Privacy policy

This policy describes what personal data we process in connection with the website webspen.com, and why. It is written to describe what this site actually does — nothing more, nothing less.

1. Data controller

The controller of personal data is:

Webspen s.r.o. Otakarova 1364/45, České Budějovice 3, 370 01 České Budějovice, Czech Republic Company number (IČO): 21504504 Registered in the Commercial Register kept by the Regional Court in České Budějovice, section C, insert 34176 Email: [email protected]

We have not appointed a data protection officer, as we are not required to. For any data protection matter, contact us at the email address above.

2. What we collect

From the contact form, we process only what you type into it:

• your name,
• your email address,
• your company name (optional),
• the text of your message.

For spam protection, your IP address is passed to Cloudflare Turnstile, which verifies that the form is not being submitted by a bot. We do not store the IP address ourselves.

This site has no registration and no user accounts. We do not sell goods online, we do not process payments, and we collect nothing beyond the above.

3. Why we process it

Purpose	Legal basis
Answering your enquiry and any pre-contractual negotiation	Steps at your request prior to entering a contract — Art. 6(1)(b) GDPR
Protecting the form against spam and abuse	Legitimate interest — Art. 6(1)(f) GDPR

We do not use your data for profiling or automated decision-making, and we do not pass it to anyone for marketing purposes.

4. Processors

Only these processors are involved:

• Cloudflare, Inc. — hosting of this site, spam protection (Turnstile), and cookieless traffic analytics.
• Resend — delivery of your contact form message to our mailbox.

Both may process data outside the European Economic Area. Where they do, transfers are governed by the Standard Contractual Clauses approved by the European Commission.

We use no other processors. We do not sell your data.

5. Cookies

This site stores exactly one cookie:

Name	Contents	Lifetime	Purpose
wsp_lang	cs or en	1 year	Remembers the language you picked with the switcher.

wsp_lang is written only when you actively use the language switcher. It is a strictly necessary functional cookie and does not require consent.

We use no advertising or tracking cookies. Our traffic analytics (Cloudflare Web Analytics) work without cookies and without cross-site tracking. That is why this site has no cookie banner — there is nothing to consent to.

6. Retention

We keep contact form messages for 3 years from our last communication with you, then delete them. If an enquiry leads to a contract, related records are retained for the periods required by law (in particular accounting and tax legislation).

7. Your rights

In relation to your personal data, you have the right to:

• access the data we hold about you,
• have inaccurate or incomplete data corrected,
• erasure (the “right to be forgotten”),
• restriction of processing,
• data portability,
• object to processing based on legitimate interest.

Exercise any of these by emailing [email protected]. We respond within one month at the latest.

You also have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz.

8. Changes to this policy

We may update this policy if the way the site works changes. The current version is always available at this address and carries its last-updated date in the header.