HOW THIS WEBSITE HANDLES DATA

Privacy notice

We explain which data the website and enquiry form process, why we need it and what we do not store.

Who processes your data

The controller is APPSEC, s.r.o., Thámova 166/18, 186 00 Prague 8 – Karlín, Company ID 05542812. Please send personal data questions to info@appsec.cz.

Enquiry form data

We process the information you enter: your name, email, optional organisation and phone number, selected topic and message. We use it to respond to your enquiry and for related business communication. Please do not send passwords, source code, reports or other sensitive information through the form.

Submitting the form does not provide marketing consent or subscribe you to a newsletter.

What the website database stores

We do not store enquiry content in the website database. It holds technical counters and HMAC records that prevent duplicate submission, articles and administrator accounts (name, email, role and password hash). If a form error occurs, the entered information is temporarily kept in the session so you do not need to enter it again.

Technical form records are automatically deleted after 90 days; expired counters are removed during the next daily cleanup at the latest.

Cookies, logs and third parties

The website uses no analytics or marketing trackers. The form uses a necessary session cookie for CSRF protection and a one-time submission confirmation. Fonts, scripts and images load from the same domain. Your browser remembers your animation preference in local storage; the website does not transmit it elsewhere.

APPSEC operates the website and email on its own infrastructure. To handle enquiries, we process data for steps prior to entering into a contract or, where applicable, on the basis of our legitimate interest in communicating with an organisation's contact person. Security logs serve our legitimate interest in protecting operations. We keep enquiries for as long as needed to handle them and any subsequent cooperation; documents subject to a legal retention obligation are kept for the statutory period. Technical logs are retained for as long as necessary to maintain security and fulfil applicable legal obligations.

Your rights

You may exercise the rights available to you under the General Data Protection Regulation, including access, rectification, erasure, restriction of processing, portability and objection where applicable. You may also lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.