Privacy notice
How Surman s.r.o. handles enquiry details and personal data in client workbooks: purposes, retention periods, service providers and your rights.
Controller and contact
The controller is Surman s.r.o., company ID 29267421, VAT ID CZ29267421, Rooseveltova 1011/39, 669 02 Znojmo, registered with the Regional Court in Brno, section C, file 69484. Contact: jaroslav@surman.cz, +420 604 246 990. No data protection officer has been appointed.
Enquiry data
We process your name, email, optional phone and company details, message, IP address and enquiry source page. The purposes are responding, arranging an assignment and preventing form abuse. The legal basis is our legitimate interest in responding and protecting the service; for contracted assignments, it is performance of the contract.
Enquiries that do not lead to an assignment and their IP addresses are deleted within 13 months. Web access logs are kept for 30 days. Assignment records are kept during performance and for statutory accounting and tax retention periods. Mailbox correspondence is retained for 2 years; server backups for 7 days.
The website does not use advertising tracking or analytics cookies.
Data in client workbooks
For personal data within a supplied workbook, your company is the controller and Surman s.r.o. is the processor acting on your instructions. We conclude an agreement under Article 28 GDPR before transfer. We recommend discussing replacement of unnecessary personal data while preserving structure and data types.
We delete the file copy and working data within 30 days of report delivery unless agreed otherwise. We do not upload client files to public AI services.
Access and service providers
Assignments are handled by Jaroslav Surman. We do not use additional individual subcontractors for the specialist work. The website and form are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its Helsinki data centre in Finland. This server receives form data, not client workbooks.
Email is provided by Webglobe, s.r.o., Pobřežní 620/3, 186 00 Prague 8, using servers in Czechia. Correspondence and any encrypted attachments pass through this provider. Both providers are based in the EU and store the data processed here in the EU. Telegram notifications contain no personal data.
Your rights
Subject to GDPR conditions, you have rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. Contact jaroslav@surman.cz to exercise them. We reply within one month and will inform you of any extension and its reasons.
You may lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 727/27, 170 00 Prague 7.