MyCECheck

Privacy Policy

1. Data controller

The data controller is DoC solutions s.r.o., Reg. No. 23202424, registered office at Na Vyhlídce 1423/35, 373 16 Dobrá Voda u Českých Budějovic, Czech Republic ("the controller"). For anything related to data protection, contact us at info@posouzenishody.cz or +420 776 337 083.

2. What data we process

  • contact details: email, phone number,
  • billing details: company or personal name, billing address, country, and — if provided at checkout — a VAT ID,
  • the content of uploaded documents (declaration of conformity, test reports, other supporting materials) — including any personal data those documents may contain (e.g. a signatory's name),
  • answers submitted in the intake questionnaire,
  • records of the case's progress (status, findings, reviewer approval) for accountability purposes,
  • if you ask us to email you a Free DoC Quick Check result or the Declaration of Conformity template: your email address, for the Quick Check also your answers, and the consent wording you agreed to.

3. Purpose and legal basis of processing

We process this data to provide the check you ordered and issue the report (performance of a contract, GDPR Art. 6(1)(b)), to process payment and meet accounting obligations (legal obligation, GDPR Art. 6(1)(c)), and to communicate with the customer about their case (legitimate interest of the controller, GDPR Art. 6(1)(f)).

If you ask for a Quick Check result or the DoC template by email, we use your address only to send that email, based on your consent (GDPR Art. 6(1)(a)). We do not use it for marketing and do not send you anything else.

4. Retention period

We keep case documents and data for the duration of the statutory limitation period for any claims arising from the contract, and for as long as required by law for accounting records (typically 10 years from the end of the accounting period). Data and uploaded documents are deleted afterwards.

Email addresses given for a Quick Check result or the DoC template are kept for 24 months as a record of your request and consent, then deleted. You can withdraw your consent and ask us to delete them earlier at any time by writing to info@posouzenishody.cz.

5. Sharing with third parties

We do not share personal data with third parties except processors who provide us with necessary technical services — notably our hosting provider, our email provider (Google, for sending emails) and Stripe, which processes payment on our behalf and independently acts as a controller for the payment details it collects (see Stripe's own privacy policy at stripe.com/privacy). Where automated document analysis is used, an excerpt of the uploaded declaration may be processed by our AI provider (Anthropic) solely to produce the draft findings a human reviewer then checks. All processors are bound by confidentiality and a data processing agreement in line with the GDPR.

6. International transfers

Our own infrastructure keeps data within the EU/EEA. Some processors we use (including Stripe and our AI provider) may process data outside the EU/EEA under appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

7. Cookies, analytics and advertising

Local browser storage keeps an in-progress questionnaire from being lost on refresh and remembers your cookie choice. It stays on your device and is never sent to us.

With your consent, we also use Google Analytics 4 to see which pages are visited and how many visitors start and complete an order, and Google Ads cookies to measure how many visitors who arrive from our ads go on to order a check. Both are provided by Google Ireland Limited. Consent is off by default: nothing is set until you accept the banner, and choosing "Essential only" leaves analytics and advertising storage disabled (Google Consent Mode v2). You can change your mind at any time via "Cookie settings" at the bottom of every page.

The hosted payment page you're redirected to at checkout is operated by Stripe on stripe.com and may set its own cookies under Stripe's privacy policy, outside our control.

8. Your rights

With respect to your personal data, you have the right to:

  • access your personal data,
  • correct inaccurate or incomplete data,
  • erasure ("the right to be forgotten"), where this does not conflict with another legal obligation of the controller,
  • restrict processing,
  • data portability,
  • object to processing based on a legitimate interest,
  • lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz) or your own country's supervisory authority.

You can exercise your rights by contacting info@posouzenishody.cz.