Back to the home page

Privacy Policy

Valid and effective from: 17 August 2026

We take your privacy seriously. On this page we explain what personal data we process, why we process it, how long we keep it, who we may share it with and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 110/2019 Coll., on Personal Data Processing, Act No. 480/2004 Coll., on Certain Information Society Services, and Section 89 of Act No. 127/2005 Coll., on Electronic Communications, which governs the storage of cookies.

1. Who is the controller of your personal data

The controller of your personal data is:

  • Controller: Technocrane s.r.o.
  • Registered office: Podnikatelská 1131/19, Skvrňany, 30100 Plzeň, Czech Republic
  • Company ID: 26353458
  • VAT ID: CZ26353458
  • Legal form: limited liability company
  • Registration: File No. C 14852 kept by the Regional Court in Plzeň
  • E-mail: admin@supertechno.com

The controller has not appointed a data protection officer (DPO), as it is not legally required to do so.

2. What personal data we process

We process only data you provide to us yourself (for example in forms on the website or when communicating with us) and data generated by your use of this website. This mainly covers:

  • identification and contact details (first and last name, e-mail, phone),
  • the content of your communication (the text of your enquiry or request),
  • billing and delivery details (for orders),
  • technical data about your use of the website (cookies, IP address, device and browser type) — analytics and marketing data only with the consent you give in the cookie banner.

We obtain personal data directly from you. From public sources (such as the commercial or trade register) we may only verify the billing details of business entities.

We do not process any special categories of personal data (sensitive data) and our website is not intended for children under 16.

3. Why we process data and on what legal basis

We always process your data for a specific purpose and on the corresponding legal basis under Article 6 GDPR.

Handling an enquiry or request

We process your name, e-mail, phone (if provided) and the content of your message in order to handle your enquiry or request sent via the form, by e-mail or by phone. Data submitted through the form on this website is stored in a secure database of our web platform provider (see "Who we may share personal data with"). The legal basis is taking steps prior to entering into a contract or performing a contract (Article 6(1)(b) GDPR), or our legitimate interest in communicating with those interested in our services and in protecting our legal claims (Article 6(1)(f) GDPR).

Orders and their fulfilment

We process your name, contact, delivery and billing details and order information in order to fulfil the order, deliver the goods or service, handle related communication and process complaints. The legal basis is performance of a contract (Article 6(1)(b) GDPR).

Compliance with legal obligations

We process billing details and tax documents in order to comply with obligations imposed on us by law (accounting, taxes, archiving). The legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).

Cookies, analytics and marketing

We use cookies and similar technologies on the website (including browser local storage). Necessary (technical) cookies provide the basic functionality of the website and we use them on the basis of our legitimate interest in its proper operation. We activate analytics cookies only on the basis of the consent you give in the cookie banner (Article 6(1)(a) GDPR).

The website is also technically prepared for the possible use of marketing and advertising tools, for example for conversion tracking, remarketing, building advertising audiences or ad personalisation. Such marketing tools and cookies can only run on the basis of your consent to the marketing category in the cookie banner (Article 6(1)(a) GDPR). If you do not give consent, no marketing scripts will run and no marketing cookies will be created.

We store your cookie consent (or its refusal) together with the date and scope of your choices so that we can document how it was given. You can change your settings or withdraw your consent at any time .

Security and operational logs

To ensure the security and stability of the website we process server operational and security logs (in particular the IP address, time of access and browser type). The legal basis is our legitimate interest in protecting the website against misuse and attacks (Article 6(1)(f) GDPR).

4. Who we may share personal data with

We do not sell your personal data, nor do we pass it to third parties for their own marketing. To operate the website and provide our services we use vetted partners (processors) who access the data only to the extent necessary and on the basis of a data processing agreement:

  • Platform operation and web hosting: Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden (the Lovable platform)
  • Database and storage of form data: Supabase, Inc. (USA) — infrastructure operated on Amazon Web Services (AWS) servers in a region determined by the web platform provider
  • Website development and maintenance: Mravenci na online s.r.o., Company ID 06094953, Na Jíkalce 2906/19a, 301 00 Plzeň, and ANT studio s.r.o., Company ID 29113229, Slovanská alej 2182/30, 326 00 Plzeň
  • Accounting and tax services: the controller's external accountant and tax adviser
  • Visitor behaviour analysis: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft Clarity) — the tool runs solely after consent to the analytics category is given; until you give consent, or while the website does not use this tool, no data is transferred to it
  • Payment gateway provider: Stripe Payments Europe, Limited (Ireland) — payment takes place on the provider's secure page; card details never reach this website and we have no access to them

If we activate marketing and advertising tools in the future, their operators may also become processors. Any such transfer will take place only within the scope of your consent to the marketing cookie category, and we will update this list accordingly.

We may also disclose your personal data to public authorities where required by law.

5. Transfers of personal data outside the EU/EEA

We process your data primarily within the European Union and the European Economic Area (EU/EEA). Data submitted through the forms on this website is stored in a data centre in a region determined by the web platform provider; the database infrastructure is operated by the US company Supabase, Inc.

Where processing involves a transfer of data outside the EU/EEA — typically to the USA — we ensure GDPR compliance through a European Commission adequacy decision (the EU–US Data Privacy Framework), standard contractual clauses (SCCs) approved by the European Commission, or other appropriate safeguards under Article 46 GDPR.

6. How long we keep personal data

We keep data only for as long as necessary for the given purpose:

  • Enquiries and requests: no more than 1 year from the last communication (if no contract is concluded)
  • Contracts and orders: for the duration of the contract and thereafter for the statutory limitation periods
  • Accounting documents: 5 years (the Accounting Act); tax documents: 10 years (the VAT Act)
  • Cookie consent record: 12 months from being given, or until it is changed
  • Operational and security logs: usually no more than 12 months
  • Analytics and marketing cookies: as set in the cookie banner, usually no more than 2 years

Once these periods expire, we erase or anonymise the data.

7. Is providing personal data mandatory?

Providing data is voluntary. In some cases, however, it is necessary in order to provide the service — without contact details we cannot answer your enquiry, and without billing details we cannot process your order. Consent to analytics and marketing cookies is entirely voluntary — the website works without it and refusing it has no consequences for you.

8. Automated decision-making and profiling

We do not carry out automated decision-making that would have legal or similarly significant effects for you.

The website is technically prepared for the possible use of marketing and remarketing tools. If these tools are activated, profiling for marketing purposes may take place, for example conversion tracking, building advertising audiences, remarketing or ad personalisation. Such processing takes place solely on the basis of the consent you give in the cookie banner and you can end it at any time by withdrawing that consent.

9. How personal data is secured

We have adopted appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse — in particular encrypted data transfer (HTTPS), encrypted storage in the database, access rights management, regular updates and backups. Only authorised persons bound by confidentiality have access to personal data.

10. What rights you have

In connection with the processing of personal data you have the following rights:

  • the right of access to your personal data,
  • the right to rectification of inaccurate or incomplete data,
  • the right to erasure ("the right to be forgotten"), where the statutory conditions are met,
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to processing based on legitimate interest; you may object to processing for direct marketing purposes at any time and we will always comply,
  • the right to withdraw consent at any time — withdrawal does not affect the lawfulness of processing carried out before it,
  • the right to lodge a complaint with a supervisory authority.

You can exercise your rights by e-mail or in writing using the contacts listed below. We handle requests free of charge, no later than one month from receipt; in complex cases we may extend this period by a further two months, of which we would inform you. To protect your data we may ask you to verify your identity.

The supervisory authority in the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 727/27, 170 00 Prague 7, www.uoou.gov.cz.

11. How to contact us

To exercise your rights or with any question about personal data protection, please contact us:

  • E-mail: admin@supertechno.com
  • Address: Technocrane s.r.o., Podnikatelská 1131/19, Skvrňany, 30100 Plzeň, Czech Republic

12. Updates to this policy

We update this policy from time to time, in particular if the way we process personal data or the tools we use change. The current version is always available on this page; the date of the last update is shown at the top.

Back to the home page