Data controller: Marek Dvořák, contact e-mail: info@inkluzo.cz (hereinafter “we” or “Inkluzo”)
What data we process
- E-mail address — if you request the results to be sent or agree to our offer.
- The URL of the website checked and the accessibility check results.
- IP address and technical logs — automatically, for operation and security (abuse prevention).
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Performing the accessibility check and displaying the result | Performance of service at your request / legitimate interest |
| Sending check results to your e-mail | Your consent |
| Sending offers for accessibility optimisation services | Your separate consent (withdrawable at any time) |
| Securing operations and preventing abuse | Legitimate interest |
How long we retain data
- E-mail with marketing consent: until consent is withdrawn.
- Technical logs: 90 days.
- Records of sent e-mails: after unsubscription they are anonymised (date and subject remain without personal identifier); active records until consent is withdrawn.
- Check results linked to e-mail: until consent is withdrawn. Results without personal data (anonymous scans) are not subject to GDPR time limits and are retained for the duration of the service.
To whom we pass data (processors)
- Hosting provider: Hetzner Online GmbH (Germany, EU).
- Traffic analytics tool: self-hosted Umami on our server in the EU (cookie-free; data stays in the EU, does not share personal identifiers with third parties).
We process all data exclusively on servers in the European Union. We do not transfer data outside the EU.
Your rights
You have the right to access your data, have it corrected, erased, processing restricted, data portability, to object, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You can withdraw your consent to receiving offers by clicking the unsubscribe link in any e-mail, or write to us at info@inkluzo.cz.
You also have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection (ÚOOÚ), Data Protection Commission (DPC)