Sociya

Digitální partner

Privacy Policy

Personal data processing policy under GDPR

Last updated: 12/8/2025

This document describes how the unincorporated partnership Sociya (Pavel Kadaňka and Filip Mareček) processes the personal data of visitors to sociya.cz and its clients.

1. Data controller

The controller of your personal data is the unincorporated partnership:

Sociya

Pavel Kadaňka and Filip Mareček

[email protected]

+420 771 177 739

+420 735 063 758

2. Scope and sources of data

We process the following categories of personal data:

  • Identification data: first name, last name, company name
  • Contact data: email address, phone number
  • Technical data: IP address, browser information, cookies
  • Form data: content of messages sent via the contact form
  • Billing data: for clients, company ID, VAT ID, billing address

We obtain personal data directly from you (forms, email, phone) or automatically when you visit the website (cookies, server logs).

3. Purposes and legal bases of processing

PurposeLegal basisRetention period
Responding to inquiries from the contact formLegitimate interest1 year from last communication
Issuing invoices and accountingLegal obligation10 years
Sending the newsletterConsentUntil consent is withdrawn
Website traffic analysisConsent (cookies)As per cookie settings

4. Cookies and similar technologies

We use cookies on our website for:

  • Necessary cookies: ensure the website's basic functions
  • Analytics cookies: help us understand how visitors use the website (PostHog)
  • Marketing cookies: used to show relevant advertising

On your first visit to the website you can set your cookie preferences. You can withdraw your consent at any time in your browser settings or via the cookie banner on the website.

5. Recipients and processors of data

We may share your personal data with the following categories of recipients:

  • Hosting providers: servers for operating the website
  • Analytics services: PostHog
  • Email services: for sending newsletters
  • Accounting and tax advisors: to fulfil legal obligations

We have data processing agreements in place with all processors, ensuring the protection of your data.

6. Transfers to third countries

Some services we use (e.g. Google) may transfer data to third countries outside the EU/EEA. In these cases, the transfer is based on:

  • An adequacy decision by the European Commission
  • Standard contractual clauses
  • Certification under the EU-US Data Privacy Framework

7. Data security

We use the following measures to protect your personal data:

  • Encrypted connection (HTTPS/SSL)
  • Restricted data access limited to authorized persons
  • Regular data backups
  • Strong passwords and two-factor authentication
  • Up-to-date software and security patches

Security breach: In the event of a personal data breach that could pose a high risk to your rights and freedoms, we will inform you without undue delay in accordance with GDPR.

Automated decision-making: We do not use automated decision-making or profiling that would have legal effects or similarly significantly affect you.

8. Your rights

As a data subject, you have the following rights:

  • Right of access: you can request information about the processing of your data
  • Right to rectification: you can request correction of inaccurate data
  • Right to erasure: you can request deletion of data ("right to be forgotten")
  • Right to restriction of processing: you can request that processing be restricted
  • Right to data portability: you can request that data be transferred to another controller
  • Right to object: you can object to processing
  • Right to withdraw consent: you can withdraw given consent at any time

To exercise your rights, contact us at [email protected]. We will handle your request without undue delay, no later than within 30 days.

Newsletter: You can unsubscribe from the newsletter at any time by clicking the link in the email footer.

9. Processing of children's personal data

Our services are not intended for persons under 16 years of age. We do not knowingly collect personal data from children. If we discover that we have obtained data from a person under 16 without the consent of a legal guardian, we will delete that data promptly.

10. Final provisions

We may occasionally update this policy. We will inform you of significant changes via the website or email.

If you are not satisfied with how your request was handled, you have the right to file a complaint with the supervisory authority:

Office for Personal Data Protection (Czech Republic)

Pplk. Sochora 27

170 00 Prague 7, Czech Republic

www.uoou.cz

Have questions?

If you have questions about the protection of personal data, contact us at [email protected] or by phone at +420 735 063 758 or +420 771 177 739.