Privacy Policy

01 Data controller

This policy explains how we process personal data of visitors to qlo.cz / qlo.sk and of customers of our virtual server hosting.

02 Categories of personal data

• Order & contact form data — name, email address, phone number, billing address, and the content of your message or order.
• Billing data — invoicing details and payment records.
• Technical data — web server access logs (IP address, time, requested URL, user agent) and operational logs of the hosting platform, including the IP addresses assigned to your server.
• Cookies — see our cookie policy.

We do not access the contents of your virtual server except where necessary to resolve an incident at your request or where required by law.

03 Purposes and legal bases

• Handling orders and providing the service — performance of a contract (Art. 6(1)(b) GDPR).
• Answering inquiries — our legitimate interest in responding to you (Art. 6(1)(f)).
• Invoicing and accounting — legal obligation (Art. 6(1)(c); Czech accounting and VAT law).
• Security and abuse prevention (logs, rate limiting) — legitimate interest (Art. 6(1)(f)).

04 Recipients and processors

• SMTP2GO — transactional email delivery (form notifications, service email).
• Datacenter and connectivity providers in the EU hosting our infrastructure.
• Accounting and tax advisors where required for our statutory obligations.
• Google Fonts — this website loads fonts from Google's servers, which technically discloses your IP address to Google LLC when the page loads.

We do not sell personal data or share it for third-party marketing.

05 International transfers

Our servers and your data are located in the European Union. Where a processor (such as our email delivery provider) processes limited data outside the EU/EEA, the transfer is protected by an adequacy decision or EU standard contractual clauses.

06 Retention

• Contract and service data — for the duration of the contract and limitation periods thereafter.
• Invoicing records — up to 10 years (statutory retention).
• Inquiries that do not lead to a contract — up to 1 year.
• Web and security logs — typically no more than 12 months.

07 Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. Write to info@qlo.cz. You may also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

08 Whether provision is required

Providing the order data is a contractual requirement — without it we cannot set up and invoice your server. All other data (e.g. contact-form inquiries) is provided voluntarily.

09 Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

10 Contact

info@qlo.cz