This Privacy Policy explains how Thabor s.r.o. (“Thabor”, “we”, “us”, or “our”) processes personal data in connection with the website thabor.cz and with enquiries addressed to us. Thabor processes personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, the “GDPR”) and Act No. 110/2019 Coll., on the Processing of Personal Data.
Scope
This Privacy Policy governs personal data processed in connection with the website and enquiries. It does not govern personal data that Thabor processes on behalf of its clients under a separate contract or data processing agreement.
Controller
The controller of personal data is Thabor s.r.o., with its registered office at Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic, IČO 29722519, registered in the Czech Commercial Register.
Thabor has not appointed a data protection officer. Enquiries concerning the processing of personal data may be addressed to info@thabor.cz.
Categories of personal data
- Data provided in correspondence. Where you contact Thabor, we process the identification and contact details and any other information contained in your communication, including your name, email address, organisation, and the substance of your message.
- Technical data. Our servers automatically record technical information necessary for the operation and security of the website, including IP address, browser identification, the resources requested, and the date and time of access.
- Cookies. The website uses no analytical, advertising, or tracking cookies. Any cookies or similar technologies are limited to technical storage strictly necessary for the functioning or security of the website. Further information is set out in the Cookie Notice.
Thabor does not request special categories of personal data through the website and asks that such data not be included in enquiries unless strictly necessary.
Absence of third-party tracking
Thabor serves fonts and assets from its own infrastructure and incorporates no third-party analytics, advertising networks, or social media components, so browsing the website is not disclosed to such third parties.
Purposes and legal bases
- To respond to enquiries. Where your enquiry concerns potential cooperation, services, or a contract, the legal basis is the performance of pre-contractual measures taken at your request (Article 6(1)(b) GDPR). For other correspondence, the legal basis is Thabor’s legitimate interest in responding to communications addressed to it (Article 6(1)(f) GDPR).
- To operate and secure the website. Legal basis: the legitimate interests of Thabor in maintaining a stable and abuse-resistant service (Article 6(1)(f) GDPR).
- To comply with legal obligations where applicable, including accounting and record-keeping. Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).
Recipients
Personal data are accessible only to authorised personnel of Thabor and to service providers, such as hosting and email providers, that process data on Thabor’s behalf and on its instructions. Thabor does not sell personal data, and discloses it to public authorities only where required to do so by law.
Transfers outside the European Economic Area
Where personal data are transferred outside the European Economic Area, Thabor takes steps to ensure that appropriate safeguards under the GDPR are in place.
Retention
Thabor retains personal data only for as long as necessary for the purposes described in this Policy, and thereafter for any period required to comply with a legal obligation or to establish, exercise, or defend legal claims. Records that Thabor is required to keep by law, such as accounting records, are retained for the period prescribed by the applicable legislation.
Automated decision-making
Thabor does not use personal data collected through the website for automated decision-making or profiling within the meaning of Article 22 GDPR.
Security
Thabor applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.
Rights of data subjects
Subject to the conditions laid down in the GDPR, you have the right of access to your personal data (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to data portability (Article 20), and the right to object to processing (Article 21). Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal (Article 7(3)). To exercise any of these rights, please contact info@thabor.cz.
You also have the right to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 727/27, Holešovice, 170 00 Praha 7, Czech Republic, uoou.gov.cz.
Amendments
Thabor may amend this Privacy Policy to reflect changes in its processing activities or in applicable law. The current version, together with its effective date, is published on this page.