Privacy Policy
1. Controller
The Specialist s.r.o.
Company ID / IČO: 05989183
Registered office: Kurzova 2222/16, 155 00 Praha 5, Czech Republic
SPECIALIST ENGINEERING LAB is a business division of The Specialist s.r.o.
Contact for privacy and enquiry matters: info@specialistengineeringlab.com, phone +420 775 757 068.
2. Scope
This policy covers personal data processed via the Specialist Engineering Lab website, contact form, related consultation requests, and essential technical operation of the site.
3. Categories of data
- Identity and contact data: name, company, business email, phone (optional unless phone contact is preferred), position (optional).
- Enquiry content: selected engineering challenge / service, project timeline, preferred contact method, project description.
- Attribution data: UTM parameters, landing page path, HTTP referrer where provided by the browser, and a derived lead-source label for sales follow-up.
- Technical/security data: CSRF session identifiers, rate-limit and idempotency tokens, security logs (without unnecessary personal content).
- Consent preferences for optional cookies when the visitor uses the cookie banner.
4. Purposes and legal bases
- Responding to engineering enquiries and arranging calls/audits/projects — steps prior to entering into a contract / legitimate interest in handling B2B enquiries (Art. 6(1)(b) and/or 6(1)(f) GDPR — final basis to be confirmed by counsel).
- Securing the website and preventing abuse — legitimate interest in IT security.
- Optional analytics — only if enabled in production and after valid consent (Art. 6(1)(a)). Analytics are currently disabled on staging/preview.
The website form uses an acknowledgement checkbox confirming that the visitor has been informed about this Privacy Policy. It is not marketing consent and does not subscribe the visitor to newsletters.
5. Recipients
Internal business development and engineering staff of The Specialist s.r.o. Hosting and infrastructure providers acting as processors as necessary to operate the website and store enquiry records. Email delivery providers if SMTP notifications are enabled. No sale of personal data.
6. Retention
Proposed (pending operator approval): unanswered enquiries retained for up to 24 months; opportunities retained according to commercial record-keeping needs; security logs retained for a shorter operational period. Exact retention must be confirmed before production reliance.
7. International transfers
Primary hosting is intended within the EU/EEA. If a processor outside the EU/EEA is used, appropriate transfer safeguards will be applied and this policy will be updated.
8. Automated decision-making
No automated decision-making producing legal or similarly significant effects is performed on enquiry data.
9. Your rights
You may request access, rectification, erasure, restriction, portability, or objection where applicable under GDPR, and withdraw consent for optional analytics where consent is the legal basis. You may lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), www.uoou.cz.
10. Cookies
See the Cookie Policy.