Privacy Policy
Personal data processing policy under GDPR
Last updated: 12/8/2025
This document describes how the unincorporated partnership Sociya (Pavel Kadaňka and Filip Mareček) processes the personal data of visitors to sociya.cz and its clients.
1. Data controller
The controller of your personal data is the unincorporated partnership:
2. Scope and sources of data
We process the following categories of personal data:
- Identification data: first name, last name, company name
- Contact data: email address, phone number
- Technical data: IP address, browser information, cookies
- Form data: content of messages sent via the contact form
- Billing data: for clients, company ID, VAT ID, billing address
We obtain personal data directly from you (forms, email, phone) or automatically when you visit the website (cookies, server logs).
3. Purposes and legal bases of processing
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to inquiries from the contact form | Legitimate interest | 1 year from last communication |
| Issuing invoices and accounting | Legal obligation | 10 years |
| Sending the newsletter | Consent | Until consent is withdrawn |
| Website traffic analysis | Consent (cookies) | As per cookie settings |
5. Recipients and processors of data
We may share your personal data with the following categories of recipients:
- Hosting providers: servers for operating the website
- Analytics services: PostHog
- Email services: for sending newsletters
- Accounting and tax advisors: to fulfil legal obligations
We have data processing agreements in place with all processors, ensuring the protection of your data.
6. Transfers to third countries
Some services we use (e.g. Google) may transfer data to third countries outside the EU/EEA. In these cases, the transfer is based on:
- An adequacy decision by the European Commission
- Standard contractual clauses
- Certification under the EU-US Data Privacy Framework
7. Data security
We use the following measures to protect your personal data:
- Encrypted connection (HTTPS/SSL)
- Restricted data access limited to authorized persons
- Regular data backups
- Strong passwords and two-factor authentication
- Up-to-date software and security patches
Security breach: In the event of a personal data breach that could pose a high risk to your rights and freedoms, we will inform you without undue delay in accordance with GDPR.
Automated decision-making: We do not use automated decision-making or profiling that would have legal effects or similarly significantly affect you.
8. Your rights
As a data subject, you have the following rights:
- Right of access: you can request information about the processing of your data
- Right to rectification: you can request correction of inaccurate data
- Right to erasure: you can request deletion of data ("right to be forgotten")
- Right to restriction of processing: you can request that processing be restricted
- Right to data portability: you can request that data be transferred to another controller
- Right to object: you can object to processing
- Right to withdraw consent: you can withdraw given consent at any time
To exercise your rights, contact us at [email protected]. We will handle your request without undue delay, no later than within 30 days.
Newsletter: You can unsubscribe from the newsletter at any time by clicking the link in the email footer.
9. Processing of children's personal data
Our services are not intended for persons under 16 years of age. We do not knowingly collect personal data from children. If we discover that we have obtained data from a person under 16 without the consent of a legal guardian, we will delete that data promptly.
10. Final provisions
We may occasionally update this policy. We will inform you of significant changes via the website or email.
If you are not satisfied with how your request was handled, you have the right to file a complaint with the supervisory authority:
Office for Personal Data Protection (Czech Republic)
Pplk. Sochora 27
170 00 Prague 7, Czech Republic
www.uoou.czHave questions?
If you have questions about the protection of personal data, contact us at [email protected] or by phone at +420 735 063 758 or +420 771 177 739.


