Privacy policy

The controller of your personal data is HFJ s.r.o., Reg. No. 25230948, registered office at č.p. 90, 330 25 Blatnice, Czech Republic, entered in the Commercial Register maintained by the Regional Court in Plzeň, Section C, Insert 10953. Our office is at Železniční 7, 326 00 Plzeň.

For any privacy matters, contact us at info@hfj.cz or by phone at +420 730 823 719.

When you write to us via the contact form or by email, we process:

• your full name,
• your email address,
• your company name (optional),
• the selected area of interest and the content of your message.

Providing your data is voluntary — no law or contract requires it. Without your name, email address and message, however, we cannot reply to you.

When you visit the website, the server automatically records technical data (IP address, browser type, time and address of the request). It is used solely to keep the website running and secure.

To protect the form against misuse, we limit how often it can be sent. For this we briefly store a hash of your IP address and email address, not the addresses themselves.

• Handling your enquiry and discussing a possible collaboration — steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to your message (Art. 6(1)(f) GDPR).
• Keeping the website running and secure and protecting the form against misuse — legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for marketing, we do not send commercial communications and we do not carry out automated decision-making or profiling.

We keep data from the form and email correspondence for as long as needed to handle your enquiry and any follow-up communication. If no collaboration results, we delete it no later than 12 months after the last communication. If a collaboration does result, retention is governed by the contractual relationship and our legal obligations.

Resend keeps a copy of the sent message and its delivery records for 30 days.

Technical server logs are kept only as long as needed to keep the website running and secure. The IP and email address hashes used to protect the form expire after 2 hours and are then deleted automatically.

Only authorised HFJ staff have access to your data. The following processors also handle it, strictly to the extent needed for their service:

• Resend, Inc. (USA) — technical delivery of contact-form messages to our mailbox,
• WEDOS Internet, a.s. (Czech Republic) — website hosting,
• our email providers.

Where data is transferred outside the European Economic Area (to the USA), we rely on the European Commission's adequacy decision under Art. 45 GDPR (EU-U.S. Data Privacy Framework) and on standard contractual clauses under Art. 46 GDPR. For Resend, the clauses are part of its data processing agreement published at resend.com/legal/dpa.

We do not sell your data or share it with third parties for their own purposes.

This website uses no cookies and no analytics, advertising or tracking tools. That is why we don't ask for cookie consent.

When you switch languages, your browser briefly remembers where you were on the page so it can return you to the same spot. This stays in your browser and is never sent to us.

You have the right to:

• access your personal data,
• have inaccurate data corrected,
• have your data erased,
• restrict processing,
• data portability,
• object to processing based on legitimate interest.

To exercise your rights, email us at info@hfj.cz. We will respond without undue delay and within one month at the latest.

If you believe we process your data unlawfully, you may lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz, or with the supervisory authority in your EU country of residence.