01Introduction
This notice fulfils the information duty of Elvian Technologies s.r.o., the operator of the projects.elvian.cz website and the delivery partner of the Elvian group ("Elvian"). It applies to website visitors, business partners and their contact persons, prospective partners and job applicants.
02Data controller
| Company | Elvian Technologies s.r.o. |
| Registered office | Trojská 248/177, 171 00 Prague 7, Czech Republic |
| Company ID / VAT | 06641288 / CZ06641288 |
| Registration | Commercial Register kept by the Municipal Court in Prague |
| Contact e-mail | info@elvian.cz |
| GDPR e-mail | gdpr@elvian.cz |
| Data Protection Officer | Jana Šmidílková · jana.smidilkova@elvian.cz |
03What data we process
- Contact and identification data of partners — name, position, company, e-mail, phone and the content of our communication.
- Job applicant data — CV and information provided during a recruitment process.
- Website operational data — server logs kept by the hosting provider for security reasons (IP address, time and type of request).
04Website and cookies
The projects.elvian.cz website uses no cookies, no analytics and no marketing tools, and stores no data in your browser. Fonts are loaded from Google Fonts — when the page loads, your IP address is technically transmitted to Google Ireland Ltd. (legitimate interest in consistent rendering). Details on the Cookies page.
05Purposes and legal bases
- Communication and partnership discussions — Art. 6(1)(b) and (f) GDPR.
- Preparation and performance of contracts — Art. 6(1)(b) GDPR.
- Compliance with legal obligations (accounting, archiving) — Art. 6(1)(c) GDPR.
- Legitimate interests — system security, defence of legal claims — Art. 6(1)(f) GDPR.
06Recipients
We share data only to the extent necessary: with professional advisers (auditors, tax advisers, attorneys — always bound by confidentiality), IT and hosting providers bound by Art. 28 GDPR agreements, and public authorities where required by law. We do not sell personal data and do not carry out automated decision-making within the meaning of Art. 22 GDPR.
07Transfers outside the EU/EEA
Personal data is processed primarily within the EU/EEA. Transfers to third countries occur only exceptionally and under Chapter V GDPR — based on an adequacy decision under Art. 45 or standard contractual clauses under Art. 46 GDPR.
08Retention
We keep data for the duration of negotiations and the business relationship; contractual and accounting documents for statutory archiving periods. Data of unsuccessful job applicants is deleted within 6 months of the end of the recruitment process, unless they consent to longer retention.
09Your rights
- Right of access (Art. 15), rectification (Art. 16) and erasure (Art. 17).
- Right to restriction of processing (Art. 18) and data portability (Art. 20).
- Right to object to processing based on legitimate interest (Art. 21).
- Right to withdraw consent (Art. 7(3)) — at any time, without retroactive effect.
- Right to lodge a complaint with the Czech Office for Personal Data Protection — Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
10Security
We apply technical and organisational measures under Art. 32 GDPR — encrypted transmission (HTTPS/TLS), need-to-know access control, backups, confidentiality of employees and subcontractors. Any personal data breach is reported to the supervisory authority within 72 hours under Art. 33 GDPR.