Privacy Policy (GDPR)

The data controller is:

Helya software s.r.o.
ID: 09000224
VAT: CZ09000224
Husova 994
67602 Moravské Budějovice
Email: hello@helya-soft.cz
Phone: +420 604 955 318

Helya software s.r.o. processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

We only process personal data that you voluntarily provide to us through our contact form or by email, and only for the purpose of responding to your inquiry or processing your request.

The personal data we may process includes:

• Name and surname
• Email address
• Phone number
• Other information you voluntarily provide

Legal basis for processing: We process your personal data based on the following legal grounds:

• Your consent (Art. 6(1)(a) GDPR) - when you voluntarily provide your information through our contact form
• Performance of a contract or taking steps prior to entering into a contract (Art. 6(1)(b) GDPR) - if you are our client or potential client
• Legitimate interest (Art. 6(1)(f) GDPR) - for example, to ensure the security of our website

Data retention periods: We retain your data for the following periods:

• Contact form data: 1 year from the last communication
• Client data: for the duration of the contractual relationship and subsequently for the time necessary to protect our rights and fulfill legal obligations (typically 3-5 years)
• Marketing data: for the duration of your consent or until you withdraw it

Sharing data with third parties: We do not share your personal data with third parties except in the following cases:

• Service providers who provide technical support and processing for us (e.g., hosting providers, email service providers)
• When we are required to do so by law or by an enforceable decision of a public authority

International data transfers: We primarily process your personal data within the European Union. In the event of a transfer to a third country, we will ensure an adequate level of protection through standard contractual clauses or other appropriate safeguards.

Data security: We have implemented technical and organizational measures to protect your personal data from unauthorized access, loss, or damage, including encryption, regular security updates, and access control to data.

In connection with the processing of your personal data, you have the following rights:

• Right of access to personal data
• Right to rectification of inaccurate or incomplete personal data
• Right to erasure of personal data
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right not to be subject to automated individual decision-making

Automated decision-making: We do not use automated decision-making or profiling that would have legal effects on you or similarly significantly affect you.

How to exercise your rights: You can exercise your rights by sending a request to our email address hello@helya-soft.cz. We will respond to your request without undue delay, at the latest within one month of receiving the request. In case of complexity or a large number of requests, we may extend this period by another two months, of which we will inform you.

If you believe that the processing of your personal data violates data-protection regulations, you have the right to lodge a complaint with a supervisory authority.

For the essential operation of the site, we store only your language choice and consent settings. OpenPanel analytics and session replay are disabled by default and start only after your prior, freely given consent under Article 6(1)(a) GDPR and the rules governing non-essential storage or access on terminal equipment.

OpenPanel analytics: After consent, we process viewed URLs, referrer, time, device type, operating system, browser, approximate geographic area and website interactions. We do not use this data for advertising or automated decision-making and do not identify visitors by name. OpenPanel runs on infrastructure under our control and data is transmitted securely through openpanel-api.helya-soft.cz.

Session replay: This requires separate consent. It captures DOM structure, clicks, pointer movements, scrolling and navigation as structured data, not video. All text and input values are masked before transmission; contact and legal sections are blocked. OpenPanel retains session replays for 30 days.

You may refuse or withdraw consent at any time without detriment via “Cookie settings” in the footer. Further tracking stops immediately after withdrawal. We also respect Global Privacy Control and Do Not Track signals. Analytics data is retained only for as long as necessary to evaluate traffic, and the need for continued retention is reviewed regularly.

If you have any questions regarding the processing of your personal data, you can contact us at:

Email: hello@helya-soft.cz
Phone: +420 604 955 318