Privacy policy

Last updated: 20 October 2026

This policy explains how PREVIOSA, a.s. processes personal data when you visit previosa.cz, send us an enquiry or do business with us. We process personal data in line with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on personal data processing.

1. Who is responsible for your data

The controller of your personal data is PREVIOSA, a.s., Přádova 2092/12, 182 00 Praha 8, Czech Republic, ID No. (IČO) 28214587, VAT No. CZ28214587, registered in the Commercial Register kept by the Municipal Court in Prague, file B 13444.

You can contact us about anything in this policy at info@previosa.cz or by post at the address above. We have not appointed a data protection officer because the law does not require one for the type of processing we carry out.

2. What data we process

• Enquiry data: your name, work email, the product you are looking for, delivery city, product category, specifications and anything else you write in the enquiry form or in an email.

• Business and contract data: your company name, job title, phone number, billing and delivery details, order details and our correspondence with you.

• Website and advertising data: your IP address, device and browser information, pages you visit and whether you arrived from one of our ads. We only collect this through analytics and advertising cookies if you allow them. See our Cookie policy for details.

We do not ask for special categories of personal data, such as health data, and we ask you not to send them to us.

3. Why we process your data and on what legal basis

• To answer your enquiry and prepare a quote. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

• To carry out an order, including sourcing, production follow-up, branding and delivery. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

• To keep accounting and tax records. Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR), mainly under Act No. 563/1991 Coll., on accounting, and Act No. 235/2004 Coll., on value added tax.

• To protect our legal claims and to keep in touch with existing business contacts. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

• To measure how the website is used and to run and measure Google Ads campaigns. Legal basis: your consent (Art. 6(1)(a) GDPR and Section 89(3) of Act No. 127/2005 Coll., on electronic communications). You can withdraw consent at any time.

If you are a contact person at a company, we process your data on behalf of our relationship with that company.

4. Do you have to give us your data

No, but without your contact details and a description of the product we cannot prepare a quote or carry out an order. Consent to analytics and advertising cookies is always voluntary, and the website works without it.

5. How long we keep your data

• Enquiries that do not lead to an order: up to 3 years from our last contact, so we can follow up on the same request.

• Contract and order data: for the duration of the contract and then until the limitation periods for possible claims expire.

• Accounting and tax documents: for the periods required by law, which is up to 10 years.

• Cookie data: for the periods listed in our Cookie policy, or until you withdraw consent.

When the retention period ends, we delete the data or anonymise it.

6. Who we share your data with

We only share personal data when it is needed for the purposes above. Recipients include:

• Framer B.V. (Netherlands), which hosts this website and receives submissions from the enquiry form.

• Google Ireland Limited (Ireland), which provides Google Ads and related measurement, only if you consent to advertising cookies.

• Our email, IT and accounting service providers, who work for us under data processing agreements.

• Manufacturers, inspection companies and carriers involved in your order. We mainly share product specifications. Where a partner needs contact or delivery details to complete your order, we pass on only what is necessary.

• Public authorities, courts and legal advisers when the law requires it or when we need to protect our rights.

We do not sell personal data.

7. Transfers outside the EU

Some of our partners are based outside the European Economic Area. Google may process data in the United States; these transfers rely on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission. When we pass details to manufacturers or carriers in China, the transfer is necessary to carry out the contract you asked for (Art. 49(1)(b) and (c) GDPR), and we limit it to the data the partner needs.

8. Automated decisions

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects. If you consent to advertising cookies, Google may use them to choose which ads to show you.

9. Your rights

Under the GDPR you have the right to:

• access your personal data and get a copy of it (Art. 15)

• have inaccurate data corrected (Art. 16)

• have your data erased where there is no longer a reason to keep it (Art. 17)

• restrict processing (Art. 18)

• receive your data in a portable format (Art. 20)

• object to processing based on our legitimate interest (Art. 21)

• withdraw your consent at any time, without affecting processing that took place before

To use any of these rights, write to info@previosa.cz. We will reply within one month. In complex cases we may extend this by up to two more months and will tell you why.

You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.

10. Security

We limit access to personal data to people who need it for their work, and we use providers that apply appropriate technical and organisational security measures.

11. Changes to this policy

We may update this policy when our processing or the law changes. The current version is always on this page, with the date of the last update at the top.