Privacy Policy and personal data protection terms

STATUS stavební a.s.
Nádražní 998, 396 24 Humpolec
Company ID: 46679120
VAT No.: CZ46679120
Registered in the Commercial Register kept by the Regional Court in České Budějovice, Section B, Insert 487.
Contact email for personal data protection matters: info@status.cz

1. Data controller

The controller of personal data is STATUS stavební a.s. (the “controller”).
The controller determines the purposes and means of processing personal data and is responsible for their protection.

2. Purposes and legal grounds for processing

We process personal data only to the extent necessary for the following purposes:

2.1 Performance of a contract and steps prior to entering into it
• handling orders, delivery, invoicing, communication about the contract
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

2.2 Compliance with legal obligations
• accounting, tax records, archiving of documents
Legal basis: Art. 6(1)(c) GDPR (compliance with a legal obligation)

2.3 Legitimate interest of the controller
• direct marketing (sending information about services and news),
• ensuring the security of our services and website,
• protection of legal claims.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

2.4 Consent of the data subject
• sending marketing communications where legitimate interest cannot be relied on,
• use of non-essential marketing and analytics cookies.
Legal basis: Art. 6(1)(a) GDPR (consent)

You may withdraw your consent at any time.

3. Personal data collected

We mainly process the following categories of data:
• identification data: first name, surname, address
• contact details: email, phone
• data on orders and the course of business communication
• technical data from website visits (IP address, cookies, logs)
• other data you provide to us voluntarily (e.g. in the contact form)

We do not obtain personal data from publicly available sources, and we do not carry out automated decision-making or profiling.

4. Recipients of personal data

Personal data may only be transferred to trusted parties that provide services for us, typically:
• hosting and server service providers
• an accounting firm
• carriers
• providers of emailing or CRM tools
• providers of analytics or marketing systems (where used)

All recipients have concluded a data processing agreement in accordance with the GDPR.


5. Transfers to third countries

We do not transfer personal data to third countries outside the EU/EEA unless stated otherwise.
Where tools that transfer data outside the EU are used (e.g. Google, Meta), such transfers are based on standard contractual clauses and other appropriate safeguards.

6. Retention period

We keep personal data only for as long as necessary:
• data related to a contract: for the duration of the contractual relationship + 3 years
• accounting documents: 10 years from their creation (under the Accounting Act)
• marketing: until consent is withdrawn or an objection is raised
• technical logs: usually 14–365 days depending on the nature of the processing
• data from contact forms: 1 year if no contract is concluded

7. Your rights under the GDPR

You have the right:
• to access your personal data,
• to have inaccurate data corrected,
• to erasure (unless this conflicts with a legal obligation),
• to restriction of processing,
• to object to processing based on legitimate interest, including direct marketing,
• to data portability,
• to withdraw your consent at any time,
• to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

8. Mandatory or voluntary provision of data

Providing personal data is:
• mandatory where required by law (e.g. data on an invoice),
• necessary for entering into a contract,
• voluntary for marketing purposes or the use of cookies (other than essential cookies).

9. Cookies and visitor analytics

Our website uses the following categories of cookies:
• Essential – ensure the basic functioning of the website and store your consent choice (cookie sdc_consent, valid for 6 months). They are stored without consent.
• Analytics – visitor measurement with Google Analytics 4 (Google Ireland Ltd.), loaded via Google Tag Manager. They help us understand which pages visitors use and how they move around the website. Data are processed in pseudonymised form and IP addresses are truncated. The _ga and _ga_* cookies are valid for up to 24 months. They are stored only with your consent.
• Functional – allow third-party content to be displayed, specifically embedded Google Maps on the reference pages (cookie NID, Google, valid for 6 months; your choice is remembered by the status_fn cookie). Without consent the map will not load.
• Marketing – not currently used. If we introduce them in the future, they will only be active with your consent.

You give your consent in the cookie bar on your first visit. Consent is recorded with a timestamp and an anonymous ID (cookie sdc_consent) so that we can demonstrate it. The record does not contain your IP address and is kept for 3 years. You can change or withdraw your choice at any time by clicking the Cookie settings link in the website footer, or by deleting cookies in your browser. Without consent, analytics tools will not run (Google Consent Mode v2).

Overview of the cookies used on this website:

The transfer of data to Google may involve a transfer to the USA; it is based on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) and standard contractual clauses.

10. How to exercise your rights

You can submit your requests at any time by email to:
info@status.cz

The controller will respond within 30 days; in more complex cases this period may be extended.

11. Effective date

This policy is effective from 3 December 2025.