Privacy Policy

Effective from: 2 November 2026

This is a translation for convenience; the Czech version is binding.

1. Controller

RECONSYS s.r.o., registered office Železnohorská 810, 583 01 Chotěboř, Czech Republic, company ID 02718120, registered in the Commercial Register of the Regional Court in Hradec Králové, section C, file 54781. Contact: info@gardenauts.cz, +420 731 404 052.

2. What data we process, why and for how long

Questions and enquiries. We process the name, email, phone, municipality and message content you give us through the form, by email or by phone. We use the municipality to check whether we can deliver. For an enquiry aimed at concluding a contract with you, the legal basis is Article 6(1)(b) GDPR; for other questions, it is our legitimate interest in handling incoming communication under Article 6(1)(f) GDPR. We delete form messages from our database 12 months after receipt. We keep their copies in the email inbox for the same period. If an enquiry leads to an order or a dispute, the periods below apply to the necessary data.

Contact people at business customers. We process work contact details on the basis of our legitimate interest in arranging and performing business relationships (Article 6(1)(f) GDPR), for the duration of the relationship and 4 years after it ends.

Orders and delivery. We process the name, contact and delivery details and order content to perform the contract (Article 6(1)(b) GDPR) for as long as it lasts. After that, we keep the necessary records for 4 years from performance of the contract, on the basis of our legitimate interest in establishing or defending legal claims (Article 6(1)(f) GDPR). During a dispute, we keep them until it is finally concluded.

Accounting and tax documents. We process invoice data to comply with a legal obligation (Article 6(1)(c) GDPR). We keep tax documents for the statutory period, generally 10 years from the end of the tax period in which the supply took place.

Security and fixing errors. We process IP addresses and technical data about your device and connection to protect the form from bots. We process technical data about requests to and errors on our server to detect and fix them. The legal basis is our legitimate interest in secure and reliable operation (Article 6(1)(f) GDPR). We do not send the content of forms or orders, or other data you have given us, in error events. We keep security records and error events for no more than 90 days.

Backups. We back up the database so that we can restore it after a failure. Data deleted under the periods above may therefore remain in backups for up to 4 more months until the backups are overwritten. We do not otherwise use it from backups.

3. What data you must provide

In the form, we need your email so that we can reply, your name so that we know who we are dealing with and who the offer is for, and, for household enquiries, the message text. Without them, we cannot handle your message. Phone and municipality are optional; without a municipality, we will ask you about the delivery location. To conclude and perform an order, we need the data necessary to identify the customer, communicate and deliver; without it, we cannot conclude or deliver the order. The law may require further data for issuing a tax document.

4. Recipients and transfers outside the EU

The website and form protection are provided by Cloudflare, the server by WEDOS in the Czech Republic, email by INTERNET CZ, a.s. (Forpsi), and server error recording by Functional Software, Inc. (Sentry), with error events stored in the EU region. We make accounting data available to providers of accounting software and accounting services. We do not sell data.

These providers act as processors to the extent that they process data on our instructions. According to its notice, Cloudflare also acts as an independent controller when processing technical signals to improve Turnstile; details are in its privacy notice: https://www.cloudflare.com/turnstile-privacy-policy/.

Technical data may be transferred to the USA by Cloudflare and Sentry, to operate and protect the website and to fix errors. The transfer is based on the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) or, where applicable, on standard contractual clauses. You can get information about the safeguards and a copy of them at info@gardenauts.cz.

5. Cookies and similar technologies

The website does not use analytics or advertising cookies. On the form page, we use Cloudflare Turnstile, which processes technical signals about your device and connection to protect the form from automated abuse. If you choose a light or dark appearance for the website, we save that choice in your browser's storage until you change or delete it.

6. Your rights

Under the conditions of the GDPR, you have the right to access your personal data and to have it corrected, erased or restricted. The right to portability applies to data you have provided that is processed by automated means on the basis of a contract or consent. You may object to processing based on legitimate interest on grounds relating to your particular situation.

Write to us at info@gardenauts.cz. We handle requests without undue delay, generally within one month; we will inform you within that period of any statutory extension. You can lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

We do not carry out decisions based solely on automated processing that would have legal or similarly significant effects on you, or profiling.