Data controller
The controller is Touch Trade s.r.o., Company ID: 05802130, VAT ID: CZ05802130, registered office at Jaurisova 515/4, 140 00 Prague 4, Czech Republic.
Privacy enquiries: info@touchtrade.cz. The company has not appointed a data protection officer.
Data we process
Depending on how you contact us, we may process:
- name, e-mail, phone number and company name;
- message content, selected service and subsequent business communication;
- technical data required to secure the form, such as IP address, request time and Turnstile verification result;
- data connected with a contractual relationship and legal obligations.
Purposes and legal bases
We process data only for specific legitimate purposes:
- handling enquiries and taking steps before entering into a contract – Article 6(1)(b) GDPR;
- processing based on consent where requested – Article 6(1)(a) GDPR;
- compliance with accounting, tax and other legal obligations – Article 6(1)(c) GDPR;
- website security, abuse prevention and legal claims – our legitimate interests under Article 6(1)(f) GDPR.
Voluntary provision and consent
Providing data is voluntary, but we cannot handle an enquiry without the required fields. Consent may be withdrawn at any time via info@touchtrade.cz without affecting prior lawful processing.
We do not use contact details for marketing without a separate legal basis or consent.
Retention
Unsuccessful enquiries are generally retained for no longer than 12 months after the last communication. If a contract is concluded, data is retained for its duration and for periods required by law or necessary to protect legal claims. Consent-based data is retained until consent is withdrawn unless another legal basis applies.
Recipients and processors
Authorised staff and verified IT, hosting, e-mail and security providers may access data where necessary. We use Figma/Payload for this website, Resend for e-mail delivery and Cloudflare Turnstile for form protection.
Data may be disclosed to public authorities where required by law. We do not sell personal data.
Transfers outside the EEA
Some technology providers may process data outside the EEA. Transfers take place only under GDPR safeguards, such as an adequacy decision, standard contractual clauses or another lawful mechanism.
Security and automated decisions
We use appropriate technical and organisational safeguards, encrypted transmission, access controls and anti-spam protection. We do not use automated individual decision-making or profiling with legal or similarly significant effects.
Your rights
Subject to GDPR conditions, you may:
- access your data and obtain a copy;
- request correction or completion;
- request erasure or restriction;
- object to processing based on legitimate interests;
- request portability and withdraw consent;
- lodge a complaint with the Czech Office for Personal Data Protection, www.uoou.cz, or your local supervisory authority.
Exercising rights and updates
Contact info@touchtrade.cz to exercise your rights. We may reasonably verify your identity. We may update this document when our services or legal requirements change; the current version is always published here.