1. Data controller
The controller of your personal data is USPIN s.r.o., with its registered office at Do Dolnic 124, 104 00 Prague 10, Company ID 065 20 545, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 283550.
In matters of personal data protection, you can contact us by e-mail at info@uspin.cz or by telephone at +420 737 385 475.
2. Scope of personal data processing
We process only personal data that you provide to us in connection with our business activities, i.e. custom software development and related IT services, or that arise from the operation of this website.
We process the following personal data:
- identification data, meaning in particular your first name and surname, business name, company ID and VAT number;
- contact data, meaning in particular your e-mail address, telephone number and address;
- data about contracts and projects, in particular about the subject of performance, billing and payment data;
- the content of your communication with us, in particular by e-mail or telephone;
- data of applicants for employment or cooperation, in particular your CV and other data you provide to us during the selection process;
- technical data about access to the website, i.e. IP address, date and time of access, the requested page and browser identification, which are recorded automatically by the server.
3. Reasons for processing personal data
As part of our activities, we process personal data either without your consent on the basis of the performance of a contract, on the basis of our legitimate interest, in order to comply with a legal obligation, or on the basis of your consent. Which processing we may carry out without your consent depends on the purpose of the processing concerned and on the position in which you deal with us.
We process your personal data for various purposes depending on the specific situation:
- If you visit our website, the server processes technical access data in order to ensure the secure and reliable operation of the website.
- If you enter into a contract with us, we use your data to perform it, to protect our legal claims and to fulfil our legal obligations.
- If you contact us by e-mail or telephone, we use your data to handle your enquiry, prepare an offer and for mutual communication.
- If you apply for a job or cooperation, we use your data to assess your application.
4. If you visit our website
Our website does not use cookies or similar technologies, does not measure traffic and contains no analytical, advertising or other third-party tools. All parts of the website, including fonts and icons, are stored on our server, so your data are not passed on to other parties when you visit the website.
The server on which the website is operated automatically records technical data about access (IP address, date and time of access, the requested page and browser identification). We process these data on the basis of our legitimate interest (i.e. without your consent) in order to prevent attacks on our website and to ensure its security and functionality. The records are kept only for the limited period necessary for this purpose.
4.1 If you enter into a contract with us
If you enter into a contract with us, for example for software development or the provision of IT services, we carry out the following processing:
4.1.1 Processing on the basis of the performance of a contract
We process your identification and contact data and data about contracts and projects for the purpose of performing the contract, in particular for:
- delivering the ordered services and supplies;
- communication related to the performance of the contract;
- invoicing and payments;
- handling complaints and your other requests.
For this purpose, we keep personal data for the duration of the contractual relationship and thereafter for the periods set by statutory time limits (e.g. 10 years for tax documents) or for the period strictly necessary to handle your request, extended by 2 years for the purposes of legal protection and the possible handling of complaints.
4.1.2 Processing on the basis of legitimate interest
If you enter into a contract with us, we keep your identification and contact data and data about contracts on the basis of our legitimate interest (without your consent) for the purpose of protecting legal claims and our internal records and control. Our legitimate interests here are the protection of legal claims and checking the proper provision of our services. On this basis, we process personal data for the duration of the 3-year limitation period and one year after its expiry, with regard to claims asserted at the end of the limitation period. If judicial, administrative or other proceedings are initiated, we process your personal data to the extent necessary for the entire duration of such proceedings and for the remaining part of the limitation period after their conclusion.
You have the right to object to processing based on our legitimate interest.
4.1.3 Processing on the basis of legal obligations
We must process your personal data and provide them to state authorities on the basis of an obligation laid down by law. On this legal basis, we process your identification and contact data and data about contracts, in order to comply in particular with the following laws:
- Act No. 89/2012 Coll., the Civil Code,
- Act No. 235/2004 Coll., on Value Added Tax,
- Act No. 563/1991 Coll., on Accounting.
For these purposes, we use personal data for a maximum of 10 years from the issue of the last document.
4.2 Communication by e-mail and telephone
If you communicate with us by e-mail or telephone, we will process your identification and contact data and records of the communication on the basis of our legitimate interest (i.e. without your consent) for the purpose of:
- handling your requests; if you are our customer and your request relates to a contract, we may carry out this processing on the basis of the performance of a contract with you;
- keeping records of your requests so that we can check that we handle them properly and on time;
- proving that we have received and handled your request, e.g. when you order our services this way;
- analysing them to improve the quality of our services.
For these purposes, we keep personal data for 1 year. If you enter into a contract with us this way, we may keep the data for the protection of legal claims for the duration of the 3-year limitation period and one year after its expiry, with regard to claims asserted at the end of the limitation period. If judicial, administrative or other proceedings are initiated, we process your personal data to the extent necessary for the entire duration of the proceedings and for the remaining part of the limitation period after their conclusion.
You have the right to object to processing based on our legitimate interest.
4.3 If you apply for a job or cooperation
If you apply for one of the positions offered, we process your CV and other data you provide to us for the purpose of the selection process. The legal basis is taking steps at your request prior to entering into a contract.
If you are not selected, we will delete your data after the selection process ends, unless you give us your consent to keep them for possible future offers. In that case, we will keep them for 2 years or until you withdraw your consent.
5. How long do we process your personal data?
First and foremost, we will process your data for the entire duration of our contractual relationship. We would also like to point out that personal data necessary for the proper fulfilment of our obligations, whether these obligations arise from a contract between us or from generally binding legal regulations, must be processed regardless of your consent for the period set by the relevant legal regulations or in accordance with them (e.g. at least 10 years for tax documents).
We keep personal data processed on the basis of your consent for the period stated in the consent, but no longer than until it is withdrawn. You can withdraw your consent at any time by e-mail at info@uspin.cz.
6. From which sources do we obtain personal data?
We obtain personal data directly from you, in particular during mutual communication, when negotiating and performing a contract or during a selection process. Technical data about access to the website are recorded automatically by the server. If we have approached you ourselves as a potential customer, we obtain your contact data from public company profiles and websites.
In connection with the performance of a contract, we may receive additional payment data from banks, for example confirmation of a successful payment.
7. Who processes your personal data and to whom do we pass it on?
We process your data for the purpose of providing our services as its controller. We determine the means of processing and are responsible for carrying it out properly. We also pass the data on to our processors, who process it according to our instructions.
We may also pass your personal data on to other entities acting as controllers, namely:
- state authorities: when enforcing our rights, your personal data may be passed on to a third party (e.g. an attorney). If the legal order or a state authority (e.g. the Police of the Czech Republic) imposes an obligation on us to hand over your personal data, we must do so.
For the processing of personal data, we also use the services of other processors who process personal data only according to our instructions and for the purposes described in the section Reasons for processing personal data. Such processors are:
- the web hosting provider on whose servers this website is operated;
- cloud service providers and other technology and support suppliers.
8. Security of personal data
Your personal data are safe with us. To prevent unauthorised access to and misuse of your personal data, we have introduced appropriate measures of both a technical and an organisational nature. We not only check security regularly, but also continuously improve it. We strive to use security measures that provide sufficient protection with regard to the current state of technology.
All communication between your device and our web servers is encrypted. All your data are stored on servers in secured data centres with restricted, carefully controlled and audited access. Staff computers containing personal data relating to current business cases (including e-mail communication) are protected by individual access credentials, and their hard drives are encrypted. We also thoroughly train our staff in the correct handling of personal data.
9. What rights do you have in connection with the protection of your personal data
You have a number of rights in relation to your personal data. These are in particular the right of access, rectification, erasure, restriction of processing, portability, objection and the right to lodge a complaint. For requests relating to the individual rights, please contact us by e-mail at info@uspin.cz.
9.1 Access
If you are not sure which personal data we process specifically about you, you can ask us to confirm whether or not personal data concerning you are being processed by us. If we process your personal data, you have the right to access these personal data, including information on:
- What the purposes of processing your personal data are
- What the categories of personal data concerned are
- Who, apart from us, the recipients of your personal data are
- The planned period for which your personal data will be stored
- Information about the source of the personal data if we did not obtain them from you
As part of the right of access, you can ask us for a copy of the personal data processed; we will provide you with the first copy free of charge and any further copies for a fee.
9.2 Rectification and completion
If you find that the personal data we process about you are inaccurate or incomplete, you have the right to have them corrected or completed. You can request the change by e-mail at info@uspin.cz.
9.3 Erasure
You can ask us to erase data about you. However, this right cannot be exercised in the case of documents that we are required to keep by law (e.g. invoices, complaint reports or credit notes). If we need your personal data for the establishment, exercise or defence of our legal claims, your request may be refused (e.g. if we record an outstanding claim against you or in the case of ongoing complaint proceedings).
You have the right to erasure in particular in the following cases:
- The personal data are no longer necessary for the purposes for which they were processed
- You have withdrawn the consent on the basis of which the data were processed and there is no other legal ground for their processing
- The personal data are processed unlawfully
- The obligation to erase is laid down by a special legal regulation
- The personal data concern children under 16 years of age
9.4 Portability
You have the right to obtain from us the personal data that you have provided to us and that we process on the basis of your consent and on the basis of the performance of a contract. We will provide your personal data to you in a structured, machine-readable format. As standard, we only provide data that we process automatically in our electronic databases.
9.5 Objection
We process some of your personal data on the basis of our legitimate interest (see chapter 3. Reasons for processing personal data). If there are specific reasons on your side, you can object to the processing of these personal data.
9.6 Restriction of processing
This right allows you, in certain cases, to request that your personal data are temporarily not subject to any further processing operations. We must restrict the processing of personal data when:
- you contest the accuracy of the personal data, until we agree on which data are correct;
- we no longer need your personal data for the stated purposes of processing, but you require them for the establishment, exercise or defence of your legal claims, or
- you object to the processing (for the duration of the investigation)
9.7 Lodging a complaint
If you believe that we process your personal data unlawfully, you also have the right to lodge a complaint with the Office for Personal Data Protection (uoou.gov.cz).
This Privacy Policy is valid and effective from 26 September 2026 and is available electronically at https://uspin.cz.