GDPR

Personal Data Processing Policy

Effective from 19. 6. 2026

In this policy we explain clearly what personal data we process when you contact us or visit our website, why we process it, for how long, and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and with Act No. 110/2019 Coll., on the Processing of Personal Data.

1. Who is the controller of your data

The controller of personal data is:

For any questions concerning the processing of personal data, you may contact us at any time at the e-mail address provided. We have not appointed a data protection officer (DPO), as this is not required by law for our activity.

2. What data we process

We process only the data you provide to us yourself, namely:

When completing an enquiry form or sending an e-mail: your name and company name, e-mail address, and where applicable your telephone number and the content of your message (a description of the application you are enquiring about).
When visiting the website: technical data about the visit (e.g. IP address, browser type, pages visited) by means of cookies — only if you grant your consent (see Article 6).

We do not process any special categories of personal data (sensitive data). The website is not intended for children and we do not knowingly process the personal data of children.

3. Why we process the data and on what basis

Purpose of processing	Legal basis (GDPR)
Handling your enquiry or question, communication regarding a possible order	Legitimate interest of the controller — Article 6(1)(f), or steps taken to conclude a contract — Article 6(1)(b)
Measuring website traffic and improving the website (analytical cookies)	Your consent — Article 6(1)(a)
Compliance with legal obligations (e.g. archiving of accounting documents, where an order arises from an enquiry)	Compliance with a legal obligation — Article 6(1)(c)

Providing the data is voluntary. However, without your contact details we cannot handle your enquiry.

4. Who has access to the data

We do not sell your data nor pass it to third parties for their marketing. Access to it may be granted only to our processors, who provide services to us and are contractually bound to protect the data:

The website hosting provider (Vercel Inc.) — operation of the website.
The e-mail communication provider — delivery and processing of messages from the form.
Google Ireland Ltd. (Google Analytics / Google Tag Manager) — traffic measurement, only on the basis of your consent.

Some providers may process the data outside the EU (e.g. in the USA). In such a case, the transfer is ensured on the basis of standard contractual clauses approved by the European Commission or another appropriate legal mechanism under the GDPR.

5. How long we retain the data

Data from an enquiry that does not result in cooperation is retained for the period necessary to handle it, for no longer than 12 months from the last communication.
If an order arises from an enquiry, we retain the data for the duration of the contractual relationship and subsequently for the period required by legal regulations (e.g. accounting and tax documents for the period stipulated by law).
Data processed on the basis of consent (cookies) is retained for the period of validity of the consent, but for no longer than the period stipulated for the individual cookies.

6. Cookies

Our website uses necessary technical cookies that are required for it to function. We use analytical and marketing cookies (e.g. Google Analytics) only with your consent, which you grant via the cookie bar on your first visit. You may withdraw or change your consent at any time — either in your browser settings or by reopening the cookie bar. Without your consent we store no analytical or marketing cookies.

7. What rights you have

In relation to your personal data you have the following rights under the GDPR, which you may exercise at the e-mail address otakar.novy@novymachines.cz:

Right of access — to find out what data we process about you.
Right to rectification — to have inaccurate or incomplete data corrected.
Right to erasure (“right to be forgotten”) — to have the data erased where there is no reason for its processing.
Right to restriction of processing — to restrict processing in the cases stipulated by law.
Right to data portability — to obtain your data in a machine-readable format.
Right to object to processing based on legitimate interest.
Right to withdraw consent — to withdraw consent to processing at any time (e.g. for cookies), without affecting the lawfulness of the prior processing.

We will handle your request without undue delay, at the latest within one month.

8. Right to lodge a complaint

If you believe that we are infringing the GDPR by processing your personal data, you have the right to lodge a complaint with the supervisory authority:

9. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, together with the date from which it is effective.