1. Who controls your data
The controller is FIRMIN s.r.o., IČ 28862961, registered seat Slavojova 579/9, 128 00 Praha 2; office for meetings: V Zářezu 902/4, Praha 5 – Jinonice. Contact: info@firmin.cz, (+420) 211 221 890.
2. Data, purposes and legal bases
For enquiries we process your name, e-mail, phone number and message to answer you and prepare a contract. For reservations and orders we also process service parameters, prices, notes and the one-time order access code to conclude and perform the contract and secure access. For buyers, managing directors, shareholders, officers and proxy holders we process identification, birth, address, citizenship, role and ownership data needed for contracts, notarial deeds and register filings. References are published only with consent. Google Tag Manager loads with consent denied by default; analytics cookies and full Google Analytics 4 measurement are enabled only after consent.
As a person obliged under Act No. 253/2008 Coll., we identify clients and, where required, verify the purpose of the transaction and beneficial owner. The legal bases are performance of a contract, compliance with legal obligations, legitimate interests in communication, security and legal claims, and consent for references and analytics.
3. Identity documents and AML retention
We may process identity-document details and copies, powers of attorney, contracts and supporting documents. AML records must be retained for at least 10 years after the relationship or transaction and may then be kept as long as necessary to establish, exercise or defend legal claims. Documents are never sent by ordinary e-mail; they are uploaded to secured storage, access is limited to authorised staff and every access is logged.
4. Recipients
Data is disclosed only where necessary to hosting and storage providers, ZeptoMail by Zoho, Google Analytics 4 and Google Tag Manager in Consent Mode, notaries, registry courts and public authorities such as the Financial Analytical Office. Analytics cookies and full analytics measurement are enabled only after consent. Processors are bound by data-processing agreements.
5. Transfers outside the EU
Google and, where applicable, Zoho may process data outside the EU/EEA. Transfers rely on European Commission standard contractual clauses or an adequacy decision; Google LLC participates in the EU-US Data Privacy Framework.
6. Retention periods
AML and identity records are retained for at least 10 years and then for necessary legal claims. Contractual and accounting records follow statutory periods; order data is kept during performance and for the defence of claims; enquiries without a contract only as long as necessary; references until consent is withdrawn; analytics cookies for the consent and cookie lifetime stated in the Cookie Policy.
7. Your rights
You may request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, withdraw consent and lodge a complaint. Deletion does not apply where retention is required by law or needed for legal claims. Contact info@firmin.cz; we respond without undue delay and no later than one month.
8. Automated decisions and supervisory authority
We do not carry out automated decision-making or profiling with legal or similarly significant effects. Complaints may be submitted to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz, data box qkbaa2n, +420 234 665 111.
9. Changes
We may update this policy when services or legislation change. The current version is always published on this website. Last updated: June 2026.
FIRMIN s.r.o. · Slavojova 579/9, 128 00 Praha 2 · info@firmin.cz