Privacy policy
Who processes your data
The controller is [to fill], company ID (IČO) [to fill], registered office [to fill], registered in the Commercial Register kept by [to fill], file no. [to fill] ("Valoria Webworks"). Contact: inquiry@valoriahq.com. We process personal data under Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR").
What we process and why
| When | Data | Purpose | Legal basis | How long |
|---|---|---|---|---|
| You send an inquiry by form or email | name, email, company, message | replying and preparing an offer | Art. 6(1)(b) GDPR (steps before a contract, at your request); for general questions Art. 6(1)(f) (legitimate interest in replying) | at most 2 months after last contact; if we sign a contract, as long as accounting and tax law requires (Art. 6(1)(c) GDPR) |
| You visit the site | IP address, browser data, pages requested | delivering the site and protecting it from attacks | Art. 6(1)(f) GDPR (legitimate interest in secure operation) | as long as security requires, under Cloudflare's terms |
| We measure visits | aggregate visit data, no cookies, no identification of individuals | learning which pages work | Art. 6(1)(f) GDPR | aggregate statistics with no personal data, kept indefinitely |
Inquiries sent through the form are also saved in our internal database (Cloudflare D1, data stored in the EU), where we handle them. Only the two founders can open it, after signing in with their work email, and each inquiry is deleted from it automatically after 60 days.
To protect the form from spam, we count submissions per IP address. We never store the IP address itself, only a one-way hash that deletes itself after 10 minutes.
We don't sell your data or use it for advertising, and we don't make automated decisions about you or profile you.
Recipients and processors
- Cloudflare, Inc. (USA), processor: hosting, security, visit measurement and the internal inquiry database (stored in the EU). The site is hosted in Cloudflare's EU data centres. For any transfer to the US, Cloudflare relies on the EU–US Data Privacy Framework and Standard Contractual Clauses (Cloudflare GDPR).
- Google Ireland Limited, processor: the mailbox that receives inquiries (Google Workspace).
- Brevo (France), processor: delivers your inquiry to our inbox and sends you the confirmation. It stores data on servers in the EU (Brevo data location).
Cookies
The site sets no advertising or analytics cookies. Cloudflare may set strictly necessary security cookies (such as __cf_bm) that tell people from bots (Cloudflare's cookie list). These need no consent under Czech law (§ 89(3) of Act No. 127/2005 Coll., on Electronic Communications).
Your rights
You can ask for access to your data, correction, erasure, restriction and portability, and you can object to processing based on legitimate interest. Email inquiry@valoriahq.com. You can also complain to the Czech data protection authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Prague 7, uoou.gov.cz.
Effective from [to fill].