Kaspterra s.r.o. | User Privacy & Security Policy

Information Governance and Privacy Framework

Welcome to the official Privacy Policy document established and maintained by Kaspterra s.r.o. Last revised on 2026-09-19, this comprehensive regulatory notice outlines our steadfast commitment to safeguarding your fundamental rights regarding the collection, processing, retention, and secure management of personal information. Operating in strict adherence to current European data protection directives, including the General Data Protection Regulation and localized legislative enactments relevant to our principal establishment, we ensure complete transparency across all digital touchpoints. This statement governs every interaction with our landing page services, establishing clear boundaries of responsibility between you, the data subject, and our enterprise as the designated controller of your digital identifiers.

Categories of Personally Identifiable Information We Collect

In the course of delivering our specialized services through this digital platform, Kaspterra s.r.o. acquires specific classifications of personal data. The extent of collection depends directly on the nature of your engagement with our interactive elements and transactional modules.

Directly Provided Identifiers: This encompasses foundational details voluntarily submitted via inquiry forms or registration fields, including your full legal name, professional designation, corporate affiliation, direct electronic mail address via [email protected], and telecommunication contact details represented by +420 51 931 918 1.
Technical and Device Telemetry: Automatically harvested network metrics comprising your Internet Protocol address, browser architecture, operating system configuration, navigation pathways, time-stamp logs, and interaction frequencies gathered through standard logging mechanisms.
Cookie and Tracking Artifacts: Persistent and session-based identifiers deployed to monitor user preferences, session continuity, and analytical performance metrics, all managed pursuant to explicit prior consent parameters.

Purposes of Data Processing Operations

Every operational workflow involving personal information executed by Kaspterra s.r.o. is bound to strictly defined, legitimate, and explicit objectives. We refrain from utilizing your data for incompatible secondary purposes without securing renewed authorization.

Service Delivery and Execution: Facilitating requested consultations, processing transactional requests, and delivering tailored professional services as contracted through our landing page interfaces.
Communication and Administrative Support: Responding to inbound inquiries, managing customer service tickets, dispatching critical service updates, and maintaining verified communication channels via [email protected] and +420 51 931 918 1.
Platform Optimization and Security: Analyzing traffic patterns, diagnosing systemic vulnerabilities, mitigating fraudulent activities, and reinforcing the structural integrity of our digital infrastructure.
Regulatory Compliance: Fulfilling mandatory legal obligations, responding to lawful inquiries from competent judicial or administrative authorities, and defending our legal interests in dispute resolutions.

Lawful Bases Governing Data Processing

Our processing activities are strictly anchored in robust legal justifications recognized under applicable statutory frameworks. We evaluate each processing workflow to guarantee alignment with mandatory compliance thresholds.

User Consent: Explicit, freely given, specific, and unambiguous authorization granted via affirmative action on our platform, particularly concerning marketing communications and non-essential cookies.
Contractual Necessity: Processing required for the performance of a service agreement to which you are a party, or to take pre-contractual steps at your specific request prior to formalizing an engagement.
Legitimate Interests: Pursuing our commercial objectives in enhancing service quality and securing our network assets, provided such interests are not overridden by your fundamental rights and freedoms.
Legal Obligations: Adherence to statutory mandates requiring the retention or disclosure of specific commercial and transactional records.

Data Retention Schedules

Personal information processed by Kaspterra s.r.o. is preserved exclusively for the duration necessary to fulfill the operational purposes for which it was collected, or to satisfy prolonged statutory archiving requirements. Active client identifiers are maintained throughout the contractual lifecycle and for a subsequent mandatory period dictated by local commercial and tax legislation. Technical logs and transient analytics are systematically purged or anonymized within short operational cycles, typically not exceeding twelve months. Once the applicable retention window closes, all physical and digital records undergo secure destruction or cryptographic anonymization, rendering reconstruction impossible.

Disclosure and Transfer to Third Parties

We maintain stringent oversight regarding the sharing of your personal data with external entities. Kaspterra s.r.o. does not sell, trade, or rent your identifiable information to commercial brokers. Disclosure is strictly restricted to trusted operational partners who assist us in operating our platform, executing business processes, or servicing your requests, subject to rigorous data processing agreements that enforce confidentiality and security standards equivalent to our own. In specific circumstances, we may disclose information to authorized governmental bodies, regulatory agencies, or legal counsel when mandated by law or necessary to protect the vital interests of our enterprise or third parties. Data transfers outside the regional economic zone are executed exclusively under approved standard contractual clauses or adequacy decisions.

Comprehensive Information Security Safeguards

To protect your personal data against unauthorized access, accidental loss, alteration, unlawful destruction, or disclosure, Kaspterra s.r.o. implements robust technical and organizational security measures. Our defense strategy integrates advanced encryption protocols for data in transit and at rest, multi-factor authentication mechanisms for administrative access, regular vulnerability assessments, and strict access control policies limiting data exposure strictly to authorized personnel. While we employ industry-standard security architectures to mitigate risks, absolute security cannot be guaranteed across open public networks, and users are encouraged to maintain vigilance over their own digital security practices.

Your Statutory Data Subject Rights

Under applicable regulatory frameworks, you retain comprehensive rights concerning the personal data we hold about you. We facilitate the exercise of these rights through dedicated communication channels linked to [email protected].

Right of Access: You may request formal confirmation regarding whether your personal data is being processed, alongside detailed disclosures concerning processing operations and copies of the specific data held.
Right to Rectification: You possess the entitlement to demand the immediate correction of inaccurate personal data or the completion of incomplete records associated with your profile.
Right to Erasure: Also known as the right to be forgotten, you can request the deletion of your personal data under specific circumstances, such as when the data is no longer necessary for the original purposes or when consent is withdrawn.
Right to Restriction of Processing: You may temporarily suspend processing activities in contested scenarios, such as verifying data accuracy or objecting to processing based on legitimate interests.
Right to Data Portability: You have the right to receive your provided personal data in a structured, commonly used, and machine-readable format, and to transmit those details to another controller without hindrance.
Right to Object: You can object at any time to the processing of your personal data for direct marketing purposes or when processing relies on legitimate interests.

Corporate Contact and Administrative Inquiries

For any formal inquiries, complaints, or to exercise your established statutory rights regarding the processing of your personal data by Kaspterra s.r.o., please direct your correspondence to our administrative headquarters located at Příčná 1892/4, Nové Město, 110 00 Praha 1 or via electronic communication at [email protected]. We commit to addressing all valid requests within the statutory timeframes mandated by applicable legislation. Furthermore, you retain the legal prerogative to lodge a formal complaint with the relevant supervisory authority for data protection if you believe our processing activities violate statutory mandates.