Privacy Policy

Effective from 18 March 2026

1. Who is the data controller

The controller of your personal data is:

As the controller, we decide what personal data we collect, how we use it and how long we retain it. We are responsible for its secure processing in accordance with the GDPR (EU Regulation 2016/679).

2. What data we process and why

On netajo.cz we process personal data in two situations:

A) Contact form

When you write to us through the contact form, you provide: your name, company name, email address, phone number and a description of your project. We use this data exclusively to contact you and respond to your enquiry or request. Without this information we would not be able to reply.

B) Google Fonts

The website uses the Google Fonts service to load typefaces. When you first visit the page your browser contacts Google's servers, which technically involves transferring your IP address. This happens automatically and is solely for the purpose of displaying the website correctly. If you object, you can decline Google Fonts in the cookie banner — the site will display using a fallback system font.

3. Legal basis for processing

• Contact form: Processing is necessary for steps taken prior to entering into a contract (Art. 6(1)(b) GDPR), or based on our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR).
• Google Fonts: Processing is based on our legitimate interest in the proper technical functioning of the website (Art. 6(1)(f) GDPR), or based on your consent given in the cookie banner.

4. How long we retain your data

• Contact form: Messages and contact details are retained for as long as necessary to handle your enquiry, typically up to 12 months from the last communication. If the enquiry leads to a business relationship, we follow the statutory archiving periods (generally 10 years for accounting documents).
• Google Fonts: The IP address is processed only for the duration of the page load. Google may have its own data retention policies — see Google's Privacy Policy.

5. Who we share your data with

We do not sell or provide your personal data to third parties for marketing purposes. Data may be shared only in the following cases:

• Google LLC — in connection with the technical operation of Google Fonts (IP address). Google is based in the USA; the transfer is covered by EU Standard Contractual Clauses.
• Processors — potential IT infrastructure and email service providers, who are bound by a data processing agreement and may not use the data for their own purposes.

We do not transfer your data to countries outside the EU/EEA, with the exception of Google Fonts (see above), where the transfer is safeguarded by Standard Contractual Clauses.

6. Your rights

Under the GDPR you have the following rights — and we are obliged to respect them:

• Right of access: You can request confirmation at any time as to whether we are processing your personal data, and if so, a copy of that data.
• Right to rectification: If your data is inaccurate or incomplete, we will correct it.
• Right to erasure ("right to be forgotten"): You can request deletion of your data. We will comply unless there is a legal obligation to retain it further.
• Right to restriction of processing: In certain situations (e.g. you dispute the accuracy of the data) you can ask us to temporarily stop processing it.
• Right to data portability: Data you have provided to us on the basis of consent or a contract will be provided to you in a machine-readable format.
• Right to object: Where we process your data on the basis of legitimate interest, you may object. We will then stop processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent: If you have given consent (e.g. in the cookie banner), you may withdraw it at any time — without affecting the lawfulness of processing carried out prior to the withdrawal.

7. How to exercise your rights

Send us an email at kancelar@netajo.cz. Include "GDPR" in the subject line and describe your request. We will respond within 30 days (in more complex cases within 90 days — we will notify you in advance of any extension).

We will handle your request free of charge. Only in the case of manifestly unfounded or repetitive requests do we reserve the right to charge a reasonable fee.

8. Supervisory authority

If you believe we are processing your personal data in breach of applicable law, you have the right to lodge a complaint with the supervisory authority:

We recommend contacting us directly first — most situations can be resolved faster and without formal proceedings.

---

This document was last updated on 18 March 2026. We reserve the right to update this policy — the current version is always available on this page.