Website operator & data controller
Vladimír Kříž
- Registered business address
- Premonstrátů 1236, 253 03 Chýně
- Business ID (IČO)
- 01407121
- Registration
- Zapsán v živnostenském rejstříku.
- VAT ID
- CZ9207294338
- Contact & privacy requests
- vladimir.kriz.cz@gmail.com
Visiting the website
The hosting service processes technical information needed to deliver and protect the website, such as IP address, request time, requested path and browser information. The basis for necessary operational processing is the legitimate interest in website availability and security under Article 6(1)(f) GDPR.
Responsibilities for visitor data apply while the website is running, not only after the form opens. The actual hosting arrangements and related notice therefore need review now. Signup remains closed.
Signing up for product updates
When signup is open, the form stores your email, optional team size, chosen language, product and the date and version of consent. These details are used only to contact you about early access and the launch of ActiLane. The basis is your voluntary consent under Article 6(1)(a) GDPR.
An email address is needed to contact you. Team size is optional and helps us understand the team’s needs. Providing these details is not a legal or contractual requirement. You can use the website without signing up. Joining ActiLane does not subscribe you to the other product.
We do not use these details for automated decisions with legal or similarly significant effects. A reply to a specific inquiry is not permission for further marketing messages.
Inquiries and privacy requests
Answering a specific inquiry and handling a privacy request are separate purposes. They may involve contact details, the message and a necessary record of the response. Neither is a subscription to marketing messages.
The operator changed the contact address to a personal Gmail account on 12 September 2026. An email link opens your mail app; the website does not send the message or store it in a signup database. Legal review of consumer Gmail, access arrangements and data transfers remains open.
Ordinary inquiry retention
The operator approved a retention period for ordinary inquiries that do not lead to cooperation: six months after the discussion ends. Without an explicit conclusion, the period starts from the last substantive message. Contracts, disputes and records of privacy-request handling need separate rules.
The operator handles replies and deletion requests. The deletion procedure, account settings, trash and any backup copies have not yet been verified. This draft does not claim automatic deletion is configured or historical messages have been erased.
Who receives the information
Access is limited to the operator and providers needed to run the website and form. Railway Corporation supplies the hosting. The signup database must be separate from customer operational data. No automated email delivery provider is connected in this version.
Processing outside the EEA
Railway is a US company and describes processing in the United States. A server in Amsterdam therefore does not mean that all processing stays within the EU. Its DPA includes international transfer provisions, including the European Commission’s standard contractual clauses.
The applicable DPA being agreed and in force, the transfer mechanism and means of obtaining a copy of the safeguards from the operator have not yet been confirmed. This review already concerns visitors to the current website. Signup remains closed until these points are resolved. A link to a contract template does not establish that these obligations have been met.
Retention and deletion
The proposed retention period for an active signup is no more than 180 days after submission, or until consent is withdrawn earlier. The database records an expiry date. Scheduled deletion and the process for individual erasure requests must be verified before launch. Separate withdrawal records and consent evidence are addressed below.
The provider’s actual retention periods for technical logs and any backups have not yet been confirmed. They need verification for the current website, along with the procedure after a backup restore. A log-viewing window does not prove complete deletion. Erasure from the main database may not immediately remove backup copies.
Withdrawal records and consent evidence
Before email sending starts, separate suppression records for withdrawn addresses need to be put in place to prevent further messages. These records may be used only to prevent further sending. The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR.
The store, access arrangements and justified retention period for these records are not yet confirmed. Necessary evidence of consent and withdrawal also needs a separately defined purpose, legal basis and retention period. This draft does not claim that these records are already operational or provide permission for further messages.
Your rights and withdrawing consent
You can withdraw consent at any time, free of charge, using the operator’s published contact. Withdrawal does not affect the lawfulness of earlier processing. You may request access, correction, erasure, restriction and, where the relevant conditions apply, data portability.
You can object to direct marketing at any time. You may object to processing based on legitimate interests on grounds relating to your particular situation. Requests are normally handled within one month; any permitted extension must be explained within the statutory period.
You may complain to a supervisory authority, particularly where you usually live, work or believe an infringement occurred. The Czech authority is the Úřad pro ochranu osobních údajů.