Processing of personal data
1. Personal data controller
The controller of your personal data is:
CEPENA, a.s.
with headquarters: Kladenská 699/107, 160 00 Praha 6
IČO: 27822401
E-mail: info@cepena.cz
(hereinafter referred to as the “administrator”)
2. Purposes, legal bases, and scope of processing
We may process your personal data for the following purposes:
a) Response to a message from the contact form
- Data: name, email, message text (or phone number)
- Purpose: responding to inquiries, follow-up contact
- Legal basis: legitimate interest of the controller (Article 6(1)(f) of the GDPR)
b) Sending commercial communications (newsletters)
- Data: email address, name if applicable
- Purpose: sending information about our services, technologies, references, or news
- Legal basis: consent of the data subject (Article 6(1)(a) of the GDPR), or in the case of existing customers, legitimate interest pursuant to Section 7(3) of Act No. 480/2004 Coll.
You can withdraw your consent to receive newsletters at any time by clicking on the unsubscribe link in each email, or by contacting us at info@cepena.cz.
c) Website traffic analysis (Google Analytics)
- Data: IP address (truncated), device type, browser, website behavior
- Purpose: traffic statistics, website optimization
- Legal basis: consent to cookies (Article 6(1)(a) of the GDPR)
We use Google Analytics in anonymized form – IP addresses are shortened and we do not store data that could directly identify users.
3. Recipients and transfer of data
Your personal data may be transferred to the following processors:
- web hosting and IT management provider,
- newsletter distribution system operator (e.g., Mailchimp),
- Google LLC (in the case of Google Analytics, where the transfer is based on standard contractual clauses pursuant to Article 46 of the GDPR).
We have concluded appropriate personal data processing agreements with the above entities.
4. Retention period
| Purpose | Retention period |
| Reply to message from form | within 12 months of the last communication |
| Newsletters (with consent) | until consent is revoked or 3 years |
| Google Analytics (cookies) | depending on settings, max. 26 months |
5. Rights of the data subject
You have the right to:
- to access personal data, correct it, or delete it,
- on processing restrictions,
- on withdrawal of consent, if the processing is based on consent,
- object to processing carried out on the basis of legitimate interest,
- file a complaint with the Office for Personal Data Protection (www.uoou.cz).
6. Cookies
Our website uses cookies:
- Necessary cookies – ensure basic website functionality; cannot be rejected.
- Analytical cookies – used to track traffic and user behavior (only with consent).
When you first visit the website, we will ask for your consent to the use of cookies via the cookie bar, where you can customize your selection or change it at any time.
7. Voluntary participation
Providing personal data is entirely voluntary, but without it we may not be able to respond to your message or send you our newsletter.