Privacy policy and personal data processing
If you are our client or a visitor to this website, you entrust us with your personal data. We are responsible for protecting and securing it. Please read through how we protect personal data, the principles we follow and the rights you have under the GDPR (General Data Protection Regulation).
Who is the controller?
The controller of your personal data is Unframed production s.r.o., Company ID: 23915978, with its registered office at Vranovská 516/68, 614 00 Brno, Czech Republic. We process your personal data as the controller, meaning we determine how and for what purpose personal data is processed, for how long, and we select any additional processors who help us with the processing.
Contact details
If you want to get in touch with us during the processing, you can reach us by email at: info@unframed.cz
Our declaration
We declare that as the controller of your personal data we meet all statutory obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that:
- we will process your personal data only on a valid legal basis, primarily legitimate interest, performance of a contract, a legal obligation or the consent you have given,
- we fulfil our duty to inform under Article 13 of the GDPR before the processing of personal data begins,
- we will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and the GDPR.
Scope of personal data and purposes of processing
We process your personal data when you submit the contact form, within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the “Regulation”).
When you submit the contact form, we process the following personal data:
- Email address
- Name
- Message text
This personal data needs to be processed in order to answer the enquiry you have raised. Such processing is permitted by Article 6(1)(b) of the Regulation.
If you allow functional cookies in the cookie settings, we play YouTube videos on the website in privacy-enhanced mode (youtube-nocookie.com). When a video plays, Google receives your IP address and information about your device and browser. The legal basis is your consent under Article 6(1)(a) of the Regulation, which you can withdraw at any time in the cookie settings.
Retention period
We keep data from the contact form for as long as needed to handle your enquiry, and no longer than 1 year after our last communication. If the enquiry leads to a contract, we keep the data for the duration of the contract and then for the period required by law (e.g. accounting and tax rules). We remember your cookie choice for 6 months.
Processors and recipients
- Web3Forms (Web3Creative) – delivering contact form messages to our email.
- Vercel Inc. – website hosting (processes IP addresses and technical visit data).
- WEDOS Internet, a.s. – email hosting, data stored in the Czech Republic.
- Google Ireland Limited (YouTube) – video playback, only with your consent.
Transfers of data outside the European Union
Web3Forms processes contact form data on servers in the USA. Vercel, as a US company, may process technical visit data in the USA. Google may transfer data related to video playback to the USA. Transfers to the USA are based on the European Commission's adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
Security and protection of personal data
We protect personal data to the greatest extent possible using modern technologies that reflect the current state of the art. We protect it as if it were our own. We have adopted and maintain all possible (currently known) technical and organisational measures that prevent the misuse, damage or destruction of your personal data.
Your rights regarding the protection of personal data
You have a number of rights when it comes to the protection of personal data. If you wish to exercise any of them, please contact us by email at: info@unframed.cz. Thanks to the right of access, you can ask us at any time and within 10 working days we will document which of your personal data we process and why.
If something changes on your side, or you find your personal data out of date or incomplete, you have the right to have it completed and corrected. You can exercise the right to restriction of processing if you believe we process inaccurate data about you, believe our processing is unlawful but do not want all the data erased, or if you have objected to the processing. You can restrict the scope of the personal data or the purposes of processing. You can withdraw your consent at any time without affecting the lawfulness of processing before its withdrawal.
Right to data portability
If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as with the right of access — the only difference being that we will provide the information in a machine-readable format. For this we need at least 10 days.
Right to erasure (to be forgotten)
Another of your rights is the right to erasure (to be forgotten). We do not want to forget about you, but if that is your wish, you have every right to it. In that case we will erase your personal data from our systems (in particular our mailbox) without undue delay, and within 1 month at the latest. Data in backups and in our processors' systems will be removed within their regular deletion periods. In some cases we are bound by a legal obligation and, for example, must keep records of issued tax documents for the period set by law. In such a case we will erase all personal data that is not bound by another law. We will inform you by email once the erasure is complete.
Complaint to the Data Protection Authority
If you feel that we do not handle your data in accordance with the law, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.gov.cz) at any time. We would be very glad if you told us about your concern first, so that we can do something about it and put right any shortcoming.
Confidentiality
We would like to assure you that our employees and collaborators who process your personal data are obliged to maintain confidentiality about the personal data and about the security measures whose disclosure would compromise the security of your personal data. This confidentiality continues even after our contractual relationships end. Apart from the processors listed above, your personal data will not be passed to any other third party without your consent.
This privacy policy is effective from 18 October 2026.
