1. Personal Data Controller
The personal data controller is Quartex Praha, s.r.o.,
with registered office at Nádražní 203/9, 250 64 Měšice,
Company ID No. 25678230,
registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 60466
(hereinafter referred to as the “Controller”).
The Controller operates its websites, online services and software applications, including under the trade names Q.Invoice and Q.VOS.
Contact email for personal data protection matters: info@quartex.cz
2. Scope of this Policy
This Policy applies to the processing of personal data of natural persons when:
- visiting the Controller’s websites
- using contact forms on the Controller’s websites
- communicating with the Controller by email and telephone
- recording inquiries and communication in the Controller’s internal systems
- registering and using the Controller’s web or cloud applications, if this function is available, in particular the Q.Invoice and Q.VOS applications
- using the websites including traffic measurement
3. What Personal Data We Process
The Controller processes in particular the following personal data:
- name and surname
- email address
- telephone number
- web address
- content of messages, inquiries or requests
- data related to communication
- data related to registration and user account management, if this option is available on the given website or in the application
- technical data on the use of websites
The Controller does not process special categories of personal data.
4. Purposes of Processing and Legal Bases
a) Handling Inquiries and Requests
Personal data entered through contact forms or during direct communication are processed for the purpose of handling the inquiry, request and subsequent communication.
Legal basis: negotiations for the conclusion of a contract and legitimate interest of the Controller.
b) Registration and User Account Management
In the event that the Controller’s websites or applications allow the creation of a user account, personal data are processed for the purpose of registration, account management, provision of services and fulfillment of contractual obligations.
This purpose applies in particular to the Q.Invoice and Q.VOS applications.
Legal basis: performance of a contract.
c) Recording of Communication and Business Relations
Personal data are processed in the Controller’s internal systems, in particular in CRM, for the purpose of recording requests, managing business relations, internal organization and protection of legal claims.
Legal basis: legitimate interest of the Controller.
d) Commercial Communications
Contact details may be used to send commercial communications regarding the Controller’s products and services, including applications operated by the Controller, where permitted by law.
Legal basis: legitimate interest or consent of the data subject.
Each commercial communication contains the option of easy unsubscription.
e) Fulfillment of Legal Obligations
Personal data may also be processed for the purpose of fulfilling obligations arising from generally binding legal regulations.
Legal basis: fulfillment of a legal obligation.
5. Recipients of Personal Data
Personal data are processed primarily by the Controller’s employees and collaborators.
Furthermore, personal data may be transferred to:
- IT and hosting service providers
- website and technical infrastructure administrators
- CRM solution providers
- accounting, tax and legal advisors
All processors are bound by personal data processing agreements.
6. Transfer of Personal Data to Third Countries
The Controller uses Google tools to measure website traffic, in particular Google Analytics and Google Search Console.
In connection with the use of these tools, technical data may be processed in accordance with the provider’s contractual terms and applicable legal regulations.
7. Retention Period of Personal Data
- personal data from contact forms and related communication are retained for 24 months from the last contact
- in the event of a contractual relationship, personal data are retained for the duration of the contract and subsequently for the period of statutory limitation periods
- accounting and tax documents are retained for the period stipulated by legal regulations
After the expiry of these periods, personal data are securely deleted or anonymized.
8. Rights of Data Subjects
You have the right to:
- access to personal data
- rectification of inaccurate data
- erasure of personal data if the reason for their processing has ceased
- restriction of processing
- object to processing based on legitimate interest
- data portability, where applicable
- lodge a complaint with the Office for Personal Data Protection
You may exercise your rights via email at info@quartex.cz.
9. Security of Personal Data
The Controller has adopted appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or destruction.
Only authorized persons who are bound by confidentiality obligations have access to personal data.
10. Final Provisions
This Privacy Policy is effective from January 1, 2025.
The Controller reserves the right to update this policy. The current version is always available on the Controller’s websites.