Privacy Policy
Effective date: September 6, 2026
1. Data Controller
Znalecká kancelář Lidinský Mašín s.r.o., Company ID 08622515, VAT ID CZ08622515, with its registered office at Na Bateriích 822/9, Prague 6 – Střešovice, 162 00, Czech Republic (the “Controller”). Contact: info@zklm.cz.
2. Scope and Purpose
This website (www.zklm.cz) provides information about our services, team, and selected clients. We process only the minimum personal data necessary to operate the website and measure its use.
2.1 Automatically processed data
- Technical browser information (browser type, language, and screen resolution) — used only while the page is running and not stored by us.
- Usage statistics collected through Google Analytics 4 (pseudonymous identifier, language, traffic source, and time on page) — only with your consent.
- Browser localStorage — ZKLMvaders may store a high score (key
zklm_hi). ZKLMxeso does not write anything to storage. This information never leaves your browser.
2.2 Data you send us
If you contact us by email (info@zklm.cz or an expert's individual email address), we process the information you provide, such as your name, email address, and message. We use this information to respond to your inquiry and, where applicable, take steps toward entering into a contract. The legal bases are Article 6(1)(b) of the GDPR (performance of a contract or steps taken before entering into a contract) and Article 6(1)(f) of the GDPR (our legitimate interest in communicating with you).
3. Cookies and similar technologies
The website uses two categories of cookies and similar technologies:
- Necessary — functional browser storage used to remember your choices regarding the map and analytics. This storage is necessary to retain your choices and provide the related features. The legal basis is Article 6(1)(f) of the GDPR (our legitimate interest in operating the website).
- Analytics (optional) — Google Analytics 4, provided by Google Ireland Limited. It collects pseudonymous usage statistics and is loaded only after you explicitly opt in through the cookie banner. You can withdraw your consent at any time using the button below.
4. Map embed
The Contact section can display an embedded Google Map. The map loads from maps.google.com only after you click the consent button. Without your consent, the embedded map does not load and no data is sent to Google's servers. Once you consent, Google may process your IP address and other technical information as described in Google's Privacy Policy.
5. Sharing with third parties
We disclose personal data only to the following recipients:
- Google Ireland Limited (analytics and maps) — only with your consent.
- Our web hosting provider — maintains standard server logs containing the IP address, time, and requested URL for the period strictly necessary for operation and security.
Google may also process personal data in the United States under the EU-U.S. Data Privacy Framework and standard contractual clauses under Article 46(2) of the GDPR. We do not transfer personal data to third countries outside this framework.
6. Retention
- Cookie and analytics choices: 12 months, after which we ask you again.
- Email communications: for as long as necessary for the purpose of the communication, up to the duration of the contractual relationship plus 10 years, where retention is required by Act No. 254/2019 Coll. on Experts.
- Google Analytics: 14 months by default; this period can be changed in the Google Analytics settings.
7. Your rights
As a data subject you have the right to:
- Obtain access to your personal data and information about how we process it.
- Request correction of inaccurate personal data.
- Request deletion (the “right to be forgotten”) when the personal data is no longer needed or has been processed unlawfully.
- Request restriction of processing.
- Receive your data in a portable format where the right to data portability applies.
- Object to processing based on our legitimate interests.
- Withdraw your consent at any time using the button above or your browser settings.
- Lodge a complaint with the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, Czech Republic).
You can exercise your rights by emailing info@zklm.cz. We will respond without undue delay and no later than one month after receiving your request.
8. DPO, profiling, breach notification
- Data Protection Officer (DPO): We have not appointed a DPO because we have determined that Article 37 of the GDPR does not require us to do so. For data protection matters, contact info@zklm.cz.
- Profiling and automated decision-making: We do not conduct profiling or automated decision-making within the meaning of Article 22 of the GDPR.
- Breach notification: If a personal data breach is likely to result in a risk to your rights, we will, where feasible, notify the Office for Personal Data Protection within 72 hours after becoming aware of it (Article 33 of the GDPR). If the breach is likely to result in a high risk, we will also notify the affected individuals directly (Article 34 of the GDPR).
9. Security
The website runs exclusively over HTTPS, with HSTS configured for one year and including subdomains. Communications with Google Analytics 4 and Google Maps are encrypted. We do not collect special categories of personal data under Article 9 of the GDPR through this website.
10. Changes
We may update this policy. The current version is always published on this page with the effective date. We will notify you of material changes via the cookie banner.