Privacy Policy

This Privacy Policy describes how the personal data of visitors and customers of the website https://brunomalik.com (hereinafter referred to as the “website”) is processed.

1. Personal Data Controller

Ing. Bronislav Malík Štítného nám. 189 394 64 Počátky IČ: 65002369 DIČ: CZ7405131371 Tel.: +420 731 749 682 E-mail: me@brunomalik.com When processing personal data, we proceed in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll., on the processing of personal data.

2. What personal data we process

• identification and contact details (first name, last name, email, phone number);
• billing and payment details in connection with orders and payments;
• reservation data (via Microsoft Bookings);
• content of messages sent via the contact form;
• technical and operational data (IP address, cookies, and website usage data).

3. Purposes and legal bases for processing

1. Handling inquiries/requests (contact form) – Article 6(1)(f) GDPR (legitimate interest) or (b) (pre-contractual negotiations).
2. Reservation of services (Microsoft Bookings) – Article 6(1)(b) of the GDPR (performance of a contract).
3. Payments and billing (Comgate) – Article 6(1)(b) and (c) of the GDPR (performance of a contract and legal obligation).
4. Accounting and taxes – Article 6(1)(c) of the GDPR (compliance with legal obligations).
5. Legitimate interests (improvement of services, protection of rights) – Article 6(1)(f) of the GDPR.
6. Consent – where required, e.g. for optional cookies or sending commercial communications (Article 6(1)(a) of the GDPR). Consent may be withdrawn at any time.

4. Recipients and processors of personal data

Personal data may be transferred to the following processors or recipients:

• Microsoft Ireland Operations Limited – operation of the Microsoft Bookings reservation system;
• ComGate Payments, a.s. , Gočárova třída 1754/48b, 500 02 Hradec Králové, ID No.: 27924505 – operation of the Comgate payment gateway;
• web hosting and IT management provider;
• accountant and tax advisor;
• other contractual partners necessary for the provision of services (only to the extent necessary).

We have concluded contracts with all processors in accordance with Article 28 of the GDPR, and an adequate level of protection is ensured.

5. Retention period

• Communication and inquiries: for the duration of processing and for a maximum of 12 months from the last interaction;
• reservations and contractual agenda: for the duration of the contract and subsequently for the periods specified by law;
• accounting and tax documents: 5–10 years in accordance with the relevant laws;
• cookies: depending on the type and settings, usually up to 13 months.

6. Transfer to third countries

We do not normally transfer data outside the European Union. If a transfer does occur (e.g. as part of cloud services), it will only take place using appropriate safeguards in accordance with Article 46 of the GDPR (in particular the EU standard contractual clauses).

7. Cookies and related technologies

The website may use necessary cookies for proper functionality and optional cookies for measuring traffic or improving content. On your first visit, you can choose which cookies to allow. You can change the settings at any time in your browser or delete cookies.

8. Your rights

You have the right to request:

• access to your personal data;
• correction or completion of inaccurate data;
• erasure (“right to be forgotten”) if there are no legal grounds for further processing;
• restriction of processing;
• objection to processing based on legitimate interest;
• data portability in machine-readable form;
• lodging a complaint with the Office for Personal Data Protection if you believe that legal regulations are being violated.

You can exercise your rights by contacting the controller listed in section 1.

9. Security

We protect personal data using appropriate technical and organizational measures to prevent its loss, misuse, or unauthorized access. Access is restricted to authorized persons bound by confidentiality.

10. Changes to the policy

We may update this policy, in particular due to changes in legislation or website functionality. The current version is always published on this page. Effective date: November 11, 2025 Controller: Ing. Bronislav Malík

By submitting this form, I consent to the processing of my personal data.