Privacy policy

The controller of the personal data processed in connection with doscale.cz is Filip Rogie, company ID (IČO) 22549986 (the "controller" or "we").

The place of business is listed in the public register, you can look it up by company ID in ARES. How to contact us about personal data is in the Contact section at the end of this page.

We process only the data you give us and the minimum technical data needed to run the website.

Inquiry form (configurator) and contact form

• your name and email address; in the configurator also your company name (company is optional in the contact form)
• phone number and website or Instagram (optional)
• your message and, in the configurator, your choices: what you want to automate, networks, volume, tools, timeline and budget; plus the indicative price range calculated from them
• the language of the page you submitted the form from, and whether it was the configurator or the contact form
• UTM parameters from the link you came through (source, medium, campaign), if the link had any
• the time of submission and the time you confirmed your consent to the processing

Technical data

• The IP address of a submitted form is stored only as an encoded fingerprint (hash), not in readable form. It is used to limit the number of submissions (5 per hour) so the site cannot be flooded.
• Hosting (Vercel) processes ordinary technical request logs (for example IP address, time, page address and browser type) to keep the site running and secure.
• Anonymous visit statistics without cookies, see Cookies and analytics.

We do not need special categories of data (for example health data) and do not ask for them. Please do not include them in your message.

• Handling your inquiry or question, including the automatic reply and a possible proposal. The legal basis is negotiating a contract at your request (Art. 6(1)(b) GDPR) and the consent you confirm in the form (Art. 6(1)(a) GDPR).
• Performing a contract and legal obligations, if we end up working together: invoicing, accounting and taxes (Art. 6(1)(b) and (c) GDPR).
• Protecting the website from abuse: submission limits, hidden fields against bots and technical logs. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
• Anonymous visit statistics, so we know which pages are read and what to improve. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The statistics do not use cookies.
• Establishing and defending legal claims, should that be needed. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before it. Without processing we cannot handle your inquiry.

Providing data in the form is voluntary, but the form cannot be submitted without the required fields (name, email, message, and in the configurator also company).

We do not use data from the forms to send newsletters or marketing messages, for automated decision-making or for profiling.

• Inquiries and correspondence that do not lead to a contract: 3 years from the last contact, after which we delete or anonymise the data.
• Contracts, invoices and accounting and tax records, if we work together: for the period set by law (typically 5 to 10 years for accounting and tax records).
• Record of consent: for as long as the inquiry itself.
• IP address fingerprint for the submission limit: in the order of hours. The limit window is one hour and older records are deleted the next time the form is used.
• Hosting technical logs: short term, according to the hosting provider's settings.
• Data in your browser's memory (a form in progress): only until you close the tab, see Cookies and analytics.

On your request we delete data sooner, unless a legal obligation or the need to defend a legal claim prevents it.

We do not sell your data or pass it to third parties for their own purposes. To run the website and handle inquiries we use providers that process data for us:

• Vercel Inc.: website hosting and anonymous visit statistics.
• Database provider (Neon, operated through Vercel): the database where submitted inquiries are stored.
• Resend: sending email, that is the notification of a new inquiry to the controller and the automatic reply to you.
• Make.com: an automation platform. After a form is submitted, the inquiry travels through it to the controller's tools.
• Telegram and Notion: the controller's tools. Telegram receives a notification about a new inquiry and Notion keeps a record of inquiries. Only the controller has access to them.

We may further disclose data to advisers (for example an accountant or a lawyer) and to public authorities where the law requires it or where needed to defend legal claims.

Transfers outside the EU. Some of these providers are based or process data outside the European Union, mainly in the USA. Where a transfer applies, it relies on a European Commission adequacy decision (the EU-US Data Privacy Framework, for certified recipients) or on the European Commission's standard contractual clauses.

Under the GDPR you have the right to:

• access the personal data we process about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure of data where there is no reason to keep processing it (Art. 17),
• restriction of processing (Art. 18),
• data portability for the data you gave us (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw consent at any time, as easily as you gave it (Art. 7(3)),
• lodge a complaint with the supervisory authority, the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), www.uoou.cz.

You can send a request using the contact details in the Contact section. We will reply within one month at the latest; in complex cases the period can be extended and we will tell you. To keep data from reaching the wrong person, we may ask you to verify your identity.

This website does not use any cookies that require your consent. We use no advertising, marketing or analytics cookies and do not track you across websites. That is why there is no cookie banner.

The website stores only these things to work:

• Configurator in progress (doscale.configurator.v1, sessionStorage in your browser). Purpose: if you refresh the page, you do not lose the steps you filled in. It may include contact details you started typing into the form. Type: functional, necessary for a service you requested. It stays only in your browser and is not sent to the server; it is deleted after you submit the inquiry and disappears when you close the tab.
• Origin of your visit (doscale.utm.v1, sessionStorage). Purpose: remembers the UTM parameters from the link you came through, so they are sent with your inquiry after you click through to the form. Type: functional. Lasts until you close the tab.
• Animation quality switch (doscale:motion-tier, sessionStorage). It is created only if you add the ?tier= parameter to the address by hand. An ordinary visitor does not have it. Type: functional. Lasts until you close the tab.
• Admin sign-in (cookies authjs.session-token, authjs.csrf-token and authjs.callback-url, with the __Secure- or __Host- prefix on HTTPS). They are set only when the controller signs in to the admin area, not for website visitors. Type: strictly necessary. A sign-in lasts at most 8 hours.

Analytics. We measure traffic with Vercel Web Analytics. It works without cookies and without a persistent identifier, the data is aggregate (pages viewed, referring site, country, device type and browser) and is not used to identify individual visitors.

The content of the website (fonts, images, scripts) is loaded from Vercel hosting and media storage, with no embedded social networks, advertising or third-party tracking tools.

You can clear your browser storage at any time in its settings. The website keeps working, it just will not remember a form in progress.

For questions about personal data and to exercise your rights, contact us:

• Controller: Filip Rogie, company ID (IČO) 22549986
• Phone: 720 542 487
• Email: doscalecz@gmail.com
• Contact form