This draft for the United Kingdom has not yet been reviewed by a lawyer and is not in force. Passages marked TO CONFIRM: … are to be clarified by the operator or by the lawyer.
The controller within the meaning of the UK GDPR and the EU GDPR is Martin Adamec, a sole trader established in the Czech Republic. Address and email are given below. TO CONFIRM: whether a representative in the United Kingdom must be designated under Art. 27 UK GDPR and whether a data protection fee must be paid to the Information Commissioner’s Office.
This notice concerns website visitors, prospects, customers and business contacts. For people whose data are contained in the company database (for example sole traders), the information under Art. 14 UK GDPR applies in addition.
The website is to be run on a virtual server provided by Hostinger; the server is located in Frankfurt am Main, Germany. For delivery and security we process IP address, access time, requested URL and method, status, data volume, transmitted referrer and browser identifier. The legal basis is Art. 6(1)(f) UK GDPR: our interest in a secure and functioning website. Technical logs are kept for no more than 30 days. The connection uses TLS.
Hostinger also makes separate weekly infrastructure backups and replaces older backups according to its backup cycle; deletion in the live service does not mean immediate removal from these backups.
We process the names, company, identifiers (for example VAT number or company number), email, phone, requested market or industry and message you submit, together with the time of sending, IP address, browser identifier and form language. A hidden check field and a time check are used to prevent spam. The legal basis is Art. 6(1)(b) UK GDPR for pre-contractual steps at your request; for company representatives and to prevent abuse, Art. 6(1)(f) UK GDPR. The checkbox confirms that you have read the notice and are making an enquiry, not consent to marketing. The server passes the message to local email software for forwarding to the operator. A backup outside the public web directory is only created if handover fails. No automatic confirmation email is sent. Enquiries that do not lead to a contract are deleted 12 months after the last contact. Section 6 applies to contract documents.
To handle rights requests we process company and identification details, the data concerned, reply address, message and the form data mentioned, under Art. 6(1)(c) UK GDPR. Minimal suppression identifiers may prevent renewed inclusion under Art. 6(1)(f) UK GDPR. Correspondence is kept only as long as needed to handle and evidence the request, legal obligations or legal claims.
Customer identity, business contacts, order, invoice and payment data are used to perform the contract (Art. 6(1)(b) UK GDPR), to meet legal obligations (point c) and for communication with representatives and legal claims (point f). Contract and accounting records are kept for the statutory periods.
This website currently sets no analytics or advertising cookies and loads no Google services or content from other providers. Fonts are loaded from our own server. Only the storage technically required to deliver the pages and submit the form is used.
If audience measurement is used in future, it will only be after your active consent where the law requires it (Art. 6(1)(a) UK GDPR, regulation 6 PECR and its Schedule A1), and this notice will be updated first.
Where necessary, hosting, email and IT providers under the applicable safeguards, banks, accountants and professional advisers and competent authorities may receive data. Details from enquiries are not supplied to customers as a database product.
The controller and the server are in the European Economic Area. Transfers from the United Kingdom to the EEA and access or transfers outside the EEA require a legal basis and a mechanism under Chapter V UK GDPR or Chapter V GDPR, such as adequacy regulations or decisions or appropriate safeguards. You can request information about this using our contact details. TO CONFIRM: current UK adequacy regulations for the EEA and EU adequacy decision for the UK.
Making an enquiry is voluntary. Marked fields are required to process the form; alternatively you can email us. Decisions with legal or similarly significant effects are not taken solely by automated means.
Subject to the legal requirements, you have the right of access, rectification, erasure, restriction and data portability. Consent can be withdrawn where processing is based on it; the lawfulness of earlier processing remains unaffected. You can object to processing based on legitimate interests on grounds relating to your particular situation, and to direct marketing at any time without giving reasons (Art. 21 UK GDPR). We generally reply within one month.
You can lodge a complaint with a supervisory authority (Art. 77 UK GDPR). In the United Kingdom this is the Information Commissioner’s Office (ico.org.uk). For the controller’s seat, the Czech Office for Personal Data Protection (uoou.gov.cz) is competent. TO CONFIRM: ICO complaints page address and whether a complaint to the controller must come first.
You can send privacy questions and data subject requests directly to the controller using the contact details below. No representative and no particular wording are required. TO CONFIRM: whether a data protection officer must be designated (Art. 37 UK GDPR).
This notice describes the current service and is updated when processing changes significantly. The version date is shown above.
Martin Adamec
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
IČO: 19552319
info@firmdat.co.uk
Legal notice · Terms · Information under Art. 14 UK GDPR · Opt out · Data sources and methodology
