Privacy Policy
Last updated:
1. Data controller
MS-Energy Management s.r.o.
Registered office: Jízdárna 812, 691 02 Velké Bílovice, Czech Republic
Company ID (IČ): 04677919 | VAT ID (DIČ): CZ04677919
Registered in the Commercial Register maintained by the Regional Court in Brno (please verify the current section and insert number in the ARES register).
E-mail: hello@agiqo.cz
Website: agiqo.cz
AGIQO is a brand of MS-Energy Management s.r.o. This company is the controller of personal data within the meaning of Article 4(7) of Regulation (EU) 2016/679 (the “GDPR”).
The controller has not appointed a data protection officer (DPO), as it is under no obligation to do so. Please send any questions about the processing of personal data to the e-mail address above.
2. What personal data we process and where it comes from
We process only the data you provide to us yourself, or data that arises when you visit the website:
- Contact and identification data – first name, surname, e-mail address, telephone number, company name; provided via the contact form or by e-mail.
- Operational and technical data – IP address, browser type, pages visited, time of access; generated automatically while you browse the site (server logs, analytics tools – only with your consent).
- Communication data – the content of your message and our mutual e-mail correspondence.
We do not work with special categories of personal data (Article 9 GDPR) or with data relating to children under 16. If we discover that such data has been provided to us, we will delete it without delay.
3. Purposes of processing and legal bases
| Purpose of processing | Legal basis (Article 6 GDPR) | Retention period |
|---|---|---|
| Responding to a question / enquiry from the contact form | Legitimate interest of the controller (paragraph 1(f)) or consent (paragraph 1(a)) where the e-mail contains a marketing communication | 3 years from the last contact |
| Performance of a contract / preparation of a quotation | Performance of a contract or steps prior to entering into a contract (paragraph 1(b)) | Duration of the contractual relationship + 5 years |
| Website traffic analytics | Consent (paragraph 1(a)) | Until consent is withdrawn, max. 26 months |
| Marketing communications to existing customers | Legitimate interest of the controller (paragraph 1(f)) – the soft opt-in principle (Section 7(3) of Czech Act No. 480/2004 Coll.) | Until an objection is raised |
| Compliance with legal obligations (tax documents, accounting) | Compliance with a legal obligation (paragraph 1(c)) | 10 years under the Czech Accounting Act |
4. Recipients of personal data
We do not sell or rent personal data to third parties. We pass data only to processors who are contractually bound by the GDPR, and only to the extent necessary for the service in question:
- Vercel, Inc. – website hosting infrastructure; server logs containing IP addresses. A data processing agreement is in place, together with the EU–US standard contractual clauses (SCCs).
- Google LLC (Google Analytics 4) – traffic analytics, only with consent, with IP anonymisation and Consent Mode v2 enabled. SCCs cover the transfer to the USA.
- Meta Platforms Ireland Ltd. (Meta Pixel) – conversion measurement, only with consent. Standard contractual clauses.
- The controller’s accountant / tax adviser – to the extent necessary to comply with legal obligations.
We disclose data to public authorities (the Czech Police, courts, the Czech Data Protection Authority) only where required by law or on the basis of a legitimate request.
5. Transfers of personal data to third countries
Some of the processors listed above (Vercel, Google, Meta) are based in the United States, which is not considered a country providing an adequate level of protection within the meaning of Article 45 GDPR. In line with Article 46(2)(c) GDPR, the transfer is safeguarded by standard contractual clauses approved by the European Commission (Decision 2021/914/EU). We will provide you with a copy on request.
6. Your rights
As a data subject you have the following rights under the GDPR – exercise them in writing at hello@agiqo.cz:
- Right of access (Article 15) – you may request confirmation of whether we process your personal data, and a copy of the data being processed.
- Right to rectification (Article 16) – we will correct inaccurate or incomplete data without undue delay.
- Right to erasure – the “right to be forgotten” (Article 17) – if you request erasure, we will comply unless there is a legal ground for continued retention.
- Right to restriction of processing (Article 18) – for the duration of a dispute or while the accuracy of the data is being verified.
- Right to data portability (Article 20) – we will provide data processed on the basis of consent or a contract in a machine-readable format (JSON or CSV).
- Right to object (Article 21) – whenever you disagree with processing based on legitimate interest or for direct marketing purposes.
- Right to withdraw consent – you can withdraw consent given for analytics or marketing at any time in the cookie settings, without affecting the lawfulness of processing carried out beforehand.
We respond to requests within 30 days at the latest; in complex cases the deadline may be extended by 60 days (with reasons given). Requests must be verifiably identified — to prevent unauthorised access.
7. Right to lodge a complaint with the supervisory authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ)
Pplk. Sochora 27, 170 00 Praha 7, Czech Republic
Website: www.uoou.cz
E-mail: posta@uoou.cz
Tel.: +420 234 665 111
8. Cookies and tracking technologies
Detailed information about cookies, their categories and consent management can be found in the separate Cookie Policy.
9. Security of personal data
All communication is encrypted over HTTPS (TLS 1.2+). Personal data is accessible only to authorised persons. We regularly review our technical and organisational measures in accordance with Article 32 GDPR.
10. Automated decision-making and profiling
No automated decision-making within the meaning of Article 22 GDPR — i.e. producing legal or similarly significant effects for you — takes place on this website. Analytics tools (used with consent) collect aggregated behavioural data to improve the site, not for individual profiling.
11. Changes to this policy
We update this policy from time to time to reflect changes in our processing practices or in legislation. The date of the last update is shown in the header of this document. We will inform you of any material changes by e-mail (where we have your address) or by a notice on the website.