1. Who the controller is
The controller of your personal data is LANTEK NET s.r.o., registered office Pýchavková 269/5, Pitkovice, 104 00 Praha 114, Czech Republic, company ID (IČO) 07145691, VAT ID CZ07145691, registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 294855 (“we”). You can contact us in writing to our registered office at Pýchavková 269/5, Pitkovice, 104 00 Praha 114 or via the contact form on this website. We have not appointed a data protection officer, as the law does not require us to.
2. What data, why and for how long
| When | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Enquiry or order on the website | name, e-mail, company or company ID, message text, language and the page you wrote from | handling the enquiry and negotiating a contract (Art. 6(1)(b) GDPR) | 1 year from the last communication if no contract is concluded |
| Configurator quote by e-mail | e-mail, selected modules and order volume | sending the requested quote (Art. 6(1)(b)) | 1 year from sending |
| Client zone account | name, work e-mail, company details (ID, name, address), password in irreversible form, two-factor authentication data | running the account and providing services (Art. 6(1)(b)) | while the account exists; deleted within 30 days of closure |
| Sign-in and security | IP address, time and result of sign-in, browser type | protecting accounts from misuse (legitimate interest, Art. 6(1)(f)) | up to 12 months |
| Contract and invoicing | identification and contact details, billing details, payments | performing the contract (b) and accounting and tax obligations (c) | for the period required by accounting and VAT law, usually 10 years |
| Customer communication | e-mails and request records | customer care and defence of legal claims (f) | for the contract term and 3 years after it ends |
| Server operation | IP address, time and request URL | security and protection against attacks (f) | up to 90 days |
| Website analytics | pseudonymous browser identifier, pages visited, approximate location from IP, device type | traffic statistics, only with your consent (a) | until consent is withdrawn; Google Analytics data for up to 14 months |
Providing data is voluntary, but without contact details we cannot reply to an enquiry or conclude a contract. We do not carry out automated decision-making or profiling.
3. Data we process for our clients
When running integrations, we transfer data between our clients’ systems, such as orders and addresses of their customers. For this data, our client is the controller and we are the processor, under the data processing agreement. If you are a customer of an e-shop and want to exercise your rights, please contact that e-shop; we will gladly help it with your request.
4. Who we share data with
We do not sell data. We share it only with providers that help us run the services, to the necessary extent and under a contract:
- OVHcloud: servers and databases in EU data centres;
- Cloudflare: website delivery and attack protection;
- an e-mail service provider for sending messages and quotes;
- a backup provider with servers in the EU;
- Google Ireland Limited: Google Analytics, only if you consent to analytics;
- accountants, tax advisers, lawyers or public authorities where required by law.
We store data in the EU. Some providers (Cloudflare, Google) may also process data in the USA. Such transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
5. How we protect data
Communication with the website and client zone is encrypted. Access keys to clients’ systems are stored encrypted, client data is kept separate, and the client zone is protected by two-factor authentication. Only people who need the data for their work, and who are bound by confidentiality, can access it.
6. Your rights
Under Regulation (EU) 2016/679 (GDPR) you have the right:
- to access your data and obtain a copy;
- to have inaccurate data corrected;
- to erasure where we no longer need the data or process it unlawfully;
- to restriction of processing;
- to portability of data you have provided;
- to object to processing based on legitimate interest;
- to withdraw consent at any time, without affecting earlier processing.
Send your request in writing to our registered office at Pýchavková 269/5, Pitkovice, 104 00 Praha 114 or via the contact form on this website. We will reply within one month at the latest. If you are not satisfied, you can lodge a complaint with a supervisory authority, in the Czech Republic the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz), or with the authority in your EU country of residence.
7. Cookies
The Cookies page describes which cookies the website uses. You can change your consent at any time via “Cookie settings” in the footer.
8. Changes
We may update this policy, for example when we add a new provider. The current version is always on this page. This policy is effective from 16 October 2026.