Privacy

What this site stores about you, why, for how long and who gets to see it. Short and specific.

Data Controller

Headers s.r.o.

IČO: 08496919

Radniční 133/1, 370 01 České Budějovice

company registered in the Commercial Register maintained by the Regional Court in České Budějovice, Section C, Insert 28686

info@headers.cz

Processing of Personal Data

Contact form

  • Purpose: answering your message and negotiating cooperation
  • Scope: name, email, optionally company and the message itself
  • Retention: while we negotiate, at most 12 months after the last message; if a contract follows, as the contract and the law require
  • Legal basis: steps prior to entering into a contract and our legitimate interest in answering an inquiry (Art. 6(1)(b) and (f) GDPR)

Traffic measurement

  • Tool: measurement running on our own server (a.headers.cz)
  • Scope: totals about page visits; the tool does not use your IP address to identify you and does not store it in readable form
  • Cookies: none, it stores nothing in your browser, which is why we do not ask permission for it
  • Legal basis: our legitimate interest in knowing how the site is used

Analytics cookies and recording behaviour on the site

  • These are the analytics cookies the notice asks about on a first visit.
  • Tool: an analytics service operated in the European Union; it is named below in the list of processors
  • Purpose: to find where people get stuck on the site and fix it
  • Scope: movement around the page, clicks and the addresses visited; the contents of form fields are masked and never reach the record; the IP address is anonymised
  • Retention: no longer than 12 months from the visit; we will tell you the current setting on request
  • Legal basis: your consent under Art. 6(1)(a) GDPR and § 89(3) of Czech Act No. 127/2005 Coll.
  • You can withdraw consent at any time through the Consent settings link in the footer. Until you give it, nothing is recorded.

Running the site

  • The server records technical request data (IP address, time, page address, browser) for security and troubleshooting
  • Retention: for the limited time needed for security and debugging
  • Legal basis: legitimate interest in running the site securely

Cookies and browser storage

  • hdrs_lang: remembers the chosen language, a technical cookie that needs no consent
  • hdrs_consent: remembers your answer about cookies. It is stored even when you decline - otherwise we would have to ask again on every page load. It is a technical cookie and needs no consent. The same answer also goes into browser storage, because some browsers delete cookies written by a page after a while.
  • Analytics cookies: with your consent only; they store an id in the browser so the tool can tell one visit from another. Without consent nothing is stored.
  • None of them lasts longer than 13 months. The site sets no other cookies.

Who processes the data

We process the data ourselves. These processors hold it for us technically:

Vercel Inc. (USA)

  • Hosting of the site and handling of the form
  • Transfer to the USA is covered by the EU-US Data Privacy Framework and standard contractual clauses

Resend, Inc. (USA)

  • Delivery of form messages to our mailbox
  • Transfer to the USA is covered by standard contractual clauses

Northflank Ltd (United Kingdom)

  • The server our visitor statistics run on
  • The United Kingdom is covered by a European Commission adequacy decision

PostHog, Inc.

  • Analytics cookies and recording behaviour on the site, with your consent only
  • Processing runs on the tool's European instance and the data stays in the European Union; any access from the United States is covered by standard contractual clauses

Rights of Data Subjects

Right of access to data

Right to rectification

Right to erasure

Right to restriction of processing

Right to data portability

Right to object

Right not to be subject to automated decision-making

Right to lodge a complaint with the Office for Personal Data Protection (UOOU)

Final Provisions

For questions regarding the processing of personal data, contact us at:

info@headers.cz

The controller has not appointed a data protection officer

The controller is entitled to amend these terms unilaterally

This policy applies from 23 August 2026 and replaces the version of 21 August 2026