Privacy Policy — Bruchma

1Who we are

Bruchma ("we", "us", "our") is a web studio based in the Czech Republic, operating the website www.bruchma.cz. If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch using the details in Section 7 below.

2What personal data we collect

We collect personal data in a few different ways, described below:

Contact form submissions — when you use our quote request form, we receive the name, business type, and phone number or email address you provide us.
Login and account data — if you're a Bruchma customer or administrator with an account, we store your username, an encrypted password, your account role, and records of sign-ins, password changes, and access to your site.
Basic connection data — like most websites, our servers automatically log your IP address, browser type, pages visited, and timestamps, which we use for security and to keep the site running smoothly.

3Why we process this data

To respond to your quote request and communicate with you about our services — based on your consent when you submit the form, and on the steps needed to enter into a contract with you (GDPR Art. 6(1)(a) and (b)).
To provide, secure, and operate your customer account and hosted website — based on our contract with you (GDPR Art. 6(1)(b)).
To keep our service secure, prevent abuse, and maintain performance — based on our legitimate interest in operating a safe and reliable website (GDPR Art. 6(1)(f)).

4How long we keep it

We keep contact form submissions until your request has been handled, and delete them within 12 months at the latest. Account data is kept for as long as your account is active, and for a reasonable period afterwards where needed for legitimate business or legal reasons. Server logs (IP address, pages visited, timestamps) are kept for up to 90 days and then deleted.

5Third parties

We do not sell your personal data. We only share it with the third parties needed to run our service, such as:

Zoner (Czech Republic) — our email provider, which delivers notifications from our contact form on our behalf.
Any additional processors will be listed here as they are added.

6Cookies

We only use strictly necessary session cookies, required for the login and website-preview feature. We do not use advertising, analytics, or other tracking cookies.

Cookie	Purpose	Type / duration
`token`	Session/login cookie — authenticates you and lets you preview your website in the client portal.	Strictly necessary · expires after 24 hours.

Because we only use strictly necessary cookies, we don't display a cookie consent banner, in line with Czech and EU e-privacy rules. If we ever introduce non-essential tracking cookies, we'll add a consent banner and update this policy beforehand.

7Your rights and contact

You have the right to request access to, correction of, or deletion of your personal data, to restrict or object to certain processing, and — where our processing is based on your consent — to withdraw that consent at any time. You may also have the right to receive your data in a portable format. We will respond to any request within one month, as required by the GDPR. To exercise any of these rights, or for any other privacy question, please contact us at:

Bruchma
www.bruchma.cz
info@bruchma.cz

You also have the right to lodge a complaint with a supervisory authority — in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz).

The reservation system has its own documents: Privacy Policy · Terms of Service · Data Processing Agreement

8The Contact and Try it free forms (addition)

NÁVRH — vyžaduje právní kontrolu (DRAFT — requires legal review). This section describes the data from the forms on /kontakt and /registrace. It adds to sections 2 to 5; the rest of the policy does not change.

Data	Form	Purpose	Legal basis	Retention
Name	Contact, Try it free (required)	To address you and answer your enquiry or account request.	Your consent by submitting the form, and steps before a contract at your request (Art. 6(1)(a) and (b) GDPR).	Until handled, at most 12 months.
E-mail or phone	Contact (one of the two is required); Try it free (both e-mail and phone are required)	To answer the enquiry; for an account request, to send the invitation by e-mail and, if needed, to check by phone.	Same as above.	Until handled, at most 12 months.
Business type	Contact (required)	So that we know what to offer.	Same as above.	Until handled, at most 12 months.
What you need (reservations, website, photography)	Contact (optional)	To prepare an offer.	Same as above.	Until handled, at most 12 months.
Note	Contact (optional, free text)	To answer what you write to us. Please do not put sensitive data in the note.	Same as above.	Until handled, at most 12 months.
Venue name, venue type, the answer to "Do you have a website?"	Try it free (required)	To prepare and create the venue's account in the booking system.	Your consent by ticking "I agree to the processing of my data to create an account", and steps before a contract (Art. 6(1)(a) and (b) GDPR).	Until the account is created or the request is declined, at most 12 months. Once an account exists, section 4 and the booking system's own policy apply.

Together with the form data we store the language of the page you sent the form from (so that we can answer in the same language), the time it was received, and the delivery status of the alert to our mailbox, with a technical description of the error if delivery fails. The hidden anti-bot field is not stored. The website records your IP address and the time of your visit as it does for any other page, as sections 2 and 4 describe.

Giving us the data is voluntary. Without a name and a contact we cannot reply, and without the venue details and consent we cannot create an account. You can withdraw your consent at any time by e-mail to info@bruchma.cz; processing before the withdrawal stays lawful. We pass the form data only to the e-mail provider named in section 5, which delivers the alert to our mailbox.