Privacy Policy
This Privacy Policy describes how Aelix (operating aelix.orbina.info) collects, processes, stores, and protects personal data. It applies to all visitors and users of this website. This policy is written in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Czech Act No. 110/2019 Coll. on the Processing of Personal Data.
The data controller for personal data collected through this website is:
Aelix
Sedlecká 758/7
Karlovy Vary, Czech Republic
Email: [email protected]
Phone: +420 225 373 373
The data controller determines the purposes and means of processing personal data collected through aelix.orbina.info. Where required by applicable law, the data controller has taken appropriate technical and organisational measures to ensure the security of personal data.
This website may collect the following categories of personal data depending on how you interact with it:
Contact form submissions: Full name, email address, subject line, and the content of your message. This data is submitted voluntarily when you use the contact form on the Contact page.
Technical data: IP address, browser type and version, operating system, referring URL, pages visited, and time of visit. This data is collected automatically when you access the website and is processed in aggregate form for analytics purposes.
Cookie data: Identifiers stored in cookies on your device, including your cookie consent preferences. See the Cookie Policy for full details.
We do not collect special categories of personal data (sensitive data) as defined in Article 9 of the GDPR.
Personal data is processed on the following legal bases as set out in Article 6 of the GDPR:
Consent (Article 6(1)(a)): Where you have given explicit consent to the processing of your personal data for one or more specific purposes, such as the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Legitimate interests (Article 6(1)(f)): Processing of technical data for the purpose of ensuring website security, preventing fraud, and analysing aggregate usage patterns. We have assessed that these legitimate interests are not overridden by your rights and freedoms.
Performance of a task in the public interest or pre-contractual steps (Article 6(1)(b)): Processing of contact form data in order to respond to your enquiry, which constitutes steps taken at your request prior to any potential engagement.
Personal data collected through this website is used for the following purposes:
Responding to enquiries: Data submitted through the contact form is used solely to understand and respond to the enquiry you have sent. It is not used for marketing or shared with third parties for commercial purposes.
Website operation and security: Technical data is used to maintain the functioning of the website, diagnose technical issues, and protect against unauthorised access or malicious activity.
Analytics: Aggregated, anonymised technical data may be used to understand how visitors interact with the website in order to improve its content and usability. Where analytics tools are used that process personal data, this is done only with your consent.
Legal compliance: Personal data may be processed where necessary to comply with applicable legal obligations under Czech or EU law.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
Contact form data: Retained for a period of up to 12 months from the date of receipt, after which it is securely deleted unless there is an ongoing correspondence or legal reason to retain it longer.
Technical/log data: Server logs containing IP addresses and access records are retained for a maximum of 90 days for security and diagnostic purposes, then automatically purged.
Cookie consent records: Your cookie preference is stored in a browser cookie for up to 12 months. If you clear your cookies, the preference will be reset and you may be asked to set your preferences again.
When personal data is no longer needed, it is deleted or anonymised in a manner that prevents reconstruction.
We do not sell, rent, or trade personal data to third parties for commercial purposes.
Personal data may be shared with the following categories of recipients only where necessary:
Hosting providers: The website is hosted on servers provided by a third-party hosting company. The hosting provider processes technical data as a data processor acting on our behalf, under a data processing agreement.
Analytics providers: Where analytics tools are enabled with your consent, data may be shared with the relevant analytics provider (such as Google Analytics). These providers act as data processors and are bound by their own privacy policies and data processing terms.
Legal authorities: Personal data may be disclosed to competent Czech or EU authorities where required by law, court order, or to protect the rights and safety of individuals.
No personal data is transferred to countries outside the European Economic Area (EEA) without appropriate safeguards as required by Chapter V of the GDPR.
Under the GDPR and the Czech Act No. 110/2019 Coll., you have the following rights in relation to your personal data:
Right of access (Article 15): You have the right to obtain confirmation of whether we process personal data about you and, if so, to receive a copy of that data.
Right to rectification (Article 16): You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to erasure (Article 17): You have the right to request deletion of personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful.
Right to restriction of processing (Article 18): You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to data portability (Article 20): Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to object (Article 21): You have the right to object to processing based on legitimate interests at any time.
Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within one month as required by Article 12 of the GDPR.
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority in the Czech Republic is:
Úřad pro ochranu osobních údajů (UOOU)
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
Website: www.uoou.cz
You also have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Transmission of data between your browser and this website is encrypted using HTTPS (TLS). Access to systems that store personal data is restricted to authorised personnel only. We conduct periodic reviews of our data handling practices to identify and address potential vulnerabilities.
While we take reasonable steps to protect personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
This Privacy Policy may be updated from time to time to reflect changes in our data processing practices, applicable law, or the services provided through this website. The date of the most recent revision is indicated at the top of this document.
We encourage you to review this policy periodically. Continued use of the website after any changes constitutes acceptance of the updated policy. Where changes are material, we will take reasonable steps to notify visitors.
If you have questions about this policy or how your data is handled, please contact us at [email protected].