Privacy Policy
- 01Introduction
- 02Who We Are
- 03Personal Data We Collect
- 04Lawful Basis for Processing
- 05Use of Personal Data
- 06Data Retention
- 07Cookies and Analytics
- 08International Data Transfers
- 09Embedded Third-Party Content
- 10Security Measures
- 11Your Rights Under GDPR
- 12Newsletters & Marketing
- 13Third-Party Websites
- 14Legal Disclosure
- 15Changes to This Policy
- 16Contact Information
Introduction
At Artlex Consult s.r.o., we value your privacy and are committed to protecting your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation — GDPR) and applicable Czech legislation.
This Privacy Policy explains how we collect, use, store, disclose and safeguard your personal information when you visit our website (www.artlexconsult.com) or engage with our services.
By accessing our website and providing personal data, you confirm that you have read, understood and accepted the terms of this Privacy Policy. If you do not agree, please refrain from using our website or submitting personal data.
Who We Are
The data controller responsible for your personal data is:
Artlex Consult s.r.o.
IČO: 17286417
Kurzova 2222/16, Stodůlky, 155 00 Prague 5, Czech Republic
Email: info@artlexconsult.com
We are a legal and compliance advisory firm registered in the Czech Republic. We do not have a designated Data Protection Officer (DPO) at this time, as we do not fall within the mandatory DPO appointment categories under Article 37 GDPR. Data protection enquiries may be directed to the contact above.
Personal Data We Collect
3.1 Directly Provided Information
- Full name, email address, phone number and company details
- Job title and professional background (where voluntarily provided)
- Any information submitted via our contact forms or direct communications
3.2 Automatically Collected Data
- IP address, browser type, device type and operating system
- Date and time of access, referring pages and pages visited
- Usage and navigation data collected via cookies or similar technologies
3.3 Contact Form Submissions
Information submitted through our contact forms is transmitted to our company email. It is used solely to respond to your enquiry and is not used for marketing unless you expressly opt in.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis to do so under Article 6 of the GDPR. The applicable bases are as follows:
| Processing Purpose | Lawful Basis |
|---|---|
| Responding to enquiries submitted via contact forms | Legitimate interest (Article 6(1)(f)) / Pre-contractual steps (Article 6(1)(b)) |
| Providing consultancy and advisory services | Performance of contract (Article 6(1)(b)) |
| Compliance with legal obligations | Legal obligation (Article 6(1)(c)) |
| Marketing communications and newsletters | Consent (Article 6(1)(a)) |
| Website analytics and performance monitoring | Legitimate interest (Article 6(1)(f)) |
| Business development and client relationship management | Legitimate interest (Article 6(1)(f)) |
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Use of Personal Data
We use personal data for the following purposes:
- To provide, deliver and administer our consultancy and advisory services
- To respond to enquiries submitted via our website or by email
- To communicate relevant regulatory updates, compliance alerts or service information
- To personalise your experience on our website
- For business development, client relationship management and internal administration
- For marketing and newsletter communications (where consent has been given)
- To comply with applicable legal, regulatory and professional obligations
- To protect our legitimate business interests and legal rights
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention approach is as follows:
| Data Category | Retention Period |
|---|---|
| Contact form enquiries (no engagement) | 12 months from date of enquiry |
| Client engagement data and communications | 5 years from end of engagement |
| Financial and accounting records | As required by Czech law (minimum 5–10 years) |
| Marketing consent and newsletter subscriptions | Until consent is withdrawn |
| Website analytics data | As configured in Google Analytics (default: 26 months) |
Where retention is required beyond the above periods due to legal or regulatory obligations, data will be retained accordingly and deleted as soon as the obligation ceases to apply.
Cookies and Analytics
7.1 Essential Cookies
Used for core website functionality, session management and security. These cannot be disabled without affecting website performance.
7.2 Analytics Cookies
We use Google Analytics to collect statistical information about how visitors interact with our website. Data is collected in anonymised or pseudonymised form. Google Analytics processes data in accordance with Google’s Privacy Policy. No personally identifiable data is intentionally collected through analytics. IP anonymisation is enabled where available.
7.3 Managing Cookies
You can manage or disable cookie preferences through your browser settings. For more information, see our Cookie Policy.
International Data Transfers
Some of the third-party service providers we use may process personal data outside the European Economic Area (EEA), including in the United States. This may include services such as Google Analytics, email infrastructure and cloud hosting providers.
Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Other lawful transfer mechanisms as available
Further information on the safeguards applicable to specific transfers is available upon request at info@artlexconsult.com.
Embedded Third-Party Content
Our website may include embedded content from third parties (e.g. videos, maps, forms or social media widgets). Embedded content behaves as if the user visited the external site directly. Third parties may collect data, use cookies and track your interactions independently of Artlex Consult. Please refer to the respective privacy policies of those third parties.
Security Measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration, including:
- SSL/HTTPS encryption for all data transmitted via our website
- Restricted access to personal data on a need-to-know basis
- Internal data handling procedures and access controls
- Personal data breach response procedures
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify affected individuals without undue delay.
Your Rights Under GDPR
If you are located in the EU/EEA, you have the following rights in relation to your personal data under the GDPR:
Right of Access (Art. 15)
Request a copy of the personal data we hold about you.
Right to Rectification (Art. 16)
Request correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17)
Request deletion of your personal data in certain circumstances.
Right to Restriction (Art. 18)
Request that we restrict processing of your personal data.
Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format.
Right to Object (Art. 21)
Object to processing based on legitimate interests or direct marketing.
Withdrawal of Consent (Art. 7)
Withdraw consent at any time where processing is consent-based.
Right to Complain (Art. 77)
Lodge a complaint with the Czech supervisory authority (ÚOOÚ) or your local data protection authority.
To exercise any of these rights, please contact us at info@artlexconsult.com. We will respond within one month of receiving your request.
Czech Supervisory Authority: Úřad pro ochranu osobních údajů (ÚOOÚ) — www.uoou.cz
Newsletters and Marketing Communication
We may send newsletters, regulatory updates or service communications where you have provided consent. You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@artlexconsult.com.
Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal, and does not affect our ability to communicate with you for contractual or service-related purposes.
Third-Party Websites and Links
Our website may contain links to external websites operated by third parties. Artlex Consult s.r.o. is not responsible for the privacy practices or content of such websites. We encourage you to review the privacy policies of any third-party websites before submitting personal data to them.
Legal Disclosure of Personal Data
We may disclose personal data where required or permitted by law, including:
- To comply with applicable legal obligations, regulatory requirements or court orders
- In response to lawful requests from public authorities or law enforcement agencies
- To protect our legal rights, prevent fraud or address security matters
- In connection with a business transfer, merger or restructuring, subject to appropriate confidentiality obligations
Where permitted by applicable law, we will endeavour to notify you of any such disclosure in advance.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services or applicable law. Any material changes will be posted on this page with an updated effective date. Where required by law, we will notify you of significant changes directly.
Your continued use of our website following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
Contact Information
For any questions, requests or complaints regarding this Privacy Policy or our data processing practices, please contact us: