LEGAL
Privacy Policy
This is a small marketing site, not a bank. We collect only what we need in order to answer your enquiry, and we sell none of it to anyone.
Effective from: 14 September 2026
1. Who the controller is
The controller of your personal data is the operator of the BladeWave brand.
For anything to do with personal data, write to us at privacy@bladewave.org. We have not appointed a data protection officer; we are not required to have one.
2. What data we process
Only what you type into the enquiry form yourself, or send us by email:
- Name or brand name – required, so we know who we are dealing with.
- Work email – required; it is the address we reply to.
- Phone – optional, only if you want us to call.
- Service selected – optional, so we know what we are talking about.
- Message – optional, and its content is yours to choose. Please do not put special-category data into it; we need none from you.
We infer nothing beyond that and we do not look you up anywhere.
3. Why, and on what legal basis
There is a single purpose: to answer your enquiry, prepare a quote and agree on working together. The legal basis is Art. 6(1)(b) GDPR — steps taken at your request before entering into a contract. We do not need your consent for that, which is why we never ask for it.
If nothing comes of it, we will not use the data for anything else. We do not add you to a newsletter, we do not sell contacts, and we do not send marketing you did not ask for.
There is no automated decision-making and no profiling within the meaning of Art. 22 GDPR. A person reads your enquiry and a person answers it.
4. How long we keep it
- If nothing comes of it: 12 months from your last message at the most, then we delete the enquiry.
- If we do end up working together: for as long as that lasts, and after that for as long as tax and accounting rules require us to.
You can ask us to delete it sooner — see your rights below.
5. Who else sees the data
Nobody who would use it for their own ends. We do rely on the processors below, who run things technically for us:
- Form delivery: @@DOPLNIT_ZPRACOVATEL_FORMULARE@@ – the name of the service, its registered office and a link to its privacy policy.
- Call booking: Cal.com, Inc. (USA) – if you pick a slot through the link on the contact page, you give your name, email and time directly to Cal.com under their policy (opens in a new window). Until you tap that link, nothing is sent to them.
- Email and hosting: Vercel Inc. (website hosting, USA — under the EU standard contractual clauses) – the provider of our mailbox and of this site's hosting.
The fonts are stored on this site itself, not at Google — so simply loading a page sends your IP address nowhere. Apart from links you tap yourself, this page calls no third party at all.
We pass the data to nobody else, unless the law requires us to.
6. Cookies and analytics
The site uses no advertising pixels and no cross-site tracking. For traffic measurement we use Google Analytics (Google Ireland Limited) — but only after you agree in the bar. Until you do, nothing is loaded and nothing is stored. Refusing is exactly as available as agreeing, and it does not affect how the site works.
We remember your choice in your browser’s storage under the key bw-consent-v1, for 180 days. After that we ask again. You can change it at any time through the Cookie settings link in the footer (it appears there once measurement is switched on) — withdrawing consent is as easy as giving it. If you agree, Google Analytics sets cookies of its own; their names and lifetimes are in Google’s privacy policy. We pass the IP address anonymised.
7. Your rights
Under Art. 15 to 22 GDPR you have the right:
- of access (Art. 15) – to ask for a copy of what we hold about you.
- to rectification (Art. 16) – to have an inaccurate detail corrected or an incomplete one completed.
- to erasure (Art. 17) – to have the data deleted once we no longer need it.
- to restriction of processing (Art. 18) – to have processing paused while something is being sorted out.
- to data portability (Art. 20) – to receive the data in a machine-readable format.
- to object (Art. 21) – to any processing we based on a legitimate interest.
- not to be subject to automated decision-making (Art. 22) – none of which takes place here.
Just write to privacy@bladewave.org. We answer within one month at the latest, usually the same week. It is free of charge.
8. Complaining to the supervisory authority
If you think we are handling your data badly, tell us first — that is the fastest way to get it put right. You can always go to the supervisory authority as well:
Úřad pro ochranu osobních údajů
(the Czech Data Protection Authority)
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
www.uoou.gov.cz (opens in a new window)