PRIVACY & COOKIES

1. OVERVIEW

This Privacy & Cookies Policy describes how CyberON s.r.o. (“CyberON”, “we”, “us”) collects, uses, stores and protects personal data in connection with our website, marketing, client projects and communication.

We process personal data in accordance with applicable data-protection legislation, in particular the General Data Protection Regulation (GDPR) and relevant Czech law.

This document focuses especially on the use of cookies and similar technologies on our website and explains how you can manage your preferences.

2. DATA CONTROLLER

3. WHAT DATA WE PROCESS

The scope of data we process depends on how you interact with us and our website. Typically, it includes:

• Identification and contact details – such as your name, e-mail, phone number, company and role, if you provide them in a form or communication.
• Communication content – messages you send us via forms, e-mail or other channels, including project briefs and notes.
• Technical and analytical data – IP address, browser type, device information, approximate location (city/country), pages visited and interactions with the website, collected via cookies and similar technologies.
• Contractual and billing data – if you become our client or supplier, we may process data necessary to perform the contract (billing details, contract history, project information).

4. PURPOSES & LEGAL BASES

We process personal data only when we have a valid legal basis and a clear purpose. The main purposes are:

• Website operation and security – necessary cookies and technical data required to display the site correctly, maintain performance and protect against abuse (legitimate interest / necessity for service).
• Analytics and improvement – optional cookies to understand how visitors use the site and to refine content, structure and performance (your consent).
• Communication and project requests – processing your contact details and messages to respond to your inquiries, prepare offers and manage cooperation (performance of a contract or steps prior to entering into a contract).
• Marketing communication – where permitted, we may send you relevant information about our services, events or projects (consent or legitimate interest, depending on the situation and applicable law).

5. COOKIES & SIMILAR TECHNOLOGIES

Cookies are small text files stored on your device when you visit our website. They help us ensure basic functionality, security and a better user experience.

We typically use the following categories of cookies:

• Essential / necessary cookies – required for the website to function properly (e.g., security, cookie banner settings, technical operation). These cannot be disabled via our banner.
• Analytical / performance cookies – help us understand how visitors use the website, which pages are visited most and how we can improve the structure and content.
• Functional or preference cookies – remember your choices (such as language settings) to make your experience more comfortable.

Non-essential cookies (such as analytics) are used only based on your consent, which you can give or refuse via the cookie banner. You can also change your browser settings to manage or block cookies.

6. COOKIE BANNER & PREFERENCES

When you first visit our website, you will see a cookie banner. You can:

• Accept all cookies – including analytical cookies for better statistics and optimisation.
• Allow only essential cookies – the website will function, but some measurement and optimisation features may be limited.

Your choice is stored in your browser using a technical cookie. If you clear cookies or use another browser or device, the banner may be shown again.

7. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected, or for the period required by law.

The specific retention period depends on the type of data and context (e.g., project documentation, contracts, accounting records). After the relevant period expires, data is securely deleted or anonymised.

8. SHARING PERSONAL DATA

We do not sell your personal data. However, in some cases we may share it with:

• Trusted service providers – such as hosting providers, analytics tools, e-mail and communication platforms, who process data on our behalf and under a data-processing agreement.
• Professional advisors – such as accountants or legal advisors, where necessary to comply with legal obligations or to defend our rights.
• Public authorities – where we are legally obliged to disclose certain data (for example, to tax or supervisory authorities, courts or law enforcement).

If data is transferred outside the EU/EEA, we will ensure an appropriate level of protection in accordance with GDPR (e.g., standard contractual clauses or equivalent safeguards).

9. YOUR RIGHTS

As a data subject, you have a number of rights under GDPR. In particular:

• Right of access – to obtain confirmation whether we process your data and, if so, information about the processing and a copy of the data.
• Right to rectification – to have inaccurate or incomplete personal data corrected.
• Right to erasure – in certain cases, to have your personal data deleted.
• Right to restriction of processing – in specific situations, to limit how we use your data.
• Right to object – in particular where processing is based on legitimate interest or for direct marketing.
• Right to data portability – for data processed by automated means based on your consent or contract, to receive it in a structured, commonly used, machine-readable format.
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

You can exercise your rights by contacting us at info@cyber-on.net. We may need to verify your identity before fulfilling certain requests.

If you believe your rights have been violated, you also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) or another competent supervisory authority.

10. CHANGES TO THIS POLICY

We may update this Privacy & Cookies Policy from time to time to reflect changes in our processing activities, legal requirements or website features.

The current version is always available on this page. If the changes are significant, we may also inform you in another appropriate way (for example via a notice on the website).

This document is intended to provide transparent information about how we handle personal data and cookies. It does not constitute legal advice.