Controller and contact
The controller is COMPLEX, s.r.o., company ID 60491841, Zelená 2001/21, 160 00 Prague 6, Czech Republic. The contact person is Martin Havlíček, Managing Director. Contact sluzby@complexsro.cz or write to the registered office.
Enquiries and business communication
We process the name, email, optional telephone number, company and message you provide to handle your enquiry and prepare an offer. For individuals negotiating their own contract, the basis is steps prior to a contract and performance (GDPR Article 6(1)(b)); for company representatives, our legitimate interest in business communication (Article 6(1)(f)). Advertising measurement consent is not required to submit an enquiry. Do not include sensitive personal data.
Enquiry retention
Unsuccessful enquiries and related communication are retained for up to 1 year after the last communication. Longer retention is limited to data necessary for a specific legal claim or legal obligation. Contract, accounting and statutory retention periods apply to successful business relationships separately.
Delivery and hosting
Webglobe, s.r.o. provides hosting and outgoing email from formular@mailing.complexsro.cz. Enquiries are delivered to sluzby@complexsro.cz; Ecomma s.r.o. administers company email and the company server. Enquiry contents are not stored in the website database or browser local storage. They remain in email and related company records. Access is restricted to authorised people and necessary service providers.
Form protection and technical logs
The requested submission uses an essential complex_enquiry session cookie, a security token valid for up to 1 hour and rate limits. Counters contain timestamps and a keyed hash of the IP address, not message contents; these are pseudonymous, not anonymous. The windows are 15 minutes and 1 hour; expired entries are removed on the next request. Separate hosting access and security logs may include the IP address, time, requested URL and browser details. Retention depends on the period necessary for operation, investigation and resolution of a specific incident and related legal claims. The basis is our legitimate interest in service security (GDPR Article 6(1)(f)).
Optional Google Analytics and Google Ads measurement
With analytics consent, Google Analytics 4 from Google Ireland Limited measures visits. With separate advertising measurement consent, a successful enquiry may also be used to evaluate Google Ads. Advertising measurement in this implementation uses analytics. Google does not load before analytics consent. Without both permissions, generate_lead is not sent; viewing contact information is not a conversion. Names, email addresses, telephone numbers, company names and message contents are not sent to analytics. We do not enable Google Signals, advertising personalisation or enhanced conversions. Optional measurement is based on consent (GDPR Article 6(1)(a)).
Cookies and your choice
The essential complex_consent_v1 local storage record remembers your choice for 6 months. Analytics cookies _ga and _ga_* are configured for up to 6 months without renewing on each visit. Use “Cookie settings” in the footer to accept, refuse or change your choice at any time. On withdrawal we reload the page and remove accessible Google cookies on this domain. This does not retrospectively erase data already sent. The enquiry form works when measurement is refused.
Google retention and international transfers
GA4 currently retains event data for 2 months and user data for 14 months, with reset on new activity enabled. These settings do not cover all aggregate reports or separate Google Ads retention. Google may process data outside the EEA, particularly in the USA, using applicable adequacy decisions, including the EU–US Data Privacy Framework for covered transfers, or Standard Contractual Clauses. See Google transfer safeguards and how Google uses information. Further information about safeguards is available from our contact.
Your rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability, object to legitimate-interest processing, and withdraw consent without affecting prior lawful processing. Requests are normally handled within 1 month; a further 2 months is possible under statutory conditions. You may complain to the Czech Office for Personal Data Protection. We do not carry out solely automated decisions with legal or similarly significant effects.
Further information
Other company activities are described in the information memorandum (PDF, Czech). Updated: 8 November 2026.