Přeskočit na obsah

Privacy Policy

Data controller

The controller of personal data is PackWay s.r.o., registered at Dělnická 390, 533 01 Pardubice, email: info@packway.cz (the “Controller”).

The Controller hereby informs data subjects of the manner and scope of personal data processing in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.

Personal data is processed on the basis of performance of a contract, the Controller’s legitimate interest, compliance with legal obligations and, in some cases, on the basis of consent given.

Scope of personal data processed

The Controller processes in particular the following personal data:

  • first and last name,
  • email address,
  • phone number (if you provide it voluntarily),
  • the content of a message sent via a form,
  • any other data a data subject voluntarily provides as part of an enquiry or other communication.

Legal grounds and purposes of processing

Personal data is processed on the basis of:

  • performance of a contract, or steps taken at the data subject’s request prior to entering into a contract,
  • the Controller’s legitimate interest,
  • compliance with legal obligations,
  • the data subject’s consent, where required.

The purposes of processing are, in particular:

  • handling enquiries submitted through the website’s forms,
  • communication with clients, partners and job applicants,
  • keeping an internal record of contacts,
  • operating, securing and improving the website,
  • marketing communication, only where consent to receive newsletters has been given.

Processors and service providers

The Controller uses the following specific providers to process personal data:

  • Vercel Inc. (USA): website hosting, storage of uploaded CVs (Vercel Blob) and page-load speed measurement (Speed Insights). The application runs on servers in the USA.
  • Sanity.io (Norway, within the EU/EEA): the content management system used to manage the website’s content. Personal data from forms and applications is not stored in it.
  • Resend (USA): sending emails from the website’s forms.
  • Sentry (USA): application error monitoring. Not currently active. Once switched on, it will process technical error logs, which may contain part of a request’s content.
  • Fathom Analytics: measuring website traffic without using cookies. Not currently active.

These processors process personal data only to the extent necessary to provide the services in question, and in accordance with applicable law. If we engage a further processor in future, this list will be updated.

Transfer of personal data outside the EU/EEA

Vercel, Resend and Sentry are based in the USA, i.e. outside the European Union and the European Economic Area. The transfer of personal data to them is covered by standard contractual clauses under Art. 46 GDPR, forming part of their own data processing terms. Sanity.io is based in Norway, within the EEA, so no transfer outside the EU/EEA applies to it.

Retention period

Personal data is retained:

  • for as long as necessary to handle an enquiry and any follow-up communication,
  • for as long as necessary to protect the Controller’s rights,
  • where processed on the basis of consent, until that consent is withdrawn, for no longer than 3 years.

Data subject rights

A data subject has the right to:

  • access their personal data,
  • have it corrected or completed,
  • have it erased,
  • restrict its processing,
  • data portability,
  • lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) (www.uoou.cz).

Last updated: 19 August 2026.