Personal Data Processing Policy
This policy describes how BRICK form, s.r.o., ID: 606 99 302, with registered office at U Vlečky 689, 664 42 Modřice, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, Insert 14514 (hereinafter referred to as the "controller"), processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and related legislation.
1. What data we process
Contact form and inquiries
When submitting a contact form or inquiry, we process: name, email address, phone number (if provided) and the content of your message.
Technical data from website visits
When you visit our website, we automatically record IP address, browser type, operating system and information about pages visited. This data is used to ensure the security and functionality of the website.
Billing information
In case of business cooperation, we process data necessary for issuing tax documents in accordance with the law.
2. Why we process data
| Purpose | Legal basis |
|---|---|
| Response to inquiry | Legitimate interest / contract negotiation |
| Order fulfillment and support | Contract performance |
| Accounting and taxes | Legal obligation |
| Website security | Legitimate interest |
| Analytics and measurement (Google Analytics) | Consent |
3. Cookies and measurement
Essential cookies ensure basic website functionality and are always active. Analytical and marketing cookies (e.g. Google Analytics) are activated only with your consent via the cookie banner.
You can change your consent at any time by clicking on the cookies icon in the corner of the screen or in your browser settings.
4. Who has access to the data
We share your data only with essential partners:
- Hosting and email service provider
- Analytics tools (Google Analytics)
- Cookie consent management (CookieYes)
- Accounting and legal advisors
All partners have a contractual obligation to protect your data. In case of data transfer outside the EU, we use standard contractual clauses.
5. How long we retain data
- Inquiries and communication: 12 months from last contact
- Contractual and accounting documents: as required by law (typically 10 years)
- Cookies: according to settings / until consent is withdrawn
6. Your rights
You have the right to:
- Access your data
- Rectification of inaccurate data
- Erasure of data ("right to be forgotten")
- Restriction of processing
- Data portability
- Object to processing
You can withdraw your consent at any time. Send your requests to email [email protected]. We will respond to your request within 30 days.
If you believe that processing violates your rights, you can file a complaint with the Office for Personal Data Protection (www.uoou.cz).
7. Data security
We implement appropriate technical and organizational measures to protect your data: encrypted data transmission (HTTPS), access control, backups and regular security audits.
We do not perform automated decision-making or profiling within the meaning of Article 22 of GDPR.
8. Policy changes
We may update this policy from time to time. The current version is always available on this page. We will inform you of significant changes in an appropriate manner.
9. Contact
If you have any questions regarding personal data processing, please contact us:
Last updated: January 2026