Privacy policy
How we handle personal data on this website and your GDPR rights.
This is a marketing website — no user accounts, no login.
We use Google Analytics for traffic measurement — only with your consent.
Personal data from communication is processed only if you contact us directly.
01
Data controller
CodeDock s.r.o., Company ID: 14292769, Zlenická 863/9, Praha 22, 104 00, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, section C, file 363490.
02
What data we process
Communication
If you email us, we process the information you provide — such as your name, email address, company details, and message content — in order to respond.
Analytics data (only with consent)
If you consent to analytics cookies, Google Analytics records anonymised on-site behaviour — mouse movement, clicks, scrolling, device type and browser. Personal details (email fields, passwords, payment data) are automatically masked.
Technical logs
Our infrastructure (Cloudflare) processes technical data (IP address, browser type) in server logs for security, stability, and abuse prevention.
03
Cookies and analytics tools
We use two categories of cookies. On your first visit, a cookie banner is shown where you can make your choice. You can change your choice at any time using the button below.
Necessary
Used for the basic operation of the site. We store:
- cd_locale — preferred language (cs / en / de). Valid for 1 year.
- cd_consent — your cookie choice (localStorage). No expiry — clearing it reopens the cookie banner.
Analytics — Google Analytics 4 and Google Tag Manager
Activated only with your consent. Google Analytics 4 (GA4) is a service of Google Ireland Ltd. for measuring website traffic. Google Tag Manager (GTM) is Google's tag management platform. Data captured:
- _ga, _ga_* — anonymous visitor identifier. Lifetime 13 months.
- Pages viewed, traffic source, time on page.
- IP address is anonymised (anonymize_ip) — Google never stores it in full form.
Data is processed by Google Ireland Ltd. (EU) and Google LLC (USA). Transfer to the USA is based on the Data Privacy Framework. More: Google Privacy Policy.
04
Purposes and legal bases
- Communication and pre-contractual steps — art. 6(1)(b) GDPR.
- Analytics (Google Analytics) — based on your consent, art. 6(1)(a) GDPR. Consent can be withdrawn at any time.
- Security and service reliability — legitimate interest, art. 6(1)(f) GDPR.
- Compliance with legal obligations — art. 6(1)(c) GDPR.
05
Retention period
Communication: for the time necessary to handle your request. If a business relationship arises, in accordance with applicable law (typically 10 years for invoices).
Analytics: maximum 13 months (GA4 default). Aggregated data without the possibility of identification may be retained for longer.
Technical logs: 30 days (Cloudflare), then automatically deleted.
06
Sharing and processors
We do not sell personal data. We share it with the following processors:
- Cloudflare, Inc. (USA) — hosting, CDN, security.
- Google Ireland Ltd. / Google LLC (EU/USA) — Google Analytics 4 and Tag Manager (only with consent).
- Microsoft Office 365 / Outlook — email communication and appointment booking via Microsoft Bookings.
Public authorities may receive data if required by law.
07
Your rights
- Access, rectification, erasure, and restriction of processing.
- Objection to processing based on legitimate interest.
- Data portability where applicable.
- Withdrawal of consent to processing — at any time, without affecting the lawfulness of previous processing. Use the "Manage cookies" button below.
- Complaint to the Czech data protection authority (ÚOOÚ — uoou.cz).
08
Contact
For personal data protection matters, contact us by email at info@codedock.com or by post at CodeDock s.r.o., Zlenická 863/9, Praha 22, 104 00, Czech Republic.