Privacy notice

1 · Controller

The controller within the meaning of Art. 4 no. 7 GDPR is:

Company

Uhlee´S s.r.o.

Address

Rybná 716/24, Staré Město, 110 00 Praha 1, Czech Republic

Represented by

David Uhlig, Tereza Uhlig — each managing director represents the company independently

Identification number (IČO)

21467099

Telephone

+420 603 766 715

Email

info@uhlees.eu

We have not appointed a data protection officer, because no such duty arises. Art. 37 (1) GDPR does not apply: we are not a public authority or body, our core activity is assembly and installation work rather than the monitoring of individuals, and we do not process special categories of data under Art. 9 or data under Art. 10 GDPR as a core activity. § 38 (1) of the German BDSG requires that as a rule at least 20 persons are constantly engaged in the automated processing of personal data; we are below that number. Czech Act No. 110/2019 Coll. extends the duty in § 14 only to bodies established by law performing tasks in the public interest, and sets no threshold for private controllers. Please address data protection enquiries to the contact details above.

2 · Principles

We process personal data only to the extent necessary to provide this website and to deal with your enquiry. This website is a company presentation in the B2B sector. There is no user area, no registration, no ordering process and no profiling.

Regulation (EU) 2016/679 (GDPR) applies to the processing. In addition, Czech Act No. 110/2019 Coll. on the processing of personal data applies, as do the German BDSG and TDDDG where applicable.

3 · Visiting the website and server log files

When you call up this website, your browser transmits technically necessary data which our hosting provider records in server log files. The following are recorded:

• the address called up (URL) and the HTTP status code,
• the date and time of the request,
• the volume of data transferred,
• the browser type and version used, and the operating system,
• the previously visited page (referrer), where transmitted,
• the IP address of the requesting device.

Purpose: delivery of the website, safeguarding system security and stability, and the investigation and prevention of attacks.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically faultless and secure operation of the website.

Retention period: the log files are kept by the hosting provider. WEDOS states a processing period of at most six months for access, error, FTP and mail logs, and deletes or anonymises them at the latest in the following calendar month; the legal basis WEDOS gives is § 97 (3) of Czech Act No. 127/2005 Coll. on electronic communications. This data is not merged with other sources and is not evaluated for analytics purposes.

4 · Hosting

This website is hosted by a service provider which processes the data on our behalf as a processor under Art. 28 GDPR. The server locations are within the European Union.

Hosting provider

WEDOS Internet, a.s., Masarykova 1230, 373 41 Hluboká nad Vltavou, Czech Republic (IČO 28115708)

A data processing agreement under Art. 28 (3) GDPR is in place with the provider.

5 · Enquiry form

5.1 What data we collect

The form on this website allows you to send us a business enquiry. The following is collected:

• name of the contact person,
• company,
• email address,
• telephone number,
• country,
• the services enquired about,
• place of deployment or building site,
• the period requested,
• your message.

Mandatory fields are marked as such. All other fields are voluntary. Please do not use the form to send special categories of personal data within the meaning of Art. 9 GDPR — in particular no health data relating to employees.

5.2 Purpose and legal basis

Purpose: handling and answering your enquiry, assessing the feasibility of the deployment requested, and the subsequent business communication.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest, and equally yours, is to be able to answer a business enquiry addressed to us at all. Where your enquiry is directed at concluding a contract, we additionally base the processing on Art. 6 (1) (b) GDPR (steps taken at your request prior to entering into a contract).

5.3 Why there is no consent checkbox

This form deliberately contains no checkbox consenting to data processing. Consent without which the form could not be submitted would not be freely given within the meaning of Art. 4 no. 11 GDPR and would therefore be invalid. It would also be revocable at any time under Art. 7 (3) GDPR — including in the middle of ongoing contract negotiations — and switching to a different legal basis after the fact is not permissible under the guidelines of the European Data Protection Board (EDPB Guidelines 05/2020).

The processing is therefore lawful without consent: it rests on the legitimate interest in answering your enquiry and, in the pre-contractual case, on Art. 6 (1) (b) GDPR. Your right to object under Art. 21 GDPR is unaffected and is described in section 12.

5.4 How the enquiry is processed technically

The form entries are validated and then delivered by email to our mailbox. No database is created and no copy of the enquiry is stored on the web server. After it is sent, your enquiry exists solely as an email in our mailbox.

6 · Spam protection

The form is protected against automated submissions without any third-party service. No CAPTCHA is used, nothing is loaded from an external server, and no data is passed to a third party.

Measures used: a field that is invisible to you and is normally filled in only by automated programs; a check on the time between opening and submitting the form; and a limit of five submissions per hour from any one sender.

For that limit we process your IP address. It is not stored: it is combined with a secret value known only to us to form a hash from which the address cannot be recovered. Only that hash and a counter are stored, in a temporary file on the web server. It becomes meaningless after an hour and is deleted at the latest when the server restarts.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest lies in preventing spam and automated misuse of the form.

7 · Email delivery

No separate transactional email provider is used. Form enquiries are delivered through the mail servers of the same provider that hosts the website and operates our mailbox; it acts as a processor under Art. 28 GDPR.

Provider of hosting, mail servers and mailbox

WEDOS Internet, a.s., Masarykova 1230, 373 41 Hluboká nad Vltavou, Czech Republic (IČO 28115708)

The data you enter in the form is processed together with the technical metadata of the transmission. The servers and the place of processing are in the Czech Republic, that is within the European Union; no transfer to a third country takes place.

8 · Contact by email, telephone and WhatsApp

If you contact us directly by email or telephone, we process the data arising from that contact (name, contact details, content of the communication) in order to deal with your request. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR in a pre-contractual context.

8.1 WhatsApp contact link

This website contains a click-to-chat link to WhatsApp. It is a plain outbound link: as long as you do not click it, no connection to WhatsApp is established, no content is loaded from WhatsApp and no data is transmitted.

If you click the link, WhatsApp opens on your device or in your browser. From that point on, WhatsApp Ireland Limited is an independent controller for the processing of your connection, usage and communication data; we have no influence over that processing. WhatsApp’s privacy terms apply: whatsapp.com/legal/privacy-policy-eea.

We process the content of a WhatsApp chat conducted with us like any other business communication, on the basis of Art. 6 (1) (f) or (b) GDPR. If you would prefer not to use it, please contact us by email or telephone.

9 · Recipients of the data

Your data is passed on only where this is necessary to fulfil the purposes stated above. The recipients are:

• WEDOS Internet, a.s. — as the provider of the hosting, the mail servers and our email mailbox,
• in individual cases tax advisers, legal advisers or public authorities, where a statutory obligation or a legitimate interest requires it.

Data is not sold. Data is not passed on for advertising purposes.

10 · Retention period

We keep enquiries only for as long as is necessary to deal with the enquiry and any business relationship arising from it. If an enquiry does not lead to an order, we delete the associated correspondence once the matter is closed and no further questions are to be expected — and at the latest once the periods have expired within which claims arising from the matter could be asserted.

If an enquiry leads to a contract, retention is governed by the statutory retention obligations. Commercial and tax retention periods — in particular under the Czech Accounting Act (Act No. 563/1991 Coll.) and the Czech VAT Act, and, where applicable, under §§ 238, 257 HGB and § 147 AO — remain unaffected. During those periods, processing is restricted to storage.

11 · No cookies, no tracking, no consent banner

This website uses no analytics cookies, no marketing cookies and no tracking technologies. There is no audience measurement, no social media plugins are embedded and no advertising networks are contacted. That is also why there is no cookie or consent banner: there is nothing for which consent would need to be obtained.

The only thing stored is your choice between the light and dark appearance, as a single entry in your browser’s “localStorage” (name uhlees-theme, value light or dark), so that the website appears in the appearance you chose on your next visit. Your choice of language is not stored — it is part of the page’s address. This entry is set solely as a result of your own click on the switch, contains no identifier by which you could be recognised, and is not transmitted to our server or to third parties. It is therefore strictly necessary within the meaning of § 25 (2) no. 2 TDDDG for a service you have expressly requested, and requires no consent. You can delete it at any time through your browser settings.

12 · Fonts

The fonts used on this website are stored locally on our server and are delivered together with the page. No connection is made to Google Fonts or to any other font CDN. Your IP address is therefore not transmitted to any third party in order to load the fonts.

13 · Transfers to third countries

No transfer of personal data to countries outside the European Economic Area is intended. We select our service providers specifically so that processing takes place on servers within the EU.

The selection is settled: the sole processor for hosting, mail servers and mailbox is WEDOS Internet, a.s., a Czech company processing on servers in the Czech Republic. No service provider belonging to a group with its head office in a third country is used. In the operation of this website, therefore, no transfer to a third country takes place, and no basis under Art. 45 or Art. 46 GDPR is required. Should that change in future, this notice will be updated before the change takes effect.

14 · Your rights

You have the following rights against us in respect of the personal data concerning you:

Access — Art. 15 GDPR

You can request information as to whether and which data we process about you, for what purposes, to which recipients and for what period, and you can obtain a copy of that data.

Rectification — Art. 16 GDPR

You can request the correction of inaccurate data and the completion of incomplete data.

Erasure — Art. 17 GDPR

You can request the erasure of your data, provided that no statutory retention obligation and no other ground for exclusion stands in the way.

Restriction of processing — Art. 18 GDPR

Under the conditions set out there, you can require us to restrict processing to mere storage.

Data portability — Art. 20 GDPR

Where the processing is based on a contract or on consent and is carried out by automated means, you can request the release of the data you provided in a structured, commonly used and machine-readable format.

Objection — Art. 21 GDPR

You can object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, or the processing serves to establish, exercise or defend legal claims.

An informal message to info@uhlees.eu or to the postal address above is sufficient to exercise these rights. Exercising them is free of charge for you.

15 · Right to lodge a complaint with a supervisory authority

Without prejudice to other remedies, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority.

As a company established in the Czech Republic, the authority responsible for us is the Office for Personal Data Protection:

Úřad pro ochranu osobních údajů (ÚOOÚ)

Pplk. Sochora 27, 170 00 Praha 7, Czech Republic · www.uoou.cz

You may instead contact the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement. In Germany this is the state data protection commissioner of the relevant federal state. An overview of the competent German supervisory authorities is maintained by the Federal Commissioner for Data Protection and Freedom of Information: www.bfdi.bund.de.

16 · Whether provision is required

Providing your data is neither required by law nor by contract. Without the details marked as mandatory fields, however, we cannot deal with your enquiry and cannot reply to you.

17 · No automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

18 · Data security

This website and the form entries are transmitted exclusively in encrypted form via TLS (HTTPS). Beyond that, we take technical and organisational measures under Art. 32 GDPR to protect your data against loss, alteration and unauthorised access.

19 · Changes to this privacy notice

We adapt this privacy notice whenever the legal situation, the services used or our processing operations change. The version published at that time applies to any further visit.

Version date

11 August 2026