Privacy policy

1. Controller

The controller is Filip Důbrava, trading as ClearAccess, Company ID (IČO) 24646687, registered address Habánov 979/6, 691 45 Podivín, Czech Republic, a sole trader registered in the Czech Trade Register, not registered for VAT (“ClearAccess”). Contact for anything related to personal data: info@clearaccess.cz.

We are not required to appoint a data protection officer.

2. When we collect data

• when you send an enquiry through the contact form,
• when you email us,
• when you book a consultation through Microsoft Bookings,
• when you discuss or enter into a contract with us.

3. What data

Contact form: full name, company and email (required), company ID and registered address, phone, number of employees and your message (optional). When you search in the Company field, the ID or part of the name you type is sent via our server to the public ARES register of the Czech Ministry of Finance; this query is not stored either. The form only sends your enquiry by email to our mailbox; nothing is stored on the website.

Email: your name, email address and whatever you choose to write (for example your company or a signature with a phone number).

Booking: name, email and, if you choose, phone and a note entered in the Microsoft Bookings form. Only what is needed to reach you is required.

Information you send us yourself. Please don’t send us passwords, credentials or special categories of personal data (such as health data).

4. Purpose and legal basis

• Answering your enquiry and pre-contract steps: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Where you act on behalf of a company, the legal basis is our legitimate interest in replying to you and dealing with your company (Art. 6(1)(f) GDPR).
• Performing a contract: if we work together (Art. 6(1)(b) GDPR).
• Legal obligations: for example tax records (Art. 6(1)(c) GDPR).
• Website operation and security: the technical data described in section 7 (legitimate interest, Art. 6(1)(f) GDPR).

We don’t use your data for marketing or newsletters, we don’t sell it, and there is no automated decision-making or profiling.

5. How long we keep data

• enquiries and correspondence that don’t lead to an engagement: no longer than 2 years after the last contact,
• contract-related data: for the duration of the engagement and then for the period required by law (in particular tax law) or needed to protect our legal claims,
• technical website data: briefly, as needed for operation and security (see section 7).

6. Who works with the data

• members of the ClearAccess team who handle your enquiry; all are bound by confidentiality,
• Microsoft Ireland Operations Limited as processor: Microsoft 365 (email, documents, bookings via Microsoft Bookings) and Microsoft Azure (website hosting and sending the contact form),
• public authorities where required by law.

We never sell data or share it for others’ own purposes.

7. Technical data when you visit

When a page loads, the hosting provider’s server necessarily processes technical data such as your IP address, request time and browser type. This is used only to deliver the page and protect against attacks. We don’t use it to identify you or combine it with other data.

The website uses no cookies, analytics or third-party tools, and loads fonts from its own server. See the cookie policy.

8. Transfers outside the EU

Microsoft processes Microsoft 365 and Azure data for EU customers primarily within the European Union. Any transfer outside the European Economic Area relies on safeguards under Chapter V GDPR, in particular the European Commission’s standard contractual clauses.

9. Your rights

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16) and erasure (Art. 17),
• right to restriction (Art. 18) and data portability (Art. 20),
• right to object to processing based on legitimate interest (Art. 21).

Just email info@clearaccess.cz. We reply without undue delay and within one month at the latest. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

10. Changes

We may update this policy, for example when we add a website feature. The current version is always on this page with its effective date.