Privacy Policy
This policy explains how REVAUTEC s.r.o. processes personal data when you visit revautec.com or contact us. We process data in line with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing. Cookies and similar technologies are governed by Section 89(3) of Czech Act No. 127/2005 Coll. on electronic communications.
This website is intended for businesses. Most of the people we deal with therefore contact us on behalf of a company, for example as an employee of a prospective client. Everything below applies to them in the same way.
1. Who is responsible for your data
- Controller
- REVAUTEC s.r.o.
- Registered office
- Kaprova 42/14, Staré Město, 110 00 Praha 1, Czech Republic
- Company ID (IČO)
- 22146741
- Commercial Register
- Municipal Court in Prague, Section C, File 411594
- Contact
- info@revautec.com
We have not appointed a data protection officer. For any question about your personal data, write to the e-mail address above.
2. What we process, why, and on what legal basis
We process only the data you give us and the data your browser sends when you visit the website. We do not buy data or combine it with data from other sources.
| Situation | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form or e-mail enquiry | Full name, e-mail address, phone number (if you provide it), content of your message, time of sending, IP address | Answering your enquiry, preparing a proposal and further business communication | Art. 6(1)(f) GDPR – our legitimate interest in responding to business enquiries and communicating with the contact persons of prospective clients. If you contact us on your own behalf, for example as a sole trader, Art. 6(1)(b) GDPR – steps prior to entering into a contract. | For the duration of our communication and up to 12 months after the last contact. If a contract is concluded, for the duration of the contract and then for the statutory retention periods under accounting and tax law (generally up to 10 years). |
| Spam protection of the form (hCaptcha) | IP address, browser and device information, how you interact with the check, result of the check | Verifying that the form was submitted by a person and protecting it against automated abuse | Art. 6(1)(f) GDPR – our legitimate interest in the security of the website and the form. The check loads only when you reach the contact form. | We do not store this data. The provider's retention is described in its privacy policy (see section 6). |
| Visiting the website (server logs) | IP address, date and time, requested page, browser type and version, operating system, referring page | Operating and securing the website, diagnosing errors | Art. 6(1)(f) GDPR – our legitimate interest in a functioning and secure website | For the period set by our hosting provider, typically a few weeks |
| Displaying the website in our typeface (Google Fonts) | IP address, technical details of the request (browser, operating system, page from which the font was requested) | Displaying the website in consistent typefaces (Sora, Manrope, JetBrains Mono) on every device | Art. 6(1)(f) GDPR – our legitimate interest in the correct and consistent display of the website. Google states that it does not set cookies for this and does not link these requests to Google accounts. | We do not store this data. Google's retention is governed by its privacy policy (see section 6). |
| Embedded Google Map (only after your consent) | IP address, browser and device information, your interaction with the map, cookies and identifiers set by Google | Showing the location of our office on an interactive map | Art. 6(1)(a) GDPR and Section 89(3) of the Electronic Communications Act – your consent to marketing cookies. Until you consent, we show only a placeholder. | Google cookies from 6 months to 2 years (see section 5). Further processing by Google is governed by its privacy policy. |
| Analytics and marketing tools (only after your consent) | Identifiers stored in your browser, pages visited, interactions, approximate location, ad interactions | Measuring how the website is used and how effective our advertising is | Art. 6(1)(a) GDPR and Section 89(3) of the Electronic Communications Act – your consent, which you can withdraw at any time in Cookie settings | See section 5 (Cookies) |
| Record of your cookie choice | Selected categories, time of the choice, version of this policy (stored in the rvt_consent cookie and a copy in your browser's local storage) | Remembering your choice so that we do not ask again, and demonstrating consent (Art. 7(1) GDPR) | Art. 6(1)(f) GDPR – our legitimate interest in respecting and demonstrating your choice. This cookie is necessary and does not require consent. | 12 months, or until you change your choice or we change this policy |
Providing your data in the contact form is voluntary. Without a name, e-mail address and message we cannot answer your enquiry. The phone number is optional.
3. Who receives your data
Some providers process data on our behalf and under our instructions (processors). Others provide their service under their own privacy policies and may also process data for their own purposes.
- Hosting – vas-hosting (Czech Republic): the website and the form script run on its servers. Processor.
- Spam protection – Intuition Machines, Inc. (hCaptcha), USA: verifies that the form was submitted by a person. Processor.
- E-mail and business systems – the providers of the e-mail and enquiry-management tools we use to communicate with you. Processors.
- Web font and map – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Fonts, Google Maps). Provides the service under its own privacy policy.
- Analytics and advertising – only with your consent: Google Ireland Limited (Google Tag Manager and Google Analytics – deployed; Google Ads – not deployed yet) and Meta Platforms Ireland Limited (Meta Ads – not deployed yet). These providers also process data for their own purposes under their privacy policies.
- Advisors bound by confidentiality (accountants, lawyers) and public authorities where we are legally obliged to disclose data.
4. Transfers outside the European Union
Some of the providers above are based in the United States or may process data there:
- Google LLC (parent company of Google Ireland Limited) – certified under the EU-US Data Privacy Framework.
- Intuition Machines, Inc. (hCaptcha) – states in its privacy policy that it is certified under the EU-US Data Privacy Framework.
- Meta Platforms, Inc. – certified under the EU-US Data Privacy Framework; relevant only if Meta Ads is deployed and you have consented.
The EU-US Data Privacy Framework is an adequacy decision of the European Commission. Where a provider is not certified, we rely on the standard contractual clauses approved by the Commission. You can ask us for details of the safeguards used.
5. Cookies
Cookies are small files stored in your browser; we also use local storage, which works in a similar way. We use them in three categories. Necessary cookies are required for the website to work and do not need your consent. Analytics and marketing cookies are set only after you agree in the cookie bar or in , which you can open at any time from the footer. "Reject all" is as easy as "Accept all", and you can change or withdraw your choice at any time.
We use Google Analytics 4, loaded through Google Tag Manager. Until you consent to analytics cookies, neither Google Tag Manager nor Google Analytics is loaded at all and no request is sent to Google; when you consent, we pass your choice to Google's tags through Google Consent Mode. Data from the contact form is excluded from measurement. Advertising tools (Google Ads, Meta Ads) are not deployed yet; the table also shows the cookies they would use, so that we can switch them on only with your consent.
| Category | Cookie | Provider | Purpose | Duration |
|---|---|---|---|---|
| Necessary | rvt_consent (cookie and a copy in local storage) | REVAUTEC | Stores your cookie choice, the time of the choice and the version of this policy | 12 months |
| Necessary | hCaptcha local storage and technical session data (loaded only at the contact form) | Intuition Machines, Inc. | Spam protection of the contact form | Session |
| Analytics (with consent) | _ga, _ga_* | Google Analytics 4 | Distinguishes visitors and sessions for aggregated statistics | Up to 2 years |
| Marketing (with consent) | Google Maps cookies (e.g. NID, SOCS, CONSENT and related) | Google Ireland Limited | Displays the embedded map. Google may use the data for its own purposes, including ad personalisation. | 6 months to 2 years, depending on the cookie |
| Marketing (with consent) | _gcl_au and related | Google Ads | Measures conversions from advertising | Up to 13 months |
| Marketing (with consent) | _fbp | Meta Platforms Ireland Limited | Measures conversions and delivers relevant ads | Up to 3 months |
We keep your choice for 12 months and then ask again. When we add or remove a tool, or change this policy in a way that affects cookies, we update this list and ask for your consent again. You can also delete or block cookies in your browser settings; the website will keep working, but the map and the contact form check may not.
6. Services loaded from other companies' servers
Google Fonts
The website uses the Sora, Manrope and JetBrains Mono typefaces, loaded from Google servers (fonts.googleapis.com, fonts.gstatic.com) on every page. When the fonts are loaded, your browser sends Google your IP address and technical details of the request. Google states that it does not set cookies for this and does not link the requests to Google accounts. Data may be processed by Google LLC in the United States (see section 4). We consider this necessary for the correct display of the website and rely on our legitimate interest. You can object to this processing (see section 7). If you block requests to Google servers in your browser, the website will display in your system font instead.
Google Maps
The contact section can show our location on a Google map. The map is loaded from Google servers (maps.google.com) and sets Google cookies, so it loads only after you allow marketing cookies. Until then we show a placeholder with a button. By clicking it you allow the map, and the cookies it uses, to load. Google may use the data collected through the map for its own purposes, including ad personalisation, under its own privacy policy.
hCaptcha
The contact form is protected by hCaptcha, provided by Intuition Machines, Inc., USA. The check is loaded from js.hcaptcha.com only when you scroll to the form or click into it. It analyses how you interact with the page and your device to tell people from automated scripts. Intuition Machines acts as our processor, and data may be processed in the United States (see section 4). Details are in the hCaptcha privacy policy.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected and incomplete data completed;
- have your data erased where there is no longer a reason to keep it;
- restrict processing in the situations set out in Art. 18 GDPR;
- receive the data you provided in a machine-readable format (portability);
- withdraw consent at any time, without affecting processing carried out before the withdrawal. For cookies, use Cookie settings in the footer.
Right to object. Where we process your data on the basis of our legitimate interest (sections 2 and 6), you can object at any time on grounds relating to your particular situation. We will then stop the processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms. To object, write to info@revautec.com.
To exercise any of these rights, write to info@revautec.com. Exercising your rights is free of charge. We may ask you to confirm your identity if we cannot tell who you are. We reply within one month; in complex cases we may extend this period by up to two further months and will tell you why.
You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz. You may also contact the authority in the EU country where you live or work.
8. Security
The website is served over an encrypted connection (HTTPS). Access to personal data is limited to people who need it to handle your enquiry. Our processors are bound by data processing agreements.
9. Automated decision-making
We do not make decisions about you based solely on automated processing. Advertising tools, where you consent to them, may create audience segments for measurement and ad delivery; this does not produce legal or similarly significant effects for you.
10. Changes to this policy
We may update this policy when our processing or the law changes. The current version is always available at this address, with the date of the last update shown at the top. If a change affects the cookies we use, we will ask for your consent again.