Who is responsible
The controller is G+P Technik s.r.o., Konzumní 92, 252 62 Horoměřice, Czech Republic, company ID 26702541, registered with the Municipal Court in Prague, Section C, File 88397. For privacy questions, contact gptechnik@gptechnik.cz or write to the address above.
Data we may process
The data depend on how you communicate with us and whether you are a business contact. Our company records may contain only information about a legal entity; that information alone is not personal data. If we record a named contact person, we may process:
- name, business role, and company affiliation;
- business telephone number and email address;
- information about business correspondence, meetings, tasks, and follow-up actions;
- a photograph or attachment if an administrator adds one to a record;
- date of birth, only if entered by an administrator. Do not enter it unless there is a specific and legitimate business reason;
- information you send to us by email or give us by phone;
- technical information needed to operate and secure the website, such as request time, IP address, and device or browser data, if processed by the hosting platform.
Why and on what legal basis we use data
We use personal data only for specific purposes:
- responding to an enquiry and preparing or performing a contract, where necessary for steps before a contract or for a contract with the individual;
- managing business relationships with customers, suppliers, and their contact persons, keeping a history of discussions, and planning follow-ups, based on our legitimate interest in proper business communication and cooperation;
- securing the website and administration and preventing misuse, based on our legitimate interest in secure operation;
- meeting legal obligations and establishing, exercising, or defending legal claims;
- publishing business contact details of team members or photographs to present the company and support business communication, on the legal basis applicable to the situation.
Where data come from
We receive data directly from you, from the company you represent, during business discussions, or from publicly available professional sources. Contact details entered in our internal records are not automatically published on the website.
Administration and security
The internal records of companies and contact persons are used to manage customer and supplier relationships and are not publicly accessible. Access to the administration is restricted to an authorised administrator and checked at sign-in. A sign-in identifier may be used only to verify the administrator’s access. Do not enter sensitive information or details that are not needed for business cooperation.
Who may receive data
We share data only as necessary for the purposes above:
- with the provider of the hosted ChatGPT Sites platform and its infrastructure providers for website hosting, database, file storage, maintenance, and security;
- with email and IT service providers used for company communications and operations;
- with public authorities or professional advisers where required by law or necessary to protect legal rights.
Hosting and international processing
The website and its administration run through ChatGPT Sites. OpenAI processes hosted data to host, maintain, and support the website; infrastructure subcontractors may help provide the service. The specific terms, processing locations, and any safeguards for transfers outside the European Economic Area depend on the terms and data processing addendum applicable to the account used. We therefore do not state an unverified country or transfer mechanism here.
- Information about data processing by Sites: https://help.openai.com/en/articles/20001341-chatgpt-sites-how-to-prepare-a-privacy-policy
- OpenAI Sites Data Processing Addendum: https://openai.com/cs-CZ/policies/chatgpt-sites-data-processing-addendum/
- OpenAI sub-processor list: https://openai.com/cs-CZ/policies/sub-processor-list/
How long we keep data
We keep business contacts and records while they are needed for the business relationship, its history, and follow-up communication. We review whether they are still needed and delete or anonymise information that is no longer necessary. Information that must be retained by law is kept for the applicable statutory period. The hosting provider may set retention periods for technical logs.
Your rights
Depending on the circumstances and legal basis, you may request access, correction, or deletion; restriction of processing; object to processing; or request data portability. You may withdraw consent where processing is based on consent. Send requests to gptechnik@gptechnik.cz; we will respond within one month at the latest. You may also complain to the Czech Data Protection Authority: https://uoou.gov.cz/.
Cookies, measurement, and automated decisions
We currently do not use our own analytics or advertising measurement on this website. The platform may use technically necessary mechanisms for basic operation, administrator sign-in, and security. If we start using analytics or advertising tools, we will update this notice and obtain consent before they run where required by law. We do not make automated decisions or profile visitors.
Changes to this notice
We update this notice if our processing, services, or legal requirements change. The current version is always available on this page.