Privacy

Effective from 31 October 2026

Download PDF – CzechDownload PDF – English

Who controls your data

The data controller is LZM Company s.r.o., Company ID 04720989, VAT ID CZ04720989, registered office Salaš 19, 763 51 Zlín, registered with the Regional Court in Brno, Section C, File 91566. For data enquiries and to exercise your rights, contact info@lzmcompany.cz or write to our registered office. Telephone: +420 776 211 206.

Enquiries and subsequent work

We process your name, email or telephone, service area, project location, message and any files you choose to attach. The purpose is to respond, assess your requirements and prepare a quotation. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR); for representatives of businesses, it is our legitimate interest in business communication (point (f)). We do not require marketing consent.

Required fields are marked in the form. We cannot handle an enquiry without contact details and a description; attachments and location are optional. Website records are kept for 12 months from receipt. If a project goes ahead, necessary documents may be transferred to project records and retained for performance of the work and related claims. Accounting and tax documents are retained for the statutory period, usually 5 or 10 years depending on document type (point (c)).

Careers and work enquiries

We process your name, contact details, specialism, experience, availability and any supporting documents to assess a specific working relationship and negotiate a contract (Article 6(1)(b) GDPR). Please send only work-related information; do not send identity documents, personal identification numbers or health data.

If no working relationship is established, we delete the data after discussions end; website records have a maximum retention period of 6 months. Separately and voluntarily, you may consent to retention for future opportunities for 12 months from receipt (point (a)). You can withdraw this consent at any time by email. Refusing consent does not affect consideration of your current enquiry.

Customer reviews

With separate consent, we publish your chosen name, star rating, text, review date and related project (Article 6(1)(a) GDPR). You may use just your first name. Reviews are moderated; approval does not automatically verify the author's identity. We do not publish private contact details or other people's personal data.

You may withdraw consent at info@lzmcompany.cz, identifying the project, date and review text; where necessary, we will reasonably verify authorship. Withdrawal does not affect the lawfulness of earlier processing. Reviews are kept while published, for no longer than 3 years without renewed consent; unapproved submissions are kept for no longer than 90 days.

Website operation and protection against abuse

To limit spam, we use a hidden field, request validation and submission limits. Forms generate a daily fingerprint of an IP address or sign-in identifier; this is not anonymous data. Its purpose is website security (legitimate interest under Article 6(1)(f) GDPR). We remove the fingerprint from website records once it is no longer needed for retries and rate limiting, no later than operational cleanup of records older than 2 days.

Messages and attachments are accessible only to the website owner in the administration area. Attachments are not published. Records are no longer displayed after their retention period; deletion takes place during form and administration activity. The hosting provider may also process operational and security logs under its own terms.

Who may receive your data

Data is processed by authorised LZM Company personnel and, where necessary, providers of hosting, storage, IT and email services; for an agreed project, this may also include accountants or suppliers involved in its delivery. We do not provide data for third-party marketing.

This website runs on ChatGPT Sites (OpenAI) using Cloudflare infrastructure. Enquiries are stored in private records and receipt is confirmed on the page. This version does not send an automatic confirmation email. For direct email contact, processing also takes place in the sender's and recipient's email services.

Hosting may involve processing outside the EU/EEA, particularly in the USA. The scope and applicable safeguards are governed by the provider's contractual terms, including standard contractual clauses or adequacy decisions where applicable to the transfer. You may ask the controller for information about a specific transfer and a copy of the relevant safeguards. Further information: OpenAI privacy policy, OpenAI subprocessors and Cloudflare privacy policy.

Cookies and data on your device

Since 1 November 2026, we have used Google Analytics 4 (Google Ireland Limited) with your consent to measure traffic and website use. Google's measurement script is not loaded without consent. The _ga and _ga_* analytics cookies are set to last up to 180 days. Your choice is stored in this browser for 180 days; you can change it or withdraw consent at any time using Cookie settings. Refusal does not limit website functionality. Advertising personalisation is disabled in our code. We do not intentionally send form contents, contact details or attachments to analytics. For details of Google's data processing, see policies.google.com/privacy. The original downloadable PDF describes the situation before analytics was introduced; this updated page applies to analytics.

Essential technical cookies from hosting and sign-in services may be used for private previews, administration and secure operation. Consent is not required for these essential cookies. Optional analytics runs only with your consent.

Your rights

Subject to the GDPR, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. You can withdraw consent as easily as you give it. These rights have limits; for example, a statutory retention duty may prevent immediate deletion.

We respond without undue delay, usually within one month; we will inform you in good time of any lawful extension and its reason. You may lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7. We do not use website forms for automated decision-making with legal or similarly significant effects, or for profiling.