Privacy policy
Effective from 15 August 2026
This policy explains how we process your personal data on vertstav.cz and which cookies we use. It follows Regulation (EU) 2016/679 (GDPR), Czech Act No. 110/2019 Coll. on personal data processing, and Section 89(3) of Czech Act No. 127/2005 Coll. on electronic communications.
1. Data controller
Vasyl Verteiev (VERTSTAV), sole trader
Company ID (IČ): 17975166, VAT ID: CZ686208259
Registered address: Petrohradská 2892, 272 04 Kladno, Czech Republic
E-mail: vasilijverteev@gmail.com, phone: +420 724 365 579
We have not appointed a Data Protection Officer, as the law does not require us to. Please send any questions to the contacts above.
2. What data we process, why, and for how long
a) Contact and quote forms, e-mail, phone
Data: first and last name, e-mail, phone number, your message and anything else you choose to send us (e.g. property address, photos).
Purpose: replying to your enquiry, preparing a quote and negotiating a contract.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). For general enquiries, our legitimate interest in replying to your message (Art. 6(1)(f) GDPR). We do not need your consent for this. Without your contact details, however, we cannot reply.
Retention: if no contract is concluded, we delete the data no later than 1 year after our last communication.
b) Carrying out the job and accounting
Data: identification and contact details, site address, contracts, invoices and job-related correspondence.
Purpose and legal basis: performance of a contract (Art. 6(1)(b) GDPR). We also process this data to meet our accounting and tax obligations (Art. 6(1)(c) GDPR) and to protect our legal claims, e.g. in warranty disputes (Art. 6(1)(f) GDPR).
Retention: we keep tax and accounting documents for 10 years as required by the Czech VAT Act. We keep other job documents for the warranty and limitation periods, at most 5 years after handover.
c) Spam protection (Google reCAPTCHA)
Our forms are protected by Google reCAPTCHA. It analyses information about your device and how you use the page (IP address, browser details, mouse movement) to tell humans from bots. The legal basis is our legitimate interest in protecting the website from abuse (Art. 6(1)(f) GDPR). See the Google Privacy Policy for details.
d) Analytics and advertising (only with your consent)
If you allow the relevant category in the cookie banner, we use:
- Google Analytics 4 (analytics cookies) for traffic statistics: how many people visit, where they come from and which pages they read.
- Google Ads (marketing cookies) to measure whether a visit from one of our ads led to an enquiry (conversion tracking).
Legal basis: your consent (Art. 6(1)(a) GDPR). Without consent, these tools do not run and nothing is stored. You can withdraw your consent at any time via “Manage cookies” in the website footer. Withdrawing consent does not affect the lawfulness of processing carried out before it.
3. Who may process your data
We never sell your data. We share it only as far as necessary with these processors and recipients:
- Google Ireland Ltd.: the e-mail inbox (Gmail) that receives form submissions, plus reCAPTCHA, Google Analytics, Google Ads and Google Tag Manager,
- our server hosting provider: Hetzner Online GmbH, Germany,
- our accountant / tax advisor (for customers we have a contract with),
- public authorities where required by law.
Google may transfer data to the USA. Such transfers rely on the European Commission's adequacy decision (EU-U.S. Data Privacy Framework), under which Google is certified, and on standard contractual clauses.
4. Cookies
Cookies are small text files a website stores in your browser. We always use strictly necessary cookies, because the site does not work without them. We store cookies in other categories only after you consent in the cookie banner.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| Strictly necessary (always active) | |||
cc_cookie | vertstav.cz | Stores your cookie banner choice | 6 months |
PHPSESSID | vertstav.cz | Technical session when submitting a form | until the browser closes |
_GRECAPTCHA | Google (reCAPTCHA) | Protects forms from spam and bots | 6 months |
| Analytics (with consent) | |||
_ga, _ga_* | Google Analytics | Distinguishes visitors and sessions for traffic statistics | 2 years |
| Marketing (with consent) | |||
_gcl_au, _gcl_aw | Google Ads | Conversion tracking for ad campaigns | 90 days |
You can change or withdraw your consent at any time via “Manage cookies” in the website footer. You can also delete or block cookies in your browser settings.
5. Your rights
You have the right:
- to access the data we hold about you (Art. 15 GDPR),
- to rectification of inaccurate data (Art. 16 GDPR),
- to erasure (“right to be forgotten”, Art. 17 GDPR),
- to restriction of processing (Art. 18 GDPR),
- to data portability (Art. 20 GDPR),
- to object to processing based on legitimate interest (Art. 21 GDPR),
- to withdraw consent where processing is based on consent,
- to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.
To exercise your rights, write to us by e-mail or post using the contacts in section 1. We will respond without undue delay, at the latest within 1 month.
6. Automated decision-making
We do not carry out automated decision-making or profiling that has legal effects on you.
7. Changes to this policy
We may update this policy, for example when the services we use change. The current version is always available on this page.