1. Purpose of this document
This policy explains how BREDCORP, s. r. o. (“we”) processes the personal data of website visitors, prospective clients, clients, their representatives and other people with whom we interact.
We act primarily in accordance with Regulation (EU) 2016/679 (the “GDPR”) and Czech Act No. 110/2019 Coll., on Personal Data Processing. We may provide more specific information for a particular service; that information takes precedence in the relevant context.
2. Data controller
- Controller
- BREDCORP, s. r. o.
- Company ID
- 174 62 916
- Registered office
- Lidická 701/21, 602 00 Brno, Czech Republic
- hello@bred.cz
- Telephone
- +420 534 534 521
You can contact us about any privacy matter using the details above.
3. Data we obtain and its sources
Depending on our relationship, we may process identification and contact details, details of the organisation you represent, the content of enquiries and communications, contract and billing information, information and materials needed to provide an agreed service, and website usage data such as IP address, request time, page visited and browser technical information.
We obtain data mainly from you. We may also receive it from the person or organisation you represent, our clients or business partners, public registers or other lawful sources. Where we do not obtain the data from you, we will provide the information required by Article 14 GDPR unless a statutory exception applies.
We do not request special categories of personal data, such as health data, for an ordinary enquiry. Please do not include such data in the contact form unless it is necessary for your matter.
4. Why we process data
Enquiries and pre-contractual discussions. We use data to respond, assess your needs and prepare an offer. The legal basis is taking steps at your request before entering into a contract under Article 6(1)(b) GDPR; for representatives of legal entities, it is also our legitimate interest in business communication under point (f).
Providing services and client care. We process data to enter into and perform a contract, communicate, manage an engagement and issue invoices under Article 6(1)(b) GDPR. For people acting on behalf of a client, the basis is our legitimate interest in properly performing the contract under point (f).
Compliance with legal obligations. We process accounting and tax records and other mandatory records under Article 6(1)(c) GDPR.
Protecting rights and security. We may use data to establish, exercise or defend legal claims, prevent misuse and secure our website and systems on the basis of our legitimate interests under Article 6(1)(f) GDPR.
Optional analytics and marketing technologies. Where enabled on the website, we use them only with your prior consent under Article 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll. You can change your consent at any time in the cookie settings.
5. Contact form and communications
The form collects your name, optional company, email address, telephone number and message. Your name, email, telephone number and message are necessary for us to handle the enquiry reliably; the form cannot be submitted without them. Providing a company name is optional.
The message is delivered to our email inbox. If the enquiry leads to a contractual relationship, we add relevant communications to the client file. Submitting the form does not constitute consent to receive marketing communications.
7. External links and booking
If you follow a link to an external booking service, map or social network, you leave our website. The destination service then processes data under its own policy as an independent controller. We recommend reviewing that service's privacy information before using it.
We do not disclose contact-form data to an external service merely by placing a link to it on our website.
8. Who may access the data
We disclose data only where necessary to our authorised staff and contractors and to providers of hosting, email, IT support and other technical services. Depending on the engagement, recipients may also include accounting, tax, legal or other professional advisers, contractual partners and public authorities where required by law or necessary to protect our rights.
Suppliers that process data on our behalf are required to act only on our instructions, maintain confidentiality and apply appropriate security.
9. Transfers outside the European Economic Area
Some technology providers may process data outside the European Economic Area. Such transfers take place only where the GDPR requirements are met, in particular on the basis of a European Commission adequacy decision, standard contractual clauses and any necessary supplementary measures.
On request, we will provide information about the applicable mechanism and a copy of the safeguards, provided this does not adversely affect the rights of others.
10. How long we retain data
We normally retain an unsuccessful enquiry and related communications for no more than 12 months from the last contact. We retain client data for the duration of the contractual relationship and then for as long as needed to protect rights and comply with legal obligations. Accounting and tax records are retained for the statutory period, generally 5 to 10 years depending on the document.
Technical server logs are normally retained for no more than 30 days, and longer only when investigating a security incident. Cookie choices are stored for 180 days. Where a dispute, audit or other proceeding is pending, we may retain relevant data until it is finally resolved and related claims are settled.
11. Your rights
Subject to the GDPR conditions, you have the right to access, rectify and erase personal data, restrict processing and receive portable data. You may object to processing based on a legitimate interest. Where processing is based on consent, you may withdraw it at any time.
You can exercise your rights at hello@bred.cz or using another contact in section 2. We may reasonably verify your identity. We will respond without undue delay, normally within one month; in complex cases, the period may be extended under the GDPR and we will inform you of the extension in time.
You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, if you believe that we process data unlawfully.
12. Automated decisions, security and changes
We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects for you.
We apply technical and organisational measures appropriate to the nature of the data and the processing risks. We may update this policy, particularly when the services we use or legal requirements change. We will always publish the current version and the date of the latest change on this page.