Privacy Notice

The controller of your personal data is Legat Trade, s.r.o., registered office at Husova 772/2, Fryštát, 733 01 Karviná, Czech Republic, Company ID (IČO) 27770494, VAT ID CZ27770494, registered in the Commercial Register maintained by the Regional Court in Ostrava, Section C, Insert 51357.

Contact: lech.gattnar@legattrade.eu, tel. +420 596 325 680.

We have not appointed a Data Protection Officer, as this is not required for our activities. Please direct all data protection questions to the contact above.

Enquiries via the contact form, email or phone

When handling an enquiry, we process your name, company name, email address, phone number and the content of your message, plus any other information you share with us by email or phone. We use this data to answer your enquiry, discuss potential business cooperation and follow up.

Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in handling and keeping records of business communications (Article 6(1)(f) GDPR). Our legitimate interest is routine communication with business contacts and keeping a record of how discussions progressed.

Contracts and business administration

If we enter into a contract or business cooperation with you or the company you represent, we process identification and contact details, details of who is authorised to represent the company, business correspondence and the information needed to conclude and perform the contract, issue invoices and protect our contractual rights.

Legal basis: performance of a contract and steps prior to entering into it (Article 6(1)(b) GDPR), compliance with legal obligations, in particular accounting and tax obligations (Article 6(1)(c) GDPR), and our legitimate interest in protecting and enforcing legal claims (Article 6(1)(f) GDPR).

Website operation and security

When you visit the website, the hosting provider automatically processes technical data: IP address, time of request, requested page URL, browser type, and error and security logs. To protect the contact form from abuse, we briefly hold the sender's IP address in server memory (for no more than 10 minutes) and limit the number of submissions from a single address.

Legal basis: our legitimate interest in secure and reliable website operation and protection against spam and attacks (Article 6(1)(f) GDPR).

The website does not use analytics, advertising or marketing tools, social media plugins or content loaded from third-party servers.

Providing data in the form is voluntary. Without the required fields (name, email, message) we cannot reply to you. Data needed to conclude and perform a contract or to meet legal obligations is required to the extent dictated by the nature of the contractual relationship or by law.

• Enquiries that did not lead to cooperation: 2 years from the last communication, after which we delete them.
• Contracts and business correspondence: for the duration of the cooperation and 4 years after it ends (the general limitation period plus a margin for asserting claims).
• Accounting and tax records: 10 years from the end of the year in which the document was issued, as required by the Czech VAT Act and Accounting Act.
• Technical website logs: no more than 30 days, according to the hosting provider's settings; IP address for form protection: no more than 10 minutes.
• Records of form message delivery held by the email delivery provider: no more than 30 days.
• Mailbox backups: data may remain in the provider's backups until they are overwritten in the regular backup cycle.

Access to your data is limited to authorised company staff, to the extent necessary, and to the following processors, who process data only on our instructions and under a data processing agreement:

• Vercel Inc., USA — website hosting and operation (content is served from servers in the EU);
• Resend, Inc., USA — technical delivery of contact form messages to our mailbox;
• Websupport (Websupport / Active24 group), EU — domain and mailbox services;
• external providers of accounting, tax, IT and legal services, where necessary for the given purpose.

We also disclose data to public authorities where required by law. We do not sell your data or share it with third parties for their own marketing.

Vercel Inc. and Resend, Inc. are based in the USA and may also process data there. Both are certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR). In addition, their data processing agreements include the Standard Contractual Clauses approved by the European Commission (Article 46 GDPR).

The website uses a single cookie, which is necessary for it to work:

• NEXT_LOCALE — stores your selected language version; a first-party cookie that expires when you close your browser, contains no personal data and is not shared with anyone.

Under Section 89(3) of the Czech Electronic Communications Act, strictly necessary cookies may be used without consent, so the website does not display a consent banner. We do not use analytics, advertising or any other non-essential cookies. You can delete or block cookies in your browser settings at any time; the website will still work without them.

Under the conditions set out in the GDPR, you have the right:

• to access your personal data and obtain a copy;
• to have inaccurate data corrected or incomplete data completed;
• to erasure, where the GDPR conditions are met;
• to restriction of processing;
• to object to processing based on legitimate interest;
• to data portability for data you have provided to us, in a structured, machine-readable format;
• to lodge a complaint with a supervisory authority.

You can exercise your rights by email at lech.gattnar@legattrade.eu or in writing to our registered office. We may ask for additional information to verify your identity. We will respond without undue delay and within one month at the latest.

The supervisory authority in the Czech Republic is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, https://uoou.gov.cz. You may also lodge a complaint with the supervisory authority in the EU state where you habitually reside or work.

We do not carry out automated individual decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

We update this notice when our processing of personal data or the legal requirements change. The current version is always published at legattrade.eu.