Privacy Policy
01Who we are
The controller of your personal data is QM Consulting s.r.o., with its registered office at Pasířská 3193/39, 466 01 Jablonec nad Nisou, Czech Republic, Company ID (IČO) 25478125, registered in the Commercial Register kept by the Regional Court in Ústí nad Labem, Section C, Insert 19899 (“we”, “us”).
We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Czech Act No. 110/2019 Coll., on the Processing of Personal Data.
02Data we collect
Data you give us
- Enquiries: name, e-mail address, phone number, company, the service and budget you select and the content of your message — when you e-mail or call us or use the project form (which opens your own e-mail app).
- Clients: contact and billing details (name, company, address, Company ID, VAT ID), contract details and project communication.
Data collected automatically
- Server logs: our hosting provider may record your IP address, browser type, requested pages and time of access to keep the website secure and running.
- Browser storage: a single essential entry remembering that you have seen our cookie notice. See the Cookie Policy.
We do not use analytics, advertising or tracking cookies on this website, and we do not knowingly collect special categories of personal data.
03Purposes & legal bases
- Answering your enquiry and preparing a quote — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Delivering our services under a contract with you or your company (Art. 6(1)(b) GDPR).
- Invoicing, accounting and tax records — compliance with legal obligations (Art. 6(1)(c) GDPR).
- Website security, preventing abuse and defending legal claims — our legitimate interests (Art. 6(1)(f) GDPR).
- Occasional news or offers — only with your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).
04How long we keep data
- Enquiries that do not lead to a contract: up to 12 months after our last communication.
- Contract and project data: for the duration of the contract and then for the limitation periods under Czech law.
- Invoices and accounting documents: for the periods required by Czech accounting and tax legislation (generally up to 10 years).
- Server logs: usually no longer than 90 days, unless needed to investigate a security incident.
05Who we share it with
We never sell your data. We only share it with trusted processors who help us run our business and who are bound by confidentiality and data-protection obligations:
- website hosting and e-mail providers (our e-mail is provided by Microsoft);
- accountants, tax and legal advisers;
- subcontractors working on your project, where necessary and under a written agreement;
- Google (Google Fonts) — when you open our website, your browser loads fonts from Google servers, which receive your IP address;
- public authorities, where required by law.
06Transfers outside the EU
Some providers (such as Microsoft or Google) may process data outside the European Economic Area. Such transfers take place only on the basis of an adequacy decision — including the EU–US Data Privacy Framework — or standard contractual clauses approved by the European Commission.
07Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected;
- have your data erased (“right to be forgotten”);
- restrict processing;
- data portability;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To exercise your rights, contact us at pavelzachar2026@outlook.cz. We will respond within one month. You also have the right to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
08Security
We use appropriate technical and organisational measures to protect personal data — including encrypted connections (HTTPS), access control, strong authentication and regular backups. Our website is not directed at children under 16 and we do not knowingly collect their data.
09Changes & contact
We may update this Privacy Policy from time to time. The current version is always available on this page with its effective date.
QM Consulting s.r.o. · Pasířská 3193/39, 466 01 Jablonec nad Nisou, Czech Republic · pavelzachar2026@outlook.cz · +420 735 070 979