time of access) to the servers that deliver this website and its components (e.g. scripts from external content delivery networks).
We do not process any special categories of personal data (sensitive data).
3. Cookies and Google Ads
This website uses the Google Ads service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) to measure how visitors find the website and whether an enquiry is sent after clicking one of our ads (conversion tracking).
Google Ads cookies are stored in and read from your browser only after you click “Accept” in the cookie banner. Until then, the Google tag runs in a restricted consent mode: it neither sets nor reads cookies. Loading the tag does, however, transmit technical data (e.g. your IP address and browser information) to Google, as with any request to an external server.
The legal basis is your consent under Art. 6(1)(a) GDPR and, for storing and reading information on your device, Art. 5(3) of the ePrivacy Directive as implemented in national law (in the Czech Republic § 89(3) of Act No. 127/2005 Coll., on electronic communications). You can withdraw your consent at any time with effect for the future by deleting this website's stored data (cookies and local storage) in your browser; the cookie banner will then appear again and you can choose “Decline”. More about how Google processes data: policies.google.com/privacy.
In addition, the website stores your language choice and your cookie decision in your browser's local storage. These entries are needed for the website to work as you set it and are not passed on to anyone.
4. Purpose and Legal Basis of Processing
| Purpose | Legal Basis |
|---|---|
| Responding to your enquiry / cooperation proposal | Art. 6(1)(b) GDPR – performance of a contract / pre-contractual steps |
| Keeping records of business communication | Art. 6(1)(f) GDPR – legitimate interest of the controller |
| Compliance with legal obligations (accounting and tax documents) | Art. 6(1)(c) GDPR – compliance with a legal obligation |
| Measuring the effectiveness of our ads (Google Ads) | Art. 6(1)(a) GDPR – consent |
5. Retention Period
We retain personal data only for as long as necessary to fulfil the purposes listed above. Business e-mail correspondence is retained for the duration of the business relationship and for 3 years after its termination. Documents subject to statutory archiving are retained for the period required by applicable law (typically 5–10 years). Google Ads cookies set by this website expire after 90 days at the latest; you can delete them earlier in your browser at any time.
6. Recipients of Personal Data
We do not sell your personal data. We disclose it only to providers of services we need to run our business and this website, and only to the extent necessary for their tasks: our e-mail service provider, the form service Web3Forms, which forwards messages from the website's contact forms to our e-mail, our accountant and – if you consent – Google for ad measurement (see section 3). These providers are bound by confidentiality obligations.
7. International Transfers
As a rule, we process personal data within the European Economic Area (EEA). Google may also process data in the USA; Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision. For any other transfer to a third country we will ensure appropriate safeguards in accordance with GDPR (e.g. standard contractual clauses).
8. Your Rights
Under the GDPR, you have the following rights:
- Right of access – to find out what data we hold about you.
- Right to rectification – to request correction of inaccurate data.
- Right to erasure – to request deletion of data where the purpose for processing has ceased.
- Right to restriction of processing – in cases provided for by law.
- Right to data portability – to receive data in a machine-readable format.
- Right to object – to processing based on legitimate interest.
- Right to withdraw consent – at any time, with effect for the future (see section 3).
- Right to lodge a complaint – with the Office for Personal Data Protection (www.uoou.cz) or with the supervisory authority in the EU member state where you live or work.
To exercise your rights, please contact us at info@invisoft.eu. We will respond without undue delay and at the latest within one month of receiving your request.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Communications are secured via an encrypted connection (HTTPS/TLS).
10. Changes to This Policy
We may update this policy from time to time. The date of the latest update is always shown at the top of this page. We recommend checking this page periodically.