We collect as little about you as possible on this website. There is no registration, no forms and no newsletter. We mainly process personal data when you write to us, and for measuring traffic if you consent to it.
This is a translation for convenience. In case of any discrepancy, the Czech version prevails.
01Who is the controller
The controller of your personal data is Nexus9 Digital s.r.o., Company ID (IČO) 29788277, with its registered office at U Zahradního města 3191/2b, Záběhlice, 106 00 Prague 10, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 452423 (“we”).
For anything related to data protection, contact us by e-mail at info@nexus9digital.cz or by post at our registered office. We have not appointed a Data Protection Officer, as we are not required to.
02What data we process and why
E-mail communication
When you write to us (for example via the “Discuss a project” button), we process your e-mail address, name, and possibly your company name and phone number, together with the content of your message and any information you choose to share with us.
- Purpose: answering your enquiry, preparing a quote and discussing a possible collaboration.
- Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). For general enquiries, our legitimate interest in being able to reply (Art. 6(1)(f) GDPR).
- Retention: while we handle your enquiry and then for up to 3 years after our last communication, so that we can follow up. If we enter into a contract, retention is governed by the contract and statutory periods (e.g. accounting and tax).
Server logs
Each time you visit the site, the server records technical details of the request: IP address, date and time, the requested URL, the response status code and browser identification (user agent).
- Purpose: keeping the website running and secure, detecting and resolving errors and attacks.
- Legal basis: our legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR).
- Retention: no longer than 30 days, unless we need a record for longer to deal with a specific security incident.
Traffic measurement (Google Analytics)
If you consent in the cookie banner, we use Google Analytics 4. It tells us how many people visit the site, where they come from and how they use it. This involves online identifiers (cookies), approximate location derived from your IP address, information about your device and browser, and how you navigate the site. Google Analytics 4 does not store IP addresses. Advertising features and ad personalisation are turned off.
- Purpose: traffic statistics and improving the website.
- Legal basis: your consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll., on Electronic Communications).
- Retention: we keep data in Google Analytics for 14 months. For cookies in your browser, see the table below.
Without your consent, Google Analytics is not loaded at all. You can withdraw your consent at any time via the “Cookie settings” link in the footer. Withdrawal does not affect processing carried out before it.
03Cookies and similar technologies
Cookies are small files that a website stores in your browser. We only use the following:
| Name | Purpose | Type | Expiry |
|---|---|---|---|
n9_lang | Remembers the language you chose in the CZ / EN switcher. | Essential, no consent | 1 year |
n9_consent_v1 | Stores your choice in the cookie banner (browser local storage). | Essential, no consent | until deleted |
_ga | Google Analytics: distinguishes individual visitors. | Analytics, with consent | 2 years |
_ga_<ID> | Google Analytics: keeps the session state. | Analytics, with consent | 2 years |
You can also delete or block cookies at any time in your browser settings. Fonts and all other files of this site are served from our own server, so nothing is loaded from third parties during normal browsing.
04Who we share data with
We do not sell personal data or pass it on to anyone for their own purposes. It is handled only by the following processors, who provide services to us and are contractually bound to protect it:
- our server infrastructure provider, where the website is hosted (server logs),
- our e-mail service provider (e-mail communication),
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, only if you have consented to Google Analytics.
We may also disclose data to public authorities where required by law.
05Transfers outside the EU
As part of Google Analytics, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission has found to ensure an adequate level of protection. Otherwise, we do not transfer data outside the European Economic Area.
06Your rights
In relation to the processing of your personal data, you have the right to:
- access your data, i.e. find out what data we hold about you and receive a copy,
- rectification of inaccurate or incomplete data,
- erasure, where the data is no longer needed or its processing is not lawful,
- restriction of processing,
- data portability for data you have provided to us,
- object to processing based on legitimate interest,
- withdraw consent at any time, where processing is based on consent.
You can exercise your rights by e-mail at info@nexus9digital.cz. We will reply without undue delay and within one month at the latest.
If you believe we are not handling your data properly, you can lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the supervisory authority in your EU country of residence. We would appreciate it if you contacted us first so that we can try to resolve it.
07Further information
Providing personal data is voluntary. Without your e-mail address, however, we cannot reply to you. We do not carry out automated decision-making or profiling with legal effects.
We protect data with appropriate technical and organisational measures, including encrypted connections (HTTPS) and access limited to authorised persons.
We may update this policy from time to time. The current version is always available on this page, with its effective date shown at the top.