Who processes your data
The website www.profabrik.cz is operated under the shared ProFabrik brand by two companies. Together they determine why and how data from the website is processed and are therefore joint controllers of personal data under Article 26 of the General Data Protection Regulation (GDPR):
- LEDprojekty CZ&SK s.r.o., Company ID 06043577, with its registered office at Mírová 292/55, Vítkovice, 703 00 Ostrava, registered in the Commercial Register kept by the Regional Court in Ostrava, Section C, File 70397
- EXTERO CZ s.r.o., Company ID 07618697, with its registered office at Mírová 292/55, Vítkovice, 703 00 Ostrava, registered in the Commercial Register kept by the Regional Court in Ostrava, Section C, File 76501
We have a single contact point for all questions and requests concerning personal data: email liberda@profabrik.cz, phone +420 727 969 696, address Mírová 292/55, 703 00 Ostrava. You can also exercise your rights with either of the two companies, and we will pass your request on between us.
Essence of the arrangement between the controllers: the two companies jointly operate the website and receive enquiries. An enquiry is handled by whichever of them it falls under (or by both). The contact point stated above is responsible for providing information about processing and for handling your requests. Each company ensures the security of data in its own systems.
We have not appointed a data protection officer because the law does not require us to do so.
What data we process and why
Enquiry through the website form
- Data
- name and surname, company, email, phone, area of interest, message text (including the calculator result if you transfer it to the enquiry), the page from which you send the enquiry and the time it was sent.
- Purpose
- handling your enquiry: contacting you, preparing a quotation or arranging a site visit, and sending you confirmation that your enquiry has arrived.
- Legal basis
- negotiating a contract at your request (Art. 6(1)(b) GDPR). If you send the enquiry on behalf of the company you work for, we process your contact details on the basis of our legitimate interest in communicating with business partners and their representatives (Art. 6(1)(f) GDPR).
- Is providing it mandatory?
- It is neither a statutory nor a contractual requirement. However, the form cannot be sent without your name, company, email and phone number, and we would not be able to get back to you. Instead of using the form, you can call or email us.
- How long
- 3 years from the last contact if the enquiry does not lead to an order. We then delete the data.
Phone and email
- Data
- the data you give us yourself, usually your name, contact details and the content of your message.
- Purpose and legal basis
- the same as for enquiries sent through the form: negotiating a contract at your request, or our legitimate interest in communicating with company representatives.
- How long
- 3 years from the last contact if no order results.
If an order results
- Purpose and legal basis
- performance of a contract (Art. 6(1)(b) GDPR), compliance with obligations under accounting and tax regulations (Art. 6(1)(c) GDPR) and protection of our legal claims (legitimate interest, Art. 6(1)(f) GDPR).
- How long
- for the duration of the contract and then for the period required by law: accounting records for 5 years (Act No. 563/1991 Coll., on Accounting), tax documents for 10 years (Act No. 235/2004 Coll., on Value Added Tax). To protect legal claims, we keep the data for the limitation periods.
Technical data when you visit the website
- Data
- IP address, date and time of the request, the address visited and browser data.
- Purpose and legal basis
- ensuring the operation and security of the website, including protecting the form from misuse (limiting the number of enquiries from one address). This is our legitimate interest (Art. 6(1)(f) GDPR).
- How long
- for a short time, only as long as necessary for the operation and security of the website. We do not use it for profiling.
Who we share data with
We do not sell data or share it for marketing purposes. It is accessible only to our employees who handle enquiries and to the following processors:
- Vercel Inc. (USA): website hosting, form submission and traffic measurement (Vercel Web Analytics). The function that processes the form runs in a data centre in Frankfurt am Main. The company is certified under the EU-US Data Privacy Framework, for which the European Commission has decided that there is an adequate level of protection. Transfers to the USA are additionally covered by standard contractual clauses.
- INTERNET CZ, a.s. (Forpsi), Company ID 26043319, with its registered office at Ktiš 2, 384 03 Ktiš: operation of the email mailboxes that receive enquiries and from which we send confirmations.
We may also share data with public authorities where the law requires us to do so.
Cookies and traffic measurement
The website does not use cookies or other technologies that store information on your device or read it from your device, which is why we do not ask for your consent to cookies. Fonts and icons are stored directly on the website and nothing is loaded from third-party servers.
The only exception is the video on the Genie Grips page. The YouTube player only loads after you start the video. Only then does your browser connect to the servers of Google, which may process your data and store information on your device in accordance with its own policy. If you do not start the video, no connection is made.
Traffic measurement
- Tool
- Vercel Web Analytics from our hosting provider, Vercel Inc. The measurement script is loaded from our domain.
- Data
- the page visited, where you came to the website from (for example a search engine), approximate location based on IP address (country, region and city), device type, operating system and browser, and events on the website: sending an enquiry with the selected area of interest and clicking on the phone number or email address. To avoid counting one visit more than once, a one-way hash is created from the data in the request your browser sends. It is discarded after 24 hours. We do not send the content of the form or your contact details to the measurement tool.
- Purpose
- to find out which pages are useful to visitors and where enquiries come from, and to improve the website accordingly. We see the results only as aggregate statistics and do not distinguish between individual visitors.
- Legal basis
- our legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR). You can object to this processing.
- How long
- aggregate statistics are available for 12 months.
If we start using cookies in the future, for example to measure advertising, we will ask for your consent in advance under Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications.
What rights you have
- Access: you can find out what data we process about you and obtain a copy (Art. 15 GDPR).
- Rectification: you can ask us to correct inaccurate data or complete incomplete data (Art. 16 GDPR).
- Erasure: you can ask us to delete data if we no longer need it or are processing it unlawfully (Art. 17 GDPR).
- Restriction of processing: for example, while we verify the accuracy of the data (Art. 18 GDPR).
- Portability: we will give you the data you have provided to us in a machine-readable format (Art. 20 GDPR).
- Objection: you can object at any time to processing based on legitimate interest (Art. 21 GDPR).
- Complaint to the supervisory authority: Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Praha 7, www.uoou.gov.cz.
Send your request to liberda@profabrik.cz or by post to the address of our registered office. We will handle it without undue delay and within one month at the latest. In complex cases we may extend this period by a further two months, and we will inform you of any extension. To avoid giving data to someone else, we may ask you to verify your identity.
No automated decision-making or profiling takes place.
Security and changes
The website runs on the secure HTTPS protocol and only authorised people have access to the data. We may update this information; the current version is always on this page.
This information applies from 1 November 2026. It is based on Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data.