Legal information

Privacy policy (GDPR)

Information on the processing of personal data under Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on the processing of personal data.

Last updated: 11 August 2026

1. Controller

The controller of personal data is:

Vladislav Kresta
Company ID: 21756473
Děčínská 552/1, Praha 8, 180 00
Email: kresta.ml@laro.cz
Phone: +420 775 020 900

The controller is not required to appoint a data protection officer. Please send all requests relating to personal data to the email above.

2. What data we process

In connection with this website we may process in particular:

Enquiry form data: name, email, phone (if provided), company (if provided), selected topic and message text.
Technical and usage data: IP address, browser and device type, pages visited, time and duration of the visit, referrer and similar analytics data (see below).
Form-protection data: token and risk score from Google reCAPTCHA Enterprise (if protection is enabled).
Communication records: the enquiry you send and related email correspondence (including operational mail logs).

We do not process special categories of personal data (sensitive data) and we do not carry out automated individual decision-making including profiling within the meaning of Article 22 GDPR.

3. Purposes and legal bases

Handling the enquiry and pre-contract communication — replying to your message and, where relevant, preparing a quote or contract. Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract at your request) and/or (a) (consent given by submitting the form).
Legitimate interest in protecting the site and form — preventing spam and abuse (reCAPTCHA, rate limiting). Legal basis: Article 6(1)(f) GDPR.
Website statistics — understanding how the site is used and improving it (cookieless Matomo). Legal basis: Article 6(1)(f) GDPR (legitimate interest).
Technical operation — functionality, security and session (e.g. session / CSRF). Legal basis: Article 6(1)(f) GDPR.
Legal obligations — where a rule requires it (e.g. tax or accounting records if a business relationship arises). Legal basis: Article 6(1)(c) GDPR.

Providing data in the form is voluntary, but we cannot process an enquiry without a name, email and message. By submitting the form you confirm that the data is accurate and that you are entitled to provide it.

4. Recipients and processors

We disclose data only as needed for the purposes above. Recipients may include in particular:

hosting, email and infrastructure providers in the EU / EEA,
Google Ireland Limited / Google LLC — reCAPTCHA Enterprise (form protection),
Matomo analytics on our own infrastructure (analytics.larocomputers.eu),
other IT suppliers who help us run operations, where an Article 28 GDPR processing agreement is in place.

We do not sell enquiry data or share it with third parties for their own marketing.

5. Transfers outside the EU / EEA

Using Google reCAPTCHA may involve transferring technical data to the United States. Google relies, where applicable, on Standard Contractual Clauses (SCCs) and other GDPR safeguards. See Google’s privacy policy for details.

Matomo runs on the controller’s own infrastructure; analytics data is not primarily processed outside the EU / EEA.

6. Retention

Enquiries and related emails: for as long as needed to handle the enquiry and then typically no more than 36 months (to evidence communication and legitimate interests), unless a longer legal retention duty applies.
Operational mail logs: for as long as needed to administer and secure communication, generally in line with the period above.
Analytics data (Matomo): as configured in the analytics tool, typically no more than 26 months unless stated otherwise.
Technical logs and sessions: for as long as needed for operation and security (typically days to weeks).

After the retention period we delete or anonymise the data unless another legal ground for further processing applies.

7. Your rights

You have in particular the right:

to access personal data (Article 15 GDPR),
to rectify inaccurate data (Article 16 GDPR),
to erasure (“right to be forgotten”) under Article 17 GDPR,
to restriction of processing (Article 18 GDPR),
to data portability (Article 20 GDPR) where technically feasible,
to object to processing based on legitimate interest (Article 21 GDPR),
to withdraw consent at any time if it was given — withdrawal does not affect lawfulness before withdrawal,
to lodge a complaint with a supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czechia, www.uoou.cz. If you are in another EU member state you may also contact your local authority (Article 77 GDPR). In the UK you may contact the ICO where UK GDPR applies.

Please send requests by email to kresta.ml@laro.cz. We will reply without undue delay and at the latest within one month (the period may be extended in complex cases under the GDPR).

8. Cookies, analytics and similar technologies

The site uses necessary technical cookies / session storage to function (e.g. CSRF protection and session when submitting the form). These cannot be switched off without limiting functionality.

Optional cookies (analytics, marketing) are managed via the cookie bar. You can change your choice anytime via “Cookie settings” in the footer. Consent is passed through Google Consent Mode v2 (analytics_storage, ad_storage, ad_user_data, ad_personalization) so any future Google services (Analytics, Ads) respect your preferences.

Matomo Analytics runs cookieless (disableCookies). It collects anonymised / aggregated usage statistics on the controller’s own infrastructure. It does not build third-party advertising profiles and does not wait for cookie-bar consent.

Google reCAPTCHA Enterprise (if enabled) helps distinguish people from automated attacks. Google may process technical data under its terms — see Google Privacy Policy and Google Terms of Service.

9. Security

We take appropriate technical and organisational measures matching the processing risk — including encrypted transport (HTTPS), restricted admin access, backups and form-abuse protection. No internet transmission can be guaranteed 100% secure.

10. Changes to this information

We may update this information, for example when services, legal requirements or processing change. The current version is always on this page; the last-updated date is shown above.