Privacy Policy
Effective date: January 1, 2026
NORD COMP s.r.o., operating under the brand kodet.io ("we", "us", "kodet.io"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect through kodet.io, why we collect it, how we use and protect it, and what rights you have, in accordance with Regulation (EU) 2016/679 (the "GDPR"), Czech Act No. 110/2019 Sb. on the Processing of Personal Data, and Czech Act No. 127/2005 Sb. on Electronic Communications (which governs the use of cookies).
1. Who is the data controller
The data controller responsible for your personal data is:
NORD COMP s.r.o. Na Lučinách 346, Proboštov, 417 12, Czech Republic Company ID (IČO): 03987248 VAT ID (DIČ): CZ03987248 Email: hello@kodet.io
We have not appointed a Data Protection Officer, as this is not required given the scope and nature of our processing activities. For any questions or requests concerning your personal data, please contact us directly at hello@kodet.io.
2. What personal data we collect
We collect personal data only to the extent necessary for the purposes described below:
- Contact and inquiry data: when you use our contact form, send us an email, or book a meeting, we process your name, email address, phone number, company name, and the content of your message.
- Client and contractual data: if you become a client, we process the identification, billing, and contact details necessary to perform and administer the contract.
- Website usage data: when you browse our website, we (subject to your cookie consent) collect data about your visit, such as pages viewed, time spent, referral source, device and browser type, and an approximate, anonymized location derived from your IP address, via Google Analytics.
- Technical and log data: our hosting infrastructure automatically records limited technical data (such as IP address, timestamps, and requested URLs) for security and operational purposes.
3. Why we process your data and on what legal basis
We only process personal data where we have a valid legal basis under Article 6(1) GDPR:
- Pre-contractual and contractual measures (Art. 6(1)(b) GDPR) — to respond to your inquiry, prepare an offer, and perform a contract if you become our client.
- Legitimate interest (Art. 6(1)(f) GDPR) — to maintain the security, functionality, and performance of our website and services, and to keep basic records of business communication.
- Consent (Art. 6(1)(a) GDPR) — for non-essential cookies and analytics tools such as Google Analytics, which are only activated after you give consent through our cookie banner, and which you may withdraw at any time.
- Legal obligation (Art. 6(1)(c) GDPR) — where we must retain certain data (e.g. invoicing records) to comply with Czech accounting and tax law.
5. Who we share your data with
We do not sell your personal data. We only share personal data with carefully selected processors who provide services on our behalf, under appropriate data processing agreements and solely for the purposes described in this policy:
- Google Ireland Limited — provides Google Analytics for website usage statistics, only after you have given cookie consent.
- Relatiq (operated by API SOLUTIONS, s.r.o., our sister company) — provides website visit and conversion tracking used to improve our services; this is only activated after you have given cookie consent.
- Hosting and infrastructure providers — host our website and store data needed to operate it.
- Email and communication service providers — used to receive and respond to inquiries sent through our contact form or by email.
- Public authorities — where required by applicable law, such as tax or accounting obligations.
6. International data transfers
Some of our processors (such as Google) may process data outside the European Economic Area, including in the United States. In such cases, the transfer is based on an adequacy decision (such as the EU-U.S. Data Privacy Framework) or on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, ensuring a level of protection equivalent to that guaranteed under the GDPR.
7. How long we keep your data
We retain personal data only for as long as necessary for the purposes for which it was collected:
- Contact form and inquiry data: up to 2 years from the last communication, unless a contract is concluded.
- Contractual and billing records: for the duration required by Czech accounting and tax legislation (generally up to 10 years).
- Analytics data: retained by Google Analytics according to its own retention settings, generally up to 14 months, and only for as long as your consent remains valid.
- After the applicable retention period expires, personal data is securely deleted or anonymized.
8. Your rights
Under the GDPR, you have the following rights regarding your personal data, which you can exercise by contacting us at hello@kodet.io:
- Right of access — to obtain confirmation of whether we process your data and a copy of it.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure — to request deletion of your data where there is no legitimate reason for us to continue processing it.
- Right to restriction of processing — to request that we limit how we use your data in certain circumstances.
- Right to data portability — to receive your data in a structured, commonly used, machine-readable format.
- Right to object — to object to processing based on our legitimate interest, including for direct marketing purposes.
- Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before the withdrawal.
- We will respond to your request within one month, as required by the GDPR.
9. Right to lodge a complaint
If you believe that our processing of your personal data infringes the GDPR or applicable Czech law, you have the right to lodge a complaint with the Czech supervisory authority:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů) Pplk. Sochora 27, 170 00 Prague 7, Czech Republic www.uoou.cz
10. How we protect your data
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration, including encrypted connections (HTTPS), access controls, and limiting access to personal data to staff who need it to perform their duties.
11. Children's privacy
Our website and services are intended for business use and are not directed at children. We do not knowingly collect personal data from individuals under the age of 16.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version, including its effective date, is always available on this page. We encourage you to review it periodically.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at hello@kodet.io or at the postal address listed in Section 1.