Privacy Notice

Last updated: 24 September 2026

This notice explains how Corvusec s.r.o. handles personal data collected through this website, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Czech data-protection law.

1. Data controller

Corvusec s.r.o.
Labská 220/3, Starý Lískovec, 625 00 Brno, Czech Republic
Company ID (IČO): 298 63 651
Email: hello@corvusec.eu

We have not appointed a Data Protection Officer, as we are not legally required to do so. For any question about this notice or your data, contact us at the address above.

2. What we collect, why, and on what legal basis

Contact form

When you submit the contact form, we collect the name, organisation, email address and message you provide. We use this solely to respond to your enquiry and, where relevant, to take steps toward a possible engagement.

Legal basis: your consent (Article 6(1)(a) GDPR), given via the consent checkbox on the form, together with our legitimate interest in responding to business enquiries and, where you are asking about our services, steps taken prior to entering a contract at your request (Article 6(1)(b) and 6(1)(f) GDPR). Providing the data is voluntary, but without at least a name and email we cannot reply to you.

Server logs

When you visit the site, our hosting provider automatically processes standard technical data (such as your IP address, the pages requested, date and time, and browser/user-agent information) in server log files. This is necessary to deliver the website securely and to detect and prevent misuse. Legal basis: our legitimate interest in the secure and stable operation of the site (Article 6(1)(f) GDPR).

3. Recipients and processors

We share personal data only with service providers that process it on our behalf under appropriate data-processing terms:

• Formspree — processes contact-form submissions and forwards them to us by email. Formspree is operated from the United States; where personal data is transferred outside the EU/EEA, that transfer is governed by the safeguards Formspree provides (such as EU Standard Contractual Clauses). See Formspree's own privacy terms for details, and confirm the current terms and data-processing agreement before relying on this notice.
• WEDOS Internet, a.s. — our hosting provider, based in the Czech Republic, which stores the website files and processes the server logs described above.
• Google Fonts — this site loads typefaces from Google's font service (operated by Google Ireland Limited / Google LLC), which causes your browser to send your IP address to Google when a page loads, so that the fonts can be delivered. Legal basis: our legitimate interest in a consistent, professional presentation of the site (Article 6(1)(f) GDPR).

We do not sell personal data, and we do not use it for advertising or automated decision-making.

4. Cookies and analytics

This website does not set tracking or advertising cookies and does not use web analytics. If analytics or other cookies are added in future, this notice will be updated and, where required, consent will be requested before any non-essential cookies are set.

5. Retention

We keep enquiry correspondence for as long as needed to handle your request and, if an engagement results, for the duration of that relationship and any period required by law (for example, statutory accounting and tax retention obligations under Czech law). Where an enquiry does not lead to further contact, we delete it within 12 months.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected, and incomplete data completed;
• have your data erased ("right to be forgotten");
• restrict or object to processing based on legitimate interests;
• receive your data in a portable format; and
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at hello@corvusec.eu. You also have the right to lodge a complaint with a supervisory authority — in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).

7. Changes to this notice

We may update this notice to reflect changes to the site or to legal requirements. The current version is always available on this page, with the date of the last update shown above.