Privacy policy
Last updated 5 September 2026How ZERO.BIM s.r.o. handles personal data collected through this website, and what rights you have over it under the General Data Protection Regulation.
These legal pages are published in English only, and the English version is the authoritative one.
Tyto právní stránky vydáváme pouze v angličtině a závazné je anglické znění. Potřebujete-li kteroukoli část vysvětlit v češtině, napište nám na info@zerobim.eu.
Diese Rechtsseiten werden ausschließlich auf Englisch veröffentlicht; maßgeblich ist die englische Fassung. Wenn Sie einen Teil davon auf Deutsch erläutert haben möchten, schreiben Sie uns an info@zerobim.eu.
1. Who is responsible
The controller of the personal data described here is ZERO.BIM s.r.o., Chudenická 1059/30, Hostivař, 102 00 Praha 10, Czech Republic, IČO 295 59 332, DIČ CZ29559332.
For any question about this policy, or to exercise any of the rights set out in section 8, write to info@zerobim.eu.
We have not appointed a data protection officer. We are not required to appoint one, because our core activity is not large-scale monitoring or large-scale processing of special category data.
2. What we collect through this site
This website has no account system, no shopping function and no contact form. The personal data involved is limited to the following.
| Category | What it is | Where it comes from |
|---|---|---|
| Technical log data | IP address, date and time of the request, the page requested, referring page, browser and operating system identifiers | Recorded automatically by the hosting infrastructure on every request |
| Correspondence | Your name, email address, and anything you choose to write to us | Provided by you when you email us |
| Consent record | Your cookie choices, the version of the notice you saw, and the date you made them | Stored in a cookie on your own device |
| Analytics | Aggregate statistics about page use, only if you have consented | Collected in your browser, and only after consent |
We do not collect special categories of personal data through this site, and we do not ask for any.
3. Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Serving the website, keeping it available and protecting it against abuse | Legitimate interest, Art. 6(1)(f) GDPR. Our interest is operating and securing our own site. |
| Reading and answering an enquiry you send us | Legitimate interest, Art. 6(1)(f), or steps prior to entering a contract, Art. 6(1)(b), where your message concerns work you want us to do. |
| Remembering your cookie choices | Legitimate interest, Art. 6(1)(f), together with the obligation to keep a record of consent. |
| Optional analytics and preference cookies | Your consent, Art. 6(1)(a). You may withdraw it at any time, and withdrawal is as easy as giving it. |
| Keeping accounting and tax records where we do business together | Legal obligation, Art. 6(1)(c), under Czech accounting and tax law. |
Providing personal data through this website is voluntary. Log data is unavoidable in the sense that a web server cannot answer a request without receiving an address to answer to, but we do not use it to identify you.
4. How long we keep it
| Data | Retention |
|---|---|
| Technical log data | Held by our hosting provider for a short period for security and abuse prevention, then deleted or aggregated so that individuals can no longer be identified. We do not keep a separate copy and do not use these logs to identify visitors |
| Correspondence | Up to 3 years from the last message, unless a contract requires longer |
| Consent record | 6 months from the date of your choice, after which you are asked again |
| Analytics | Up to 14 months from collection, in aggregate form |
| Accounting records | The period required by Czech law, currently up to 10 years |
5. Who else sees it
We do not sell personal data and we do not share it for anyone else's marketing. We use a small number of service providers who process data on our instructions under Art. 28 GDPR:
- Cloudflare, our hosting and content delivery provider, which serves the pages, protects the site and records the technical logs
- Google (Google Workspace), our email provider, which stores correspondence sent to our addresses
Public authorities may receive data where a law requires us to disclose it.
Transfers outside the EEA
Some of these providers are established in, or process data in, the United States. Where that happens, the transfer is covered by an adequacy decision of the European Commission, or by Standard Contractual Clauses adopted under Art. 46(2)(c) GDPR, together with supplementary technical measures. A copy of the safeguards in place can be requested at info@zerobim.eu.
6. Cookies
Only strictly necessary cookies are set before you make a choice. Everything else waits for your consent. The full list, with purposes and lifetimes, is in the cookie policy, and you can change your choice at any time using .
The typefaces used on this site are served from our own domain rather than from a third-party font service, so viewing the site does not disclose your address to a font provider.
7. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects for you or similarly significantly affects you, within the meaning of Art. 22 GDPR.
8. Your rights
Under the GDPR you have the right to:
- ask whether we process your data, and to receive a copy of it (Art. 15)
- have inaccurate data corrected (Art. 16)
- have data erased where one of the grounds in Art. 17 applies
- have processing restricted in the cases listed in Art. 18
- receive data you gave us in a portable format, and have it transmitted to another controller (Art. 20)
- object at any time to processing based on legitimate interest, on grounds relating to your situation (Art. 21)
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3))
Write to info@zerobim.eu to exercise any of these. We answer within one month, and will say so if we need the extension permitted by Art. 12(3).
Complaints
If you believe we have handled your data unlawfully, you may lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, uoou.gov.cz. You may also complain to the authority in the country where you live or work.
9. Children
This site is aimed at businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.
10. Changes
We may update this policy as the site changes. The date at the top always shows the current version. Where a change materially affects how we use personal data, we will ask for consent again where consent is the basis.