Legal · GDPR · Last updated: 30 September 2026
Privacy Policy
Who processes your personal data on this website, what we collect, why, how long we keep it and what rights you have.
Who we are
The controller of your personal data is ElWebCraft platform s.r.o.
- IČO: 21985863
- Registered office: Čenětická 2413/1a, 149 00 Praha 4 – Chodov, Czech Republic
- Registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 409383
- Email: sales@elementwebcraft.com
- Phone: +420 775 255 567
We have not appointed a Data Protection Officer, as we are not required to. For any question about your data, write to sales@elementwebcraft.com.
Requests through the website form
When you ask for a free estimate or a call, we process:
- your name;
- your email or Telegram username;
- the service you are interested in (website, automation or both), the request type and, for a call, the chosen time;
- your message, if you write one;
- the language of the site and the time of the request;
- your country — we determine it from your IP address using a database stored on our own server. The IP address itself is not stored and is not sent anywhere; we keep only the country code. (IP geolocation by DB-IP, db-ip.com, CC BY 4.0.)
Purpose: to reply to your request, prepare an estimate or arrange the call.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Determining the country is our legitimate interest in routing the request to the right person and language (Art. 6(1)(f) GDPR).
Giving us your name and a contact is necessary — without them we cannot reply. Everything else is optional.
Communication by email, phone and Telegram
If you write or call us directly, we process your contact details and the content of the conversation to answer you and, where relevant, to prepare and fulfil a contract.
Legal basis: steps before entering into a contract and performance of a contract (Art. 6(1)(b) GDPR), and our legitimate interest in keeping business correspondence (Art. 6(1)(f) GDPR).
Who receives the data
We do not sell your data. It is processed only by service providers who work for us under data processing agreements:
- Hetzner Online GmbH, Germany — hosting of the website and the request database;
- Google Ireland Ltd. / Google LLC — business email (Google Workspace), a working spreadsheet with requests (Google Sheets), Google Analytics and Google Ads (Google Ads only with your consent);
- Telegram — notifications about new requests to our team chat;
- Meta Platforms Ireland Ltd. — Meta Pixel, only with your consent;
- Usercentrics A/S (Cookiebot), Denmark — storing your cookie consent.
We may also disclose data where the law requires it, for example to public authorities.
Transfers outside the EU
Our servers are in Germany. Some providers may process data outside the European Union:
- Google and Meta — in the USA, on the basis of the EU–U.S. Data Privacy Framework and the European Commission’s standard contractual clauses;
- Telegram — notifications about a request (name, contact, service and message) pass through Telegram’s servers, which may be located outside the EU.
How long we keep data
- Requests and correspondence — 2 years from our last contact, then we delete them.
- If we sign a contract — for as long as accounting and tax laws require (up to 10 years).
- Cookies — for the time shown in the cookie settings; your consent choice is kept for 12 months.
Your rights
Under the GDPR you have the right to:
- access your personal data and get a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict processing;
- data portability;
- object to processing based on our legitimate interest;
- withdraw your consent at any time;
- lodge a complaint with the supervisory authority — Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.
To use any of these rights, write to sales@elementwebcraft.com. We will reply within one month.
Security
The site works only over an encrypted connection (HTTPS). Access to requests is limited to the people who handle them, and the servers are protected against unauthorised access.
Automated decisions
We do not make decisions about you by automated means only, and we do not create profiles that would have legal or similarly significant effects on you.
Changes to this policy
If we change how we process data, we will update this page and the date at the top.