Personal data protection.

01Data controller

The controller is TERCOM s.r.o., company ID 263 32 671, registered at Wolkerova 2483/16, 350 02 Cheb, Czech Republic.

For privacy matters contact us at stavby@tercom.cz or by phone at +420 800 101 333.

02What data we process

We only process data you submit through the forms on this website, plus technical data needed for its safe operation:

• Inquiry form: name, e-mail, phone, selected services, message and any attachments (photos, documents).
• Job application: name, e-mail, phone, message and any attachments (CV, certificates).
• Technical data: IP address for spam and abuse protection (submission rate limiting).
• The website uses no marketing or tracking cookies. Technically necessary elements (Cloudflare Turnstile) create no marketing profiles.

03Purposes and legal basis

• Handling an inquiry and pre-contract negotiations — Art. 6(1)(b) GDPR.
• Recruitment — negotiations on an employment contract, Art. 6(1)(b) GDPR.
• Protecting the website against spam and abuse — legitimate interest (Art. 6(1)(f) GDPR).
• Compliance with legal obligations, notably accounting and tax, if a contract is concluded.

04Retention

• Inquiries: for the duration of negotiations, at most 24 months from the last contact; statutory periods apply if a contract is concluded.
• Job applications: until the end of the selection process, at most 6 months; longer only with your consent.
• Technical antispam records: short-term, typically up to 30 days.

05Processors and recipients

We store and process data with vetted service providers under appropriate agreements:

• Neon Inc. — database for secure storage of inquiries and applications (servers in Frankfurt, EU).
• Vercel Inc. — hosting of the website and processing of submitted forms (servers in Frankfurt, EU; EU standard contractual clauses).
• Resend — sending e-mail confirmations and notifications (EU-US standard contractual clauses).
• Cloudflare — form antispam protection (Turnstile) and storage of application attachments (Cloudflare R2, servers in the EU).
• Telegram — internal notification of the controller's responsible staff about new leads (including attachments).
• We do not share data with third parties for marketing and never sell it.

06Your rights

You have the right to:

• access the data we process about you,
• have inaccurate data corrected,
• erasure ("right to be forgotten") unless a legal duty prevents it,
• restriction of processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time,
• lodge a complaint with the Czech DPA — ÚOOÚ (uoou.gov.cz).

07How to exercise your rights

Write to stavby@tercom.cz. We reply without undue delay, within one month at the latest.

Providing data in the forms is voluntary — but without it we cannot process your inquiry or application.