GDPR and data protection

1. Personal data controller

The controller of personal data is Websprofiky s.r.o., with its registered office at Nové sady 988/2, Staré Brno, 602 00 Brno, Company ID (IČO): 230 83 590, registered in the Commercial Register maintained by the Regional Court in Brno.

Contact for personal data protection matters:
Email: [email protected]
Phone: +420 910 926 999

2. Scope of personal data processing

Within the Wopro platform, we process the following categories of personal data:

• Identification data – first name, surname, company name, Company ID (IČO), Tax ID (DIČ)
• Contact data – email address, phone number, billing address
• Login data – email (login), password in hashed form (bcrypt)
• Operational data – IP address, browser type, time of access, features used
• Transaction data – information about payments, subscriptions and credits

3. Purposes of processing

We process personal data for the following purposes:

• Operation and provision of the Wopro platform services
• User account management and authentication (Wopro ID)
• Invoicing and management of subscriptions and the credit system
• Communication with users – technical support, notices of changes
• Compliance with legal obligations – accounting and tax regulations
• Improving the quality of our services based on anonymised usage analysis

4. Legal basis for processing

• Performance of a contract (Art. 6(1)(b) GDPR) – provision of services, account management
• Compliance with a legal obligation (Art. 6(1)(c) GDPR) – accounting and tax regulations
• Legitimate interest (Art. 6(1)(f) GDPR) – security of services, fraud prevention
• Consent (Art. 6(1)(a) GDPR) – analytical cookies, marketing communication

5. Data retention period

We retain personal data for as long as necessary to fulfil the purpose of processing:

• Account data – for the lifetime of the account + 30 days after its cancellation
• Billing data – 10 years (statutory obligation under accounting regulations)
• Operational logs – no longer than 12 months
• Cookies – depending on the type (necessary: for the duration of the session; analytical: no longer than 13 months)

6. Recipients of personal data

We do not sell personal data or provide it to third parties for marketing purposes. Data may only be shared with:

• GoPay s.r.o. – payment processing (PCI-DSS Level 1 certification)
• Ulozdata.cz – hosting and storage (servers in the EU)
• Public authorities – only on the basis of a legal obligation or a court decision

Personal data is not transferred outside the European Union.

7. Data subject rights

As a data subject, you have the following rights:

• Right of access – to obtain confirmation as to whether and what data about you we process
• Right to rectification – to request the correction of inaccurate data
• Right to erasure – to request the deletion of data (the right to be forgotten)
• Right to data portability – to obtain your data in a structured format
• Right to restriction of processing – to restrict processing under certain conditions
• Right to object – to processing based on legitimate interest
• Right to withdraw consent – to withdraw previously given consent at any time
• Right to lodge a complaint – with the Czech Office for Personal Data Protection (ÚOOÚ)

To exercise your rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Cookies

The Wopro platform uses the following types of cookies:

• Necessary cookies – ensure sign-in, security and basic functions. They cannot be refused.
• Analytical cookies – anonymous analysis of the use of our services in order to improve them. They can be refused.

The platform does not use marketing cookies or third-party cookies for targeted advertising. You can manage cookie preferences in your browser settings.

9. Security of personal data

We use the following measures to protect personal data:

• Encryption of data in transit using TLS 1.3
• Encryption of data at rest (AES-256)
• Password hashing with the bcrypt algorithm
• Regular backups with a 30-day retention period
• Access monitoring and logging
• Access to data restricted on a need-to-know basis

10. Contact

If you have any questions about personal data protection, please contact:
Email: [email protected]
Postal address: Websprofiky s.r.o., Nové sady 988/2, 602 00 Brno

Supervisory authority: Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.