1. Who controls your data

The controller is FIRMIN s.r.o., IČ 28862961, registered seat Slavojova 579/9, 128 00 Praha 2; office for meetings: V Zářezu 902/4, Praha 5 – Jinonice. Contact: info@firmin.cz, (+420) 211 221 890.

2. Data, purposes and legal bases

For enquiries we process your name, e-mail, phone number and message to answer you and prepare a contract. For reservations and orders we also process service parameters, prices, notes and the unguessable order access token to conclude and perform the contract and secure access. For buyers, managing directors, shareholders, officers and proxy holders we process identification, birth, address, citizenship, role and ownership data needed for contracts, notarial deeds and register filings. References are published only with consent. Google Tag Manager loads with consent denied by default; analytics cookies and full Google Analytics 4 measurement are enabled only after consent.

As a person obliged under Act No. 253/2008 Coll., we identify clients and, where required, verify the purpose of the transaction and beneficial owner. The legal bases are performance of a contract, compliance with legal obligations, legitimate interests in communication, security and legal claims, and consent for references and analytics.

3. Identity documents and AML retention

We may process identity-document details and copies, powers of attorney, contracts and supporting documents. AML records must be retained for at least 10 years after the relationship or transaction and may then be kept as long as necessary to establish, exercise or defend legal claims. Documents are never sent by ordinary e-mail; they are uploaded to secured storage, access is limited to authorised staff and every access is logged.

4. Recipients

Data is disclosed only where necessary to hosting and storage providers, ZeptoMail by Zoho, Google Analytics 4 and Google Tag Manager in Consent Mode, notaries, registry courts and public authorities such as the Financial Analytical Office. Analytics cookies and full analytics measurement are enabled only after consent. Processors are bound by data-processing agreements.

5. Transfers outside the EU

Google and, where applicable, Zoho may process data outside the EU/EEA. Transfers rely on European Commission standard contractual clauses or an adequacy decision; Google LLC participates in the EU-US Data Privacy Framework.

6. Retention periods

AML and identity records are retained for at least 10 years and then for necessary legal claims. Contractual and accounting records follow statutory periods; order data is kept during performance and for the defence of claims; enquiries without a contract only as long as necessary; references until consent is withdrawn; analytics cookies for the consent and cookie lifetime stated in the Cookie Policy.

7. Your rights

You may request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, withdraw consent and lodge a complaint. Deletion does not apply where retention is required by law or needed for legal claims. Contact info@firmin.cz; we respond without undue delay and within one month of receiving the request. For complex or numerous requests, GDPR permits a further two months; we notify you of the extension and reasons within the first month.

8. Automated decisions and supervisory authority

We do not carry out automated decision-making or profiling with legal or similarly significant effects. Complaints may be submitted to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz, data box qkbaa2n, +420 234 665 111.

9. Changes

We may update this policy when services or legislation change. The current version is always published on this website. Last updated: 7 September 2026.

Cookieless Umami analytics

Our self-hosted, cookieless Umami measures public URL paths, timestamps, referral source and basic device data. After an order is submitted, we link the current pseudonymous session with a random identifier so authorised staff can see up to 24 hours of preceding context. We do not send names, e-mail addresses, phone numbers, form data, order IDs or access tokens to Umami. The legal basis is legitimate interest; records are kept only while needed for these purposes, and the need for continued retention is reviewed regularly.

FIRMIN s.r.o. · Slavojova 579/9, 128 00 Praha 2 · info@firmin.cz