Privacy policy

What data about you we process, why and for how long

Who processes the data

Igor Gricyk, IČO 10681221, address: Kladno, Czech Republic. Contact: info@webvam.cz, +420 734 149 900.

What data we process

Only the data that you send yourself through the contact form or by email:

  • name,
  • email address,
  • the text of the message,
  • the language version of the website from which the form was sent.

A message may reveal which church you belong to and what you believe. Under the GDPR this is a special category of data (Art. 9). We process such information only with your explicit consent: in the form you give it with the checkbox under the message. If you write to us by email directly and the message contains such information, we will ask for your consent in our reply.

The website does not automatically collect any other data.

If you pay for the work through PayPal, Revolut or by card through Stripe, the payment provider tells us the payment details: the payer’s name, email address (if the provider passes it on), the amount and the date. We do not receive card details. If you ask for an invoice (faktura), we process the data needed for it: the name and address of the church or organisation and its identification number.

Why

The data is needed solely to reply to your message and to discuss a website or an app.

Legal basis: your consent under Art. 6(1)(a) GDPR or negotiations on a contract under Art. 6(1)(b) GDPR.

Information about faith — on the basis of your explicit consent, Art. 9(2)(a) GDPR. You can withdraw your consent by writing to info@webvam.cz; this does not affect processing carried out before the withdrawal.

Payment details and invoice data are needed to record the payment, issue an invoice and fulfil tax and accounting obligations. Legal basis: performance of a contract under Art. 6(1)(b) GDPR and a legal obligation under Art. 6(1)(c) GDPR.

Who the data is shared with

A submitted form is processed by the website’s server, which places the message in our mailbox on the same server. Form data is not passed to third-party services, is not sent outside the European Union and is not sold.

The website runs on a server in the European Union. The server operator processes standard access logs (IP address, time of the request) to keep the service running and secure.

Payment takes place on the side of the payment provider — PayPal, Revolut or Stripe. Each of them processes your data as an independent controller under its own privacy policy. Their own cookies apply on the payment providers’ pages.

Cookies and analytics

This website does not use cookies and does not load a single analytics or advertising script. There is no Google Analytics, no social media pixels and no visitor tracking systems. The fonts are stored on our server, so when you open a page you do not connect to any third-party company.

How long we keep the data

We keep correspondence for 3 years from the last contact. If work is carried out on the basis of the correspondence, the retention period is set by accounting and tax rules, as a rule 10 years.

We keep payment details and invoices for as long as tax and accounting rules require, as a rule 10 years.

Your rights

Under the GDPR you have the right to:

  • access your data,
  • correct inaccurate data,
  • erase your data (the “right to be forgotten”),
  • restrict processing,
  • transfer your data to another controller,
  • object to processing,
  • withdraw your consent at any time; withdrawal does not affect processing carried out before it.

You can exercise any of these rights by writing to info@webvam.cz. We will reply within 30 days.

Complaint

If you disagree with how we handle your data, you can lodge a complaint with the Czech Office for Personal Data Protection: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.