Privacy Policy

Last updated: 14 March 2026

1. Data controller

Your personal data is processed by:

  • ADRASTEIA z. ú.
  • Company ID (IČO): 03833101
  • Registered office: Karlovo náměstí 9, 413 01 Roudnice nad Labem, Czech Republic
  • Data box (datová schránka): 3ezvcu4
  • Contact: info@adrasteia.cz
  • Phone: +420 478 048 246

2. What data we process and on what legal basis

a) Contact form

Data: name, e-mail, phone number (optional), subject, message

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)

Retention period: maximum 1 year

b) Client data

Data: data of crime victims, witnesses, and persons resolving debt relief (insolvency)

Legal basis: Art. 6(1)(b) and (f) GDPR

Special categories: Health data (Art. 9(2)(a) and (h) GDPR), criminal-offence data (Art. 10 GDPR)

Retention period: in accordance with the Accounting Act (5 years) and the Archiving Act

c) Technical data

Data: IP address, browser information, operating system, time of visit, pages visited

Legal basis: Art. 6(1)(f) GDPR

Retention period: 14 months

d) Analytics data and third-party services

We use Google Analytics 4 (GA4) and Google Fonts. When these are used, your data (including your IP address) is transferred to Google Ireland Limited.

You can find details about cookies in our Cookie Policy.

3. Recipients of data

We do not sell your personal data. It may be passed on to:

  • The web hosting provider
  • Google Ireland Limited (analytics, fonts)
  • Public authorities, where required by law
  • Other parties only with your explicit consent

4. Transfers of data outside the EU

Google Ireland Limited is established in the EU but may transfer data to the USA. This transfer is protected by the EU-U.S. Data Privacy Framework.

5. Automated processing and artificial intelligence tools

When processing certain data, we may use tools based on artificial intelligence (for example, to analyse and sort incoming enquiries, prepare materials, or communicate). These tools serve solely as a supporting means — the final decision is always made by a human. We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR that would have legal effects or similarly significantly affect you.

When using external AI services, we ensure that processing is carried out in compliance with the GDPR, where applicable on the basis of standard contractual clauses or adequacy decisions.

6. Your rights

You have the right to:

  • Access to your data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Portability of data (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consent (at any time)

To exercise these rights, please contact info@adrasteia.cz or use data box 3ezvcu4. We will respond within 30 days.

7. Right to lodge a complaint

You have the right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ):

  • Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
  • Pplk. Sochora 27, Prague 7, Czech Republic
  • Web: www.uoou.cz

8. Data security

We protect your data with technical and organisational measures. Communication is encrypted (HTTPS/TLS). Access is granted only to authorised staff and under a strict data processing agreement.

9. Changes to this policy

We may change this policy without prior notice. We recommend reading it from time to time.