Privacy policy
Who processes your data
The data controller is MORELESS s.r.o., Company ID 21477558, registered office Uralská 689/7, Bubeneč, 160 00 Prague 6, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 402516. For anything related to personal data, write to info [at] moreless.solutions. We have not appointed a data protection officer because the law does not require us to.
Cookies and visitor measurement
On your first visit we ask whether we may use the PostHog analytics tool. We store your choice in your browser for 12 months. This is necessary so we don’t ask again, and under Section 89(3) of the Czech Electronic Communications Act it needs no consent. You can change your choice at any time with the Privacy settings link in the footer. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a rejection.
- If you allow analytics. PostHog stores a random identifier in your browser and records the pages you visit, where you came from, clicks on the main links, your browser and device type, and your approximate location at country and region level at most. Anything you type into the app demos is not sent anywhere. This shows us how the site is used, whether people come back, and how traffic develops over time. These records are pseudonymous, not anonymous. PostHog receives your IP address to deliver the request and removes it from stored events. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- If you reject analytics. PostHog does not load at all, we store nothing analytical in your browser, and we measure nothing.
| Name | Where | Purpose | Duration | Who |
|---|---|---|---|---|
| moreless-soukromi | browser storage | necessary, remembers your choice | 12 months | MORELESS |
| ph_*_posthog, ph_*_posthog_cpm | cookie and browser storage | analytics, only with consent | 12 months | PostHog |
| ph_*_window_id and other ph_* | session storage | analytics, only with consent | until the tab closes | PostHog |
The page language is set by its address. If you open the home page and your browser is not set to Czech or Slovak, we send you to the English version. We go by the language your browser sends with every request, store nothing, and you can switch at any time with the CS and EN links.
What we process and why
- Enquiries and negotiations. When you write to us, we process your name, email, phone, company name and the content of the conversation so we can reply and prepare a proposal. If you act for yourself as a business owner, the legal basis is steps prior to a contract (Art. 6(1)(b) GDPR). If you write to us as an employee or representative of a company, the legal basis is our legitimate interest in replying to you and negotiating the project with your company (Art. 6(1)(f) GDPR).
- Contracts and invoicing. For projects we process your company's identification and billing details and the details of contact persons. The legal basis is performance of a contract if you are the contracting party yourself (b), our legitimate interest in performing the contract with your company if you act for it (f), and statutory accounting and tax obligations (c).
- Records of what we agreed. After a project ends, we keep the contract, the handover record, related correspondence and, for electronic signatures, the signer’s IP address, browser details and time of signing, so we can show what was agreed if a dispute arises. The legal basis is our legitimate interest in protecting legal claims (f).
- Operating and securing the website. With every request, the server and Cloudflare process the IP address, time, requested address and browser details so we can deliver the site and detect attacks and errors. The legal basis is our legitimate interest in running the website securely (f).
We get your data directly from you. Your company may also give us contact persons’ details, and we take company details from public registers. Giving us your data is voluntary. Without contact details we can't reply, and without identification and billing details we can't conclude a contract or issue an invoice, whose content is prescribed by the Czech VAT Act. We do not use automated decision-making or profiling.
Who has access
We process the data ourselves. We rely on these processors and recipients:
- Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, runs the servers for the website and our internal systems for proposals, contracts and invoicing.
- PostHog, Inc. processes optional analytics for us using its EU Cloud service, with event storage in Frankfurt. EU storage does not mean that all support access or subprocessors are located in the EU. Any transfer outside the EU requires safeguards such as an adequacy decision or Standard Contractual Clauses.
- Cloudflare, Inc., USA, provides DNS, delivers the website and secures access to our internal systems.
- Microsoft Ireland Operations Limited, Ireland, runs our mailbox and file storage (Microsoft 365).
- External collaborators on a specific project and our external accountant, all bound by confidentiality.
- Public authorities, such as the tax office, where the law requires it.
Cloudflare, Inc. and Microsoft Corporation, which may receive Microsoft 365 data for service support, participate in the EU-U.S. Data Privacy Framework. Transfers to the USA are therefore based on the European Commission's adequacy decision, Implementing Decision (EU) 2023/1795 (Art. 45 GDPR). We never sell data or use it for advertising.
How long we keep data
- Enquiries and proposals that did not lead to a project: 4 years after the last contact, so we can show what we offered and pick up where we left off if you come back. After that we delete the contact person’s details and keep only the company and the proposal.
- Contracts, handover records and related correspondence: for the duration of the cooperation and 4 years from the last contact. If a dispute is pending, until it ends. The general limitation period is 3 years (Section 629 of the Czech Civil Code), and the extra year covers claims made at its end.
- Tax documents: 10 years from the end of the tax period in which the supply took place (Section 35 of the Czech VAT Act). Other accounting documents: 5 years from the end of the accounting period (Section 31 of the Czech Accounting Act).
- Server logs: 30 days at most.
- Analytics identifier in your browser: 12 months.
- Visitor measurement records: for as long as we need them to follow the long-term development of the website. We delete records linked to your browser on request.
Your rights
You have the right to access, rectify or erase your data, to restrict processing and to data portability (Art. 15 to 18 and 20 GDPR). You can object to processing based on our legitimate interest (Art. 21 GDPR). You can withdraw your consent to analytics at any time in Privacy settings, which does not affect the lawfulness of earlier processing. Just write to info [at] moreless.solutions. We respond to requests without undue delay and no later than one month after receiving them. In complex cases we may extend this by two further months, and we tell you about the extension and the reasons within the first month (Art. 12(3) GDPR).
If you are not satisfied, you can lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
Changes
We update this document when our processing or the law changes. The current version is always on this page, with the effective date in the header.