{"slug":"privacy-policy","language":"en","title":"Privacy Policy | Alfares - GDPR Compliant Data Protection for European Businesses","description":"Alfares Privacy Policy - Comprehensive GDPR-compliant data protection practices for European businesses. Learn how we collect, process, and protect your personal data.","content":"# Privacy Policy\n\n**Last Updated: January 15, 2026**\n\n## Introduction\n\nAlfares (\"we,\" \"our,\" or \"us\") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable European data protection laws.\n\n### Scope\n\nThis Privacy Policy applies to:\n\n- Our website and online services\n- Client relationships and business operations\n- All personal data processing activities conducted by Alfares\n- European Union residents and businesses\n\n## Data Controller Information\n\n**Company:** Alfares\n**Address:** [European Business Address]\n**Email:** <privacy@alfares.cz>\n**Data Protection Officer:** <dpo@alfares.cz>\n\n## Personal Data We Collect\n\n### Information You Provide Directly\n\n#### **Contact Information**\n\n- Name, email address, phone number\n- Company name and job title\n- Business address and contact details\n\n#### **Business Information**\n\n- Project requirements and specifications\n- Technical requirements and preferences\n- Budget information and timeline details\n\n#### **Communication Data**\n\n- Messages, emails, and correspondence\n- Meeting notes and project discussions\n- Feedback and testimonials\n\n### Information Collected Automatically\n\n#### **Website Usage Data**\n\n- IP address and device information\n- Browser type and version\n- Pages visited and time spent\n- Referring website and search terms\n\n#### **Technical Data**\n\n- Cookies and similar technologies\n- Analytics and performance data\n- Error logs and system information\n\n#### **Marketing Data**\n\n- Newsletter subscriptions\n- Event registrations\n- Marketing preferences and interactions\n\n## Legal Basis for Processing\n\nWe process your personal data based on the following legal grounds:\n\n### **Contract Performance**\n\n- Providing requested services\n- Managing client relationships\n- Fulfilling contractual obligations\n\n### **Legitimate Interests**\n\n- Business development and marketing\n- Service improvement and innovation\n- Security and fraud prevention\n\n### **Consent**\n\n- Marketing communications\n- Newsletter subscriptions\n- Optional data processing activities\n\n### **Legal Obligations**\n\n- Tax and accounting requirements\n- Regulatory compliance\n- Legal proceedings and disputes\n\n## How We Use Your Personal Data\n\n### **Service Delivery**\n\n- Providing software development services\n- Managing projects and deliverables\n- Client communication and support\n\n### **Business Operations**\n\n- Account management and billing\n- Quality assurance and improvement\n- Business development and growth\n\n### **Marketing and Communication**\n\n- Newsletters and updates\n- Event invitations and promotions\n- Thought leadership content\n\n### **Legal and Compliance**\n\n- Regulatory reporting\n- Legal proceedings\n- Audit and compliance activities\n\n## Data Sharing and Transfers\n\n### **Internal Sharing**\n\n- Within Alfares team members\n- Across departments and locations\n- For service delivery and support\n\n### **Third-Party Service Providers**\n\n- Cloud hosting and infrastructure\n- Email and communication tools\n- Analytics and marketing platforms\n- Payment processing services\n\n### **Legal Requirements**\n\n- Government authorities\n- Regulatory bodies\n- Legal proceedings\n\n### **International Transfers**\n\n- EU-approved adequacy decisions\n- Standard contractual clauses\n- Binding corporate rules\n- Explicit consent when required\n\n## Data Security Measures\n\n### **Technical Safeguards**\n\n- Encryption in transit and at rest\n- Secure data centers and infrastructure\n- Regular security assessments\n- Access controls and authentication\n\n### **Organizational Measures**\n\n- Employee training and awareness\n- Data protection policies\n- Incident response procedures\n- Regular audits and reviews\n\n### **Physical Security**\n\n- Secure office facilities\n- Access control systems\n- Environmental controls\n- Disaster recovery planning\n\n## Data Retention Periods\n\n### **Client Data**\n\n- **Active clients:** Duration of relationship + 7 years\n- **Prospective clients:** 2 years from last contact\n- **Inactive clients:** 10 years for legal compliance\n\n### **Website Data**\n\n- **Analytics data:** 26 months\n- **Cookies:** As specified in cookie policy\n- **Log files:** 12 months\n\n### **Marketing Data**\n\n- **Newsletter subscribers:** Until unsubscribe\n- **Event registrations:** 3 years\n- **Marketing communications:** 2 years\n\n### **Legal and Compliance**\n\n- **Tax records:** 7 years\n- **Contract documents:** 10 years\n- **Legal proceedings:** Duration + 6 years\n\n## Your Privacy Rights\n\n### **Right to Access**\n\n- Request copies of your personal data\n- Information about processing activities\n- Confirmation of data processing\n\n### **Right to Rectification**\n\n- Correct inaccurate personal data\n- Complete incomplete information\n- Update outdated information\n\n### **Right to Erasure**\n\n- Request deletion of personal data\n- \"Right to be forgotten\"\n- Subject to legal requirements\n\n### **Right to Restriction**\n\n- Limit processing activities\n- Temporary suspension\n- Pending verification or disputes\n\n### **Right to Portability**\n\n- Receive data in structured format\n- Transfer to another controller\n- Machine-readable format\n\n### **Right to Object**\n\n- Object to processing activities\n- Direct marketing opt-out\n- Legitimate interest processing\n\n### **Rights Related to Automated Decision Making**\n\n- Human intervention\n- Explanation of decisions\n- Contest automated outcomes\n\n## Exercising Your Rights\n\n### **How to Contact Us**\n\n- **Email:** <privacy@alfares.cz>\n- **Postal Address:** [European Business Address]\n- **Phone:** [Contact Number]\n\n### **Response Timeline**\n\n- Acknowledgment within 72 hours\n- Complete response within 30 days\n- Extension notification if needed\n\n### **Verification Process**\n\n- Identity verification required\n- Security measures to protect data\n- No fee for standard requests\n\n## Data Removal\n\nYou may request deletion of your personal data at any time. This includes data you provided directly and data we received from third-party platforms (such as Facebook Login, Google Sign-In, or other social or authentication providers).\n\n### **How to request data removal**\n\n- **Email:** Send a request to <privacy@alfares.cz> (or <contact@alfares.cz>) with the subject \"Data removal request\" and your email address or user identifier used for our services.\n- **From Facebook:** If you signed in with Facebook, you can also initiate a data deletion request via **Facebook Settings → Apps and Websites**; we will receive and process that request and delete all data we hold that we received from or associated with your use of Facebook with our services.\n\n### **What we do**\n\n- We will delete or anonymize your personal data (including any data obtained via Facebook or other platforms) within **30 days** of a verified request, except where we must retain data for legal or regulatory reasons.\n- We will send you a confirmation once the removal is complete (or explain any retention that applies).\n\n### **GDPR**\n\nThis process supports your **Right to Erasure** under GDPR; see \"Your Privacy Rights\" above for other rights.\n\n## Cookies and Tracking Technologies\n\n### **Essential Cookies**\n\n- Session management\n- Security and authentication\n- Basic functionality\n\n### **Analytics Cookies**\n\n- Website performance\n- User behavior analysis\n- Service improvement\n\n### **Marketing Cookies**\n\n- Targeted advertising\n- Campaign effectiveness\n- User preferences\n\n### **Cookie Management**\n\n- Browser settings\n- Cookie consent banner\n- Opt-out mechanisms\n\n## Children's Privacy\n\n### **Age Restrictions**\n\n- Services not intended for children under 16\n- No intentional collection of children's data\n- Parental consent required if applicable\n\n### **Verification Process**\n\n- Age verification when necessary\n- Parental consent documentation\n- Appropriate safeguards\n\n## International Data Transfers\n\n### **EU/EEA Transfers**\n\n- Adequacy decisions\n- Standard contractual clauses\n- Binding corporate rules\n\n### **Third-Country Transfers**\n\n- Risk assessments\n- Additional safeguards\n- Regular monitoring\n\n### **Transfer Documentation**\n\n- Transfer impact assessments\n- Safeguard documentation\n- Compliance monitoring\n\n## Data Breach Procedures\n\n### **Incident Detection**\n\n- Automated monitoring systems\n- Employee reporting procedures\n- Regular security assessments\n\n### **Response Process**\n\n- Immediate containment\n- Assessment and classification\n- Notification procedures\n\n### **Regulatory Reporting**\n\n- 72-hour notification requirement\n- Detailed documentation\n- Follow-up reporting\n\n### **Affected Individual Notification**\n\n- Timely communication\n- Clear information\n- Support and guidance\n\n## Changes to This Privacy Policy\n\n### **Update Process**\n\n- Regular review and updates\n- Legal and regulatory changes\n- Business process changes\n\n### **Notification Methods**\n\n- Website updates\n- Email notifications\n- Client communications\n\n### **Effective Date**\n\n- Clear effective dates\n- Transition periods\n- Historical version access\n\n## Contact Information\n\n### **Data Protection Officer**\n\n- **Email:** <dpo@alfares.cz>\n- **Phone:** [DPO Contact Number]\n- **Address:** [DPO Address]\n\n### **General Privacy Inquiries**\n\n- **Email:** <privacy@alfares.cz>\n- **Phone:** [Contact Number]\n- **Address:** [European Business Address]\n\n### **Supervisory Authority**\n\n- **EU Residents:** Your local data protection authority\n- **UK Residents:** Information Commissioner's Office (ICO)\n- **Swiss Residents:** Federal Data Protection and Information Commissioner (FDPIC)\n\n## Complaints and Disputes\n\n### **Internal Resolution**\n\n- Direct contact with DPO\n- Formal complaint procedures\n- Resolution timeline\n\n### **External Remedies**\n\n- Supervisory authority complaints\n- Alternative dispute resolution\n- Legal proceedings\n\n### **Compensation Rights**\n\n- Material damage claims\n- Non-material damage claims\n- Legal representation\n\n## Glossary\n\n### **Personal Data**\n\nAny information relating to an identified or identifiable natural person.\n\n### **Data Processing**\n\nAny operation performed on personal data.\n\n### **Data Controller**\n\nEntity determining purposes and means of processing.\n\n### **Data Processor**\n\nEntity processing data on behalf of controller.\n\n### **GDPR**\n\nGeneral Data Protection Regulation (EU) 2016/679.\n\n### **Supervisory Authority**\n\nIndependent public authority monitoring GDPR compliance.\n\n---\n\n**This Privacy Policy is effective as of January 15, 2026. For questions about this policy or our data practices, please contact us at <privacy@alfares.cz>.**","metadata":{"slug":"privacy-policy","readTime":"8 min read","wordCount":1467,"lastModified":"2026-10-19T06:01:42.041Z","contentType":"legal"},"lastModified":"2026-10-19T06:01:42.041Z"}