Privacy Policy
I. Introduction
Personal data are processed based on and within the scope permitted by Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as well as by Act No. 110/2019 Coll., on the Processing of Personal Data, as amended, and related regulations.
We monitor compliance with these rules also in the case of personal data processors whom we have authorized to process data on our behalf.
The processing of personal data begins at the moment you express interest in our services — for example, by submitting a contact form, sending an inquiry via email or data box, or by other means such as through social networks, etc. Subsequently, processing continues for the duration of the contract you have entered into with us, for as long as your registration in our applications remains valid, and for the period necessary to exercise your rights.
The lawful processing of customers’ personal data is of great importance to us. We strive to provide all information transparently, clearly, and comprehensibly, particularly in this Privacy Policy for Customers.
We make every effort to ensure the highest possible level of personal data protection, and whenever processing can be minimized or terminated, we do so.
For this reason, this Policy may be updated from time to time. The current version of the Policy is always available on our website at www.spacetrees.cz/Privacy.
If we make substantial changes to this Policy, we will notify you by email.
II. Data Controller
The data controller of customers’ personal data is the company:
SPACETREES s.r.o.
Company ID (IČ): 17901855
Registered office: Na Výšině 3231, 580 01 Havlíčkův Brod, Czech Republic
Registered in the Commercial Register maintained by the Regional Court in Hradec Králové, File No. C 50562.
III. Categories of Personal Data, Purposes of Processing, and Legal Basis
The following categories of personal data may be processed:
Basic data
Name, surname, company name, residence or registered office, username, date of birth of statutory representative, gender, billing address, phone number, email, data box ID, encrypted login password to our applications.
Cadastral data
Cadastral office, cadastral workplace, parcel number, cadastral area, municipality, land register number, area, land type, plot location on the map, GPS coordinates, occurrence and spread of pests in forest stands on the plot over time, occurrence and spread of deforestation on the plot over time, and other data provided as part of the forest management plan (FMP) or other data sources submitted by you when requesting our services or during specification of your inquiry.
Payment data
Bank account number and bank code.
Technical, location, and business data
Internet protocol, IP address, referring URL, date and time of access (log), browser type and operating system, device serial number and model, screen resolution, CPU, amount of data transferred, access status, IP location down to the city level, website addresses from which and to which you navigate, on-site behavior, activity history in our applications, and other information provided in connection with inquiries, service delivery, feedback, or complaints.
Legal data
Company name, registration number (IČ), VAT number (DIČ), registered office, type of purchased service or product, service or product price, VAT rate.
Purposes and legal bases of processing
Basic and cadastral data are processed for the following purposes:
• Processing of aerial imagery, creation of analyses of forest or vegetation conditions on the client’s land (monitoring pest occurrence over time)
• Handling inquiries and managing orders
• Registration on our website and customer profile management
• Sale of services and products
• Confirmation of contract conclusion
• Ensuring delivery of ordered services and products
• Ensuring safe activity on our websites and applications
• Ensuring high-quality analysis, particularly through machine learning and enrichment with newly acquired insights
• Providing a broad range of inputs for comprehensive analyses
→ In order to fulfil our obligations under a contract for work or to enter into such a contract with you, and to enable your access to our applications.
Basic, legal, and payment data are processed for the following purposes:
• Exercising your rights under a contract for work, in particular assessing the (non-)justification of your claims and determining appropriate compensation or other solutions
• Retention of tax documents for tax administration purposes
• Prevention and detection of fraudulent activities
→ To comply with our legal obligations under applicable laws.
Basic and technical data are processed for the following purposes:
• Ensuring smooth use of our applications
• Prevention and detection of fraudulent activities
• Setting language and measurement units according to the country from which you log in
• Conducting satisfaction surveys, marketing research, and subsequent analysis and evaluation for determining future marketing and business strategies (statistics, customer satisfaction ratings, trend analysis, etc.)
• Notifying you of necessary actions within our applications
• Sending commercial offers, such as announcements of new products, new application features, or price list updates, via email or SMS (direct marketing). You may opt out of such communications at any time, completely free of charge, with just “two clicks.”
→ To provide you with a more pleasant and secure user experience in our applications, making it easy to interpret outputs, intuitive to use, and safe.
→ To display results in your preferred language and measurement units.
→ To tailor product offers to your preferences or previous orders (we use only basic-level profiling).
→ To inform you about products or services that may interest you.
→ To notify you of relevant offers and promotions related to products you are most interested in.
(This processing is based on our legitimate interest and can therefore be carried out without your explicit consent.)
CONSENT
Your consent is required for the processing of personal data in cases where we are not authorized to do so by law, contract, or legitimate interest.
Your consent is also required for certain forms of communication, such as email or SMS messages, or for the use of certain technologies under electronic communications laws.
Specifically, your consent applies to:
• Direct marketing / newsletter by email
• If you are not yet our customer, you can subscribe to our occasional newsletter to be informed about upcoming updates and news.
• If you are already our customer, we may send newsletters about similar products or services without requiring a separate request. Each newsletter will always include a free opt-out link.
• Marketing cookies / tracking cookies / retargeting
Personalized advertising tailored to your browsing activity on our website (or other websites or applications). These may appear on third-party websites or apps that use their own cookies or tracking technologies placed on our website. We use only basic-level tools of this kind.
• Analytical and functional cookies
You have the right to refuse their use, as they are not considered essential cookies necessary for the basic operation of our website.
→ Providing consent is entirely voluntary. You may withdraw it at any time, easily and free of charge.
IV. Recipients of Personal Data
Data are shared exclusively with the following entities:
Providers and operators of web platforms, application functionalities, marketing services, and intermediaries
Wix.com Ltd.,
40 Namal Tel Aviv St., Tel Aviv, 6350671, Israel
Privacy Policy: https://www.wix.com/about/privacy
→This company assists us with website creation and provides related applications, such as mailing tools.
Google LLC,
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: https://policies.google.com/technologies/partner-sites?hl=en
→ This company helps us create statistics about our website — for example, determining peak traffic times or most popular pages (via Google Analytics) — and with storing certain documents (Google Drive).
LinkedIn Ireland Unlimited Company,
Wilton Plaza, Wilton Place, Dublin 2, Ireland
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
→ This company helps us analyze and target advertising campaigns on social networks, track visitor interactions with our LinkedIn content, enable retargeting, and measure the effectiveness of company posts and ads, thereby increasing brand awareness and improving communication with professional audiences abroad.
Accounting and tax advisors
STORMWARE s.r.o.,
Za Prachárnou 4962/45, 586 01 Jihlava, Czech Republic
Company ID (IČ): 25313142
Privacy Policy: https://www.stormware.cz/ochrana-osobnich-udaju.aspx
→ This company assists us with accounting; accountants or IT staff may occasionally have access to certain customer data, especially those appearing on tax documents (accounting software Pohoda).
Providers of Artificial Intelligence services
→ We also use artificial intelligence tools for our operations, which primarily work with non-personal data.
Social media providers
→ Instagram Inc., a subsidiary of Meta Platforms, Inc.,
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy Policy: https://help.instagram.com/519522125107875/?helpref=uf_share
→ In exceptional situations, we may wish to use your photograph or video taken with your consent for the presentation of our products or company — for example, in connection with a successful or otherwise noteworthy project. Such processing will always be rare and subject to your consent. (The same applies to LinkedIn.)
Public authorities
For example, tax offices, courts, insolvency administrators, the Czech Police, or others — in cases where such action is required by law.
Other entities
In cases where such disclosure is required by law or when you have authorized us to do so.
For completeness, please note that some of your data (particularly technical and location data) may be processed outside the EU. This occurs because we use services provided by international partners, some of whom operate outside the EU — especially Google, which is based in the United States.
However, your data protection rights remain unaffected, as we are obligated to ensure the same level of protection even outside the EU. This is achieved through standardized contractual clauses and data protection measures.
V. Cookies, Similar Tracking Technologies, and Push Notifications
Cookies and related technologies
Our website, like most others, uses cookies and similar technologies.
Cookies are small text files stored on your computer or mobile device when you visit specific pages. Other tools such as web bugs, tags, tracking pixels, or push notifications may also be used — they differ technically but serve similar functions.
Our website includes both our own tools and those of third parties.
The purpose of cookies is to allow the website to remember your preferences (e.g., username, language, currency, login information) for a certain period.
For you, this means that the website remembers your details during your visit so that you do not need to re-enter them repeatedly.
Cookies also help us collect statistical data about site traffic and may be used by third parties to display relevant advertisements on other websites based on your browsing behavior.
A cookie essentially sends only an identifier to the website, not your name or personal details.
Thus, the recipient of cookie information may only know that your IP address showed interest in, for example, deforestation analysis, and may display related content accordingly.
We use the following categories of cookies:
Necessary cookies
These cookies are essential for the functioning of the website and cannot be disabled. Without them, the website cannot operate safely or properly.
They allow, for instance, registration and login functions or remembering your cookie preferences.
Analytical and statistical cookies
These cookies collect anonymized data about website traffic, peak times, first-time vs. returning visitors, product performance, and trending searches.
Marketing cookies and retargeting
These track which products you view on our website so that relevant ads for our products can appear on other websites.
They also show us which advertisement led you to our site, allowing us to strengthen the most effective campaigns.
Functional cookies
These enable additional features and personalized settings on our website. They may be set by us or by third-party service providers embedded in our site.
If these cookies are disabled, some features may not function properly.
Similar tracking technologies (web bugs, tags, logs)
These technologies perform similar functions to cookies but differ technically and are used only minimally.
Push notifications may be used to remind you, for example, that you did not submit a completed contact form.
You can deactivate this service at any time.
If notifications are enabled, they will be sent to your Push ID / IP address.
We may also use logs that collect data on errors, speed, and system performance.
A detailed list of the cookies we use is available [here].
VI. Retention Period
Basic, cadastral, payment, and legal data are processed for the duration of our contractual relationship and for the period during which you may exercise your rights regarding defective performance.
The maximum retention period is determined by our legal obligation to store tax documents for 10 years, as these typically contain most of your basic, legal, and payment data.
Data obtained through cookies, push notifications, and similar technologies are stored for the duration of their validity:
Most session cookies are active only during your visit; others for about 30 minutes; the longest ones last up to almost two years.
VII. Customer Rights
As our customer, you are a data subject, and under applicable data protection legislation, you have the following rights:
Access to personal data
You may ask whether we process your personal data, which data we hold, and how we process them. You can also request copies of your data.
Rectification of personal data
If your personal data are inaccurate or incomplete, you have the right to have them corrected or supplemented — for example, change of surname, address, email, or phone number.
Objection to processing
You may object to the processing of your personal data when it is based on our legitimate interest.
If your privacy interests outweigh our legitimate interest, processing will be terminated.
Restriction of processing
You have the right to request the restriction of processing, meaning your data will only be stored and separated from other processing activities. This applies when:
• Data are inaccurate
• Processing is unlawful, but you do not wish the data to be deleted
• You need the data for legal claims, while we no longer need them
• Your objection to processing is under review
Erasure of personal data
You have the “right to be forgotten.” We will erase your data if:
• They are no longer needed for their original purpose
• Processing was based on consent that has been withdrawn
• Processing was unlawful
• Legitimate interest no longer applies
• Deletion is required by law
In some cases, we may continue processing if necessary to comply with legal obligations, defend legal claims, or for public interest, research, or archiving purposes.
Data portability
You have the right to transfer your personal data to another controller when processing is based on consent or contract and carried out by automated means.
Data are provided in a structured, commonly used, and machine-readable format.
Withdrawal of consent
When you withdraw your consent, processing based on that consent will stop. This does not affect processing required by law or contract.
Right to lodge a complaint
You may file a complaint with a supervisory authority if you believe your data are being processed unlawfully.
In the Czech Republic, the competent authority is:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů),
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
Website: www.uoou.cz
If you notice any inconsistencies or wish to discuss our processing practices, please contact us — we will make every effort to resolve the issue.
VIII. Possible Consequences of Exercising Customer Rights
We process most customer data because it is required by law or by the contract for work concluded when you accept an order on our website.
Providing your personal data is therefore necessary for us to deliver the contracted services or products.
If personal data are not provided or if you request their deletion, it may become impossible to order products or services, deliver them properly, or identify your inquiry and process warranty claims.
In such cases, data cannot be erased. However, we are ready to discuss and find the most suitable solution with you.
IX. Exercising Your Rights
In connection with the processing of your personal data, you may contact us at any time by:
Email: info@spacetrees.cz
Please write from the email address used in your registration or inquiry.
Phone: +420 605 289 304
Mail:
SPACETREES s.r.o.
Strašnická 3164
102 00 Prague 10
Czech Republic
Include an officially verified signature and mark the envelope with “GDPR / Privacy” for faster handling.
For security reasons, we must verify your identity to ensure that we are providing information to the correct person.
Electronic communication must include a qualified electronic signature.
Requests sent from your registered email address will be accepted as verified.
All requests will be handled carefully and used to improve our privacy practices.
X. Conclusion
This Policy does not apply to third parties; please also review their respective privacy policies.
We are not responsible for any consequences arising from outdated, inaccurate, or incomplete data provided by you.
If you believe this Policy is outdated or inaccurate, please contact us at the email address provided above.