top of page

Privacy Policy

​Last Updated: October 31, 2024

​

1. Data Controller Information

Tamara Medina Business ID (IÄŒO):09523065  Registered Address:  Palackeho 69, Podebrady III, 290 01, Czechia  Email: tamara@sapovalovasolutions.com 

2. Introduction

As an independent consultant based in the Czech Republic, I process personal data in accordance with the General Data Protection Regulation (GDPR) and Czech Act No. 110/2019 Coll., on Personal Data Processing. This privacy policy explains how I collect, use, and protect your personal information.

3. Data Collection

3.1 Information You Provide

I collect and process the following personal data:

  • Name and surname

  • Email address

  • Phone number

  • Company details (if applicable)

  • Billing information

  • Project requirements and specifications

  • Communication history

  • Service feedback

3.2 Automatically Collected Data

When you visit my website, I automatically collect:

  • IP address

  • Browser type and version

  • Cookie data

  • Website usage information

4. Legal Basis and Purpose of Processing

4.1 Contract Performance (Art. 6(1)(b) GDPR)

  • Providing consulting services

  • Managing client relationships

  • Processing payments

  • Delivering project communications

4.2 Legal Obligations (Art. 6(1)(c) GDPR)

  • Maintaining required business records

  • Tax and accounting compliance

  • Responding to legal requests

4.3 Legitimate Interests (Art. 6(1)(f) GDPR)

  • Improving services

  • Website security

  • Preventing fraud

  • Portfolio development

4.4 Consent (Art. 6(1)(a) GDPR)

  • Sending newsletters or marketing materials

  • Using client testimonials

  • Case studies (with anonymization where appropriate)

5. Data Retention

I retain personal data for:

  • Client projects: 5 years after project completion

  • Financial records: 10 years (legal requirement)

  • Marketing communications: Until consent withdrawal

  • Website analytics: 26 months

6. Data Recipients

Your personal data may be accessed by:

  • Accounting service provider

  • Web hosting provider

  • Email service provider

  • Professional advisors (e.g., legal counsel)

  • Government authorities (when legally required)

All service providers are bound by data processing agreements and confidentiality obligations.

7. Your Privacy Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict processing

  • Data portability

  • Object to processing

  • Withdraw consent

  • Lodge a complaint with a supervisory authority

I will respond to all requests within 30 days.

8. Cookie Policy

8.1 Essential Cookies

  • Purpose: Website functionality

  • Legal basis: Legitimate interest

  • Cannot be disabled

8.2 Analytics Cookies

  • Purpose: Understanding website usage

  • Legal basis: Consent

  • Can be disabled through cookie settings

8.3 Cookie Control

You can manage cookie preferences through:

  • Cookie consent banner

  • Browser settings

  • My website's cookie settings page

9. Data Security

I implement appropriate security measures including:

  • Data encryption

  • Secure password policies

  • Regular security updates

  • Limited data access

  • Secure data backup

  • Regular security assessments

10. International Transfers

If your data is transferred outside the EU/EEA, I ensure protection through:

  • EU Standard Contractual Clauses

  • Adequacy decisions

  • Appropriate safeguards as required by GDPR

11. Project Confidentiality

All client projects are subject to:

  • Strict confidentiality measures

  • Data minimization principles

  • Purpose limitation

  • Access controls

12. Policy Updates

I may update this policy to reflect:

  • Changes in services

  • Legal requirements

  • Privacy practices

Significant changes will be communicated via:

  • Email notification

  • Website announcement

  • Direct client communication

13. Complaints

You can file a complaint with:

  1. Me directly at tamara@sapovalovasolutions.com

  2. The Czech Data Protection Authority:

    • Office for Personal Data Protection

    • Pplk. Sochora 27

    • 170 00 Prague 7

    • Czech Republic

    • Email: posta@uoou.cz

14. Contact Information

For privacy-related queries or to exercise your rights:

  • instagram-rounded-filled.256x256
  • circle-facebook.256x255
  • LinkedIn
bottom of page