Privacy Policy
​Last Updated: October 31, 2024
​
1. Data Controller Information
Tamara Medina Business ID (IÄŒO):09523065 Registered Address: Palackeho 69, Podebrady III, 290 01, Czechia Email: tamara@sapovalovasolutions.com
2. Introduction
As an independent consultant based in the Czech Republic, I process personal data in accordance with the General Data Protection Regulation (GDPR) and Czech Act No. 110/2019 Coll., on Personal Data Processing. This privacy policy explains how I collect, use, and protect your personal information.
3. Data Collection
3.1 Information You Provide
I collect and process the following personal data:
-
Name and surname
-
Email address
-
Phone number
-
Company details (if applicable)
-
Billing information
-
Project requirements and specifications
-
Communication history
-
Service feedback
3.2 Automatically Collected Data
When you visit my website, I automatically collect:
-
IP address
-
Browser type and version
-
Cookie data
-
Website usage information
4. Legal Basis and Purpose of Processing
4.1 Contract Performance (Art. 6(1)(b) GDPR)
-
Providing consulting services
-
Managing client relationships
-
Processing payments
-
Delivering project communications
4.2 Legal Obligations (Art. 6(1)(c) GDPR)
-
Maintaining required business records
-
Tax and accounting compliance
-
Responding to legal requests
4.3 Legitimate Interests (Art. 6(1)(f) GDPR)
-
Improving services
-
Website security
-
Preventing fraud
-
Portfolio development
4.4 Consent (Art. 6(1)(a) GDPR)
-
Sending newsletters or marketing materials
-
Using client testimonials
-
Case studies (with anonymization where appropriate)
5. Data Retention
I retain personal data for:
-
Client projects: 5 years after project completion
-
Financial records: 10 years (legal requirement)
-
Marketing communications: Until consent withdrawal
-
Website analytics: 26 months
6. Data Recipients
Your personal data may be accessed by:
-
Accounting service provider
-
Web hosting provider
-
Email service provider
-
Professional advisors (e.g., legal counsel)
-
Government authorities (when legally required)
All service providers are bound by data processing agreements and confidentiality obligations.
7. Your Privacy Rights
Under GDPR, you have the right to:
-
Access your personal data
-
Correct inaccurate data
-
Request deletion of your data
-
Restrict processing
-
Data portability
-
Object to processing
-
Withdraw consent
-
Lodge a complaint with a supervisory authority
I will respond to all requests within 30 days.
8. Cookie Policy
8.1 Essential Cookies
-
Purpose: Website functionality
-
Legal basis: Legitimate interest
-
Cannot be disabled
8.2 Analytics Cookies
-
Purpose: Understanding website usage
-
Legal basis: Consent
-
Can be disabled through cookie settings
8.3 Cookie Control
You can manage cookie preferences through:
-
Cookie consent banner
-
Browser settings
-
My website's cookie settings page
9. Data Security
I implement appropriate security measures including:
-
Data encryption
-
Secure password policies
-
Regular security updates
-
Limited data access
-
Secure data backup
-
Regular security assessments
10. International Transfers
If your data is transferred outside the EU/EEA, I ensure protection through:
-
EU Standard Contractual Clauses
-
Adequacy decisions
-
Appropriate safeguards as required by GDPR
11. Project Confidentiality
All client projects are subject to:
-
Strict confidentiality measures
-
Data minimization principles
-
Purpose limitation
-
Access controls
12. Policy Updates
I may update this policy to reflect:
-
Changes in services
-
Legal requirements
-
Privacy practices
Significant changes will be communicated via:
-
Email notification
-
Website announcement
-
Direct client communication
13. Complaints
You can file a complaint with:
-
Me directly at tamara@sapovalovasolutions.com
-
The Czech Data Protection Authority:
-
Office for Personal Data Protection
-
Pplk. Sochora 27
-
170 00 Prague 7
-
Czech Republic
-
Email: posta@uoou.cz
-
14. Contact Information
For privacy-related queries or to exercise your rights:
-
Response time: Within 2 business days