Personal Data Processing

LongRiver group
Křižíkova 710/30, 186 00 Prague 8, Czech Republic
Contact: via the Website’s contact form

The Controller operates the LongRiver LAB website and processes personal data for the purposes set out below. The Controller has not currently appointed a data protection officer. Any questions regarding data protection may be submitted through the contact form.

When you use the contact form, we process, in particular:

• your first name and surname;
• your email address;
• your telephone number (optional);
• the content of your message;
• a record of your consent to the processing of personal data;
• a record of whether you have given consent to marketing communications;
• an identifier of the submission source (a technical form parameter); and
• the time of submission and technical data necessary to deliver the request, such as an IP address recorded in infrastructure logs.

In its current form, the Website does not use marketing cookies or third-party analytics tools. Only essential technical logs maintained by hosting and website protection providers may be processed.

a. Handling enquiries and establishing business communications — legal basis: Article 6(1)(b) GDPR (taking steps at the data subject’s request prior to entering into a contract) and Article 6(1)(a) GDPR (consent to processing for this purpose).

b. Sending commercial and marketing communications from LongRiver LAB — only where the user gives optional consent; legal basis: Article 6(1)(a) GDPR. Consent may be withdrawn at any time by contacting the Controller.

c. Ensuring the security and operation of the Website — legal basis: Article 6(1)(f) GDPR (the Controller’s legitimate interest in protecting its infrastructure and preventing misuse).

Personal data submitted through the form is disclosed only to the persons and services that require it to handle your enquiry:

• internal staff and collaborators of LongRiver group involved in handling the enquiry;
• providers of technical infrastructure, including hosting, website protection and API request delivery, in particular Cloudflare and server infrastructure operators; and
• the service used for internal team notifications (Telegram), to which the message content and contact details necessary to establish communication are transmitted.

Recipients may process data as processors under data processing agreements or, in respect of their own infrastructure, as independent controllers. Transfers outside the EU/EEA take place only where an appropriate level of protection is ensured in accordance with the GDPR, for example through an adequacy decision or standard contractual clauses.

• Data relating to an enquiry that has been handled is retained for as long as necessary to manage communications and subsequent business cooperation, but for no longer than 3 years after the last contact, unless a longer period is required by law.
• Data processed on the basis of marketing consent is retained until consent is withdrawn, but for no longer than 3 years after consent was given, unless a business relationship is established in the meantime.
• Technical logs are retained for a period determined by operational and security requirements, usually up to 12 months.

As a data subject, you have, in particular, the right to:

• access your personal data;
• have inaccurate data rectified;
• have your data erased (the “right to be forgotten”), where the statutory conditions are met;
• obtain restriction of processing;
• data portability, where applicable;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal; and
• lodge a complaint with a supervisory authority.

Please submit requests to exercise your rights through the contact form. We will respond without undue delay and no later than within 1 month.

Office for Personal Data Protection (Úřad pro ochranu osobních údajů, “ÚOOÚ”), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.

This notice may be updated. The current version is always available on this page. Use of the contact form is also governed by the Website’s Terms and Conditions.