Privacy Policy (Privacy Policy)

Language clause: This document may be translated into other languages for your convenience. In the event of any discrepancies, ambiguities, or differences in interpretation between the language versions, the original Czech text is always decisive, superseding, and legally binding, and is permanently available at: nastrojekvality.cz/privacy.

This Privacy Policy describes how the personal data of visitors and users of the website is collected, processed, and protected nastrojekvality.cz and getqualitytools.com (hereinafter referred to as "Website").

The Website and its tools are intended exclusively for business and professional purposes in the B2B (Business-to-Business) segment and for adults (over 18 years of age).

Privacy Policy

The Data Controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) is:

  • Data Controller: Pavel Ryvola, natural person
  • Country: Czech Republic
  • Contact email: info@nastrojekvality.cz / info@getqualitytools.com

(hereinafter referred to as "Controller")

2. What data do we process, for what purpose and on what legal basis?

A. PDF Report Generation and Delivery

  • Scope of data: User's email address, data entered by the user into the generators (project names, numerical values, diagrams, etc.).
  • Purpose: Processing the user's request – dynamic creation of the requested PDF report and sending it to the provided email address.
  • Example: Performance of a contract to provide a free digital service at the user's request (Art. 6(1)(b) GDPR).
Form data storage: Data entered into calculations is processed only temporarily in the server's operating memory for the purpose of generating the PDF. The Controller does not store this engineering and process data in any permanent database.

B. B2B Direct Marketing and Offering of Similar Services

  • Scope of data: Email address, history of tools used (which report was generated), and activity timestamps.
  • Purpose: Sending relevant professional information and offers of similar products or services (e.g., advanced software tools for quality management, nonconformity and claim resolution, or process management).
  • Example: Legitimate interest of the Controller (Art. 6(1)(f) GDPR) in accordance with Section 7(3) of Act No. 480/2004 Coll. (customer exception for direct marketing).
  • Retention period: 3 years from the user's last recorded activity on the Website, or until opt-out.
  • Opt-out: The user can opt out of the subscription at any time free of charge via the link in the footer of every email.

C. Website Security and Protection Against Abuse (Cloudflare Turnstile)

  • Scope of data: IP address, technical browser metadata.
  • Purpose: Infrastructure protection against bots, spam and attacks.
  • Example: Legitimate interest of the Controller in ensuring security (Art. 6(1)(f) GDPR).

D. Exclusion of Automated Decision-Making and Profiling

The Controller does not carry out any automated individual decision-making or profiling that would produce legal effects concerning the data subject or similarly significantly affect them.

3. Cookies and Website Analytics

  • Operation without tracking cookies (Cookieless): The Website does not use any third-party marketing or tracking cookies. For this reason, a consent dialog (Cookie banner) is not displayed on the Website.
  • Own anonymous analytics (Umami): To track website traffic, we use an independent open-source tool hosted exclusively on our own server. The analytics do not store cookies, do not profile users, and do not collect persistent IP addresses (the IP address is immediately anonymized and discarded).

4. Recipients of Personal Data and International Transfer

Only the following verified technical partners (processors) are used for processing:

Entity / Service Purpose Location and Legal Guarantees
netcup GmbH Server infrastructure (hosting) Germany (EU), ISO/IEC 27001 certified
Zoho Corporation Outgoing email communication (SMTP) EU / Standard Contractual Clauses (SCCs)
Cloudflare, Inc. Bot protection (Turnstile) USA / Transfer covered by an Adequacy Decision (EU-U.S. Data Privacy Framework)

5. Business Transformation and Service Continuity

In the event that the Controller decides in the future to transform its business activities (e.g., by establishing a commercial company / LLC of which they will be a partner or founder), they reserve the right, based on the legitimate interest in the uninterrupted provision of services and products, to transfer the management of this marketing database to this new entity. Users will be transparently informed of this fact in advance with the option to opt-out immediately.

6. Your Rights Under GDPR

You have the right to access the data, rectify it, erase it ("right to be forgotten"), the right to object to processing for direct marketing purposes, and the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

For automatic deletion of your personal data, use our online form: Exercise the Right to be Forgotten

To exercise your other rights, contact the Administrator at: info@nastrojekvality.cz.

These policies are valid and effective from 2026-08-15 (Version v1.0).