Skip to content
Call us: +420 564 571 004
Čeština
GaRiK.cz, home page
Get quote
Menu

Privacy policy

Briefly and clearly: what personal data we hold about you, what we use it for, who we pass it to, how long we keep it and what rights you have.

In brief

We use the details from your enquiry to reply to you and prepare a quote. We do not sell them to anyone. We only start measuring website traffic with Google Analytics with your consent. You can ask us for a copy, correction or erasure of your data.

Who processes your data

Controller: GaRiK.cz s.r.o., Company ID (IČO) 06732691, registered office Hvozdecká 1378/10, 635 00 Brno-Bystrc, Czech Republic, registered in the Commercial Register kept by the Regional Court in Brno, section C, file 103950.

Contact for questions about personal data: info@garik.cz, +420 564 571 004, or by letter to our registered office.

What data we process

  • From the enquiry form: name, email, phone (if you fill it in), customer type, service, city district, the text of your message and the sender’s IP address. The name and email are required; without them we cannot reply to you. You may optionally tell us how you heard about us. This information helps us evaluate the sources of our enquiries.
  • From email and phone: the details you give us yourself, and any photos needed to prepare the quote.
  • Job applications: the details from the CV or email you send us.
  • Customers: the details needed for the contract, communication, carrying out the job and invoicing.
  • Visiting the website: IP address and other technical data processed in connection with running and securing the website. We only process data from Google Analytics with your consent.

Please do not include in your message any details we do not need for the enquiry, such as your personal identification number (rodné číslo) or health information. We do not make automated decisions about you or profile you. Only spam is filtered automatically.

  • Enquiry and contract, when you enquire on your own behalf: negotiating and performing a contract (Article 6(1)(b) GDPR).
  • Enquiry on behalf of an owners’ association (SVJ), housing cooperative or company: our legitimate interest in dealing with the organisation you represent and performing a contract with it (Article 6(1)(f) GDPR).
  • Answering questions: our legitimate interest in replying to you (Article 6(1)(f) GDPR).
  • Job applications: discussing working with us at your request (Article 6(1)(b) GDPR).
  • Accounting and tax: compliance with legal obligations (Article 6(1)(c) GDPR).
  • Running and securing the website and protection against spam: legitimate interest (Article 6(1)(f) GDPR).
  • Marketing messages to customers: legitimate interest (Article 6(1)(f) GDPR) and Section 7(3) of Czech Act No. 480/2004 Coll., provided the statutory conditions are met.
  • Evaluating enquiry sources: legitimate interest (Article 6(1)(f) GDPR).
  • References and reviews: legitimate interest in presenting customers’ experience, provided the conditions for publishing personal data are met (Article 6(1)(f) GDPR).
  • Measuring website traffic: your consent (Article 6(1)(a) GDPR).

The box ‘I have read the privacy information’ in the form is not consent to processing; it only confirms that you have read this information.

Marketing messages

We may send customers offers of similar services to the email address they gave us in connection with our services, under the conditions laid down by law. You can unsubscribe at any time and free of charge using the link in each such email or by writing to info@garik.cz.

References and reviews

References from the GaRiK Facebook page and reviews from our Google profile are public reviews. For references we may show the first name and, where relevant, the role (for example committee member of an owners’ association) and the city district. For Google reviews we may show the name in shortened form, the text of the review, the number of stars and the date.

If you do not want your reference or review to appear here, write to us at info@garik.cz. We will consider your request and, where appropriate, remove the published details.

Who we pass data to

We only make personal data available to the following recipients and categories of recipients, to the extent necessary and for the purposes stated:

  • Web3Forms: a service that processes enquiries from the web form and forwards them to our email inbox. In providing the service it may use other providers.
  • Email service provider: runs the info@garik.cz inbox, through which we receive enquiries and communicate with customers.
  • CRM/ERP system Agendo: we use an external rented system to record enquiries, customers, communication and jobs. Its operator may process personal data to the extent necessary when running, maintaining, securing and providing technical support for the system.
  • Server and hosting providers: run the website and related services. Personal data may be processed on their servers to the extent necessary to provide these services.
  • Cloudflare, Inc.: we use its services to deliver the website’s content, keep it running and protect it against attacks. Using these services may involve processing IP addresses and other technical data.
  • External accountant: may have access to the data needed to keep the accounts, prepare tax returns and meet legal obligations.
  • Employees: may access personal data to the extent necessary when handling enquiries, communicating with customers, carrying out jobs and doing administration. Access is limited to people who need the data for their work.
  • Google Ireland Ltd.: provider of Google Analytics for measuring website traffic, only if you have given your consent.
  • Public authorities: we pass on personal data in the cases and to the extent required by law.

For external providers who process personal data on our behalf, we put appropriate contractual arrangements and data protection in place in line with the GDPR. Employees and other people with access to the data are bound by rules of confidentiality and security.

Transfers outside the European Economic Area

Some of our service providers or their subcontractors may process personal data, or access it, from countries outside the European Economic Area. We only make such transfers when the conditions of the GDPR are met and with appropriate safeguards where these are required.

The specific conditions depend on the provider, where it is based, where the data is processed and the contractual set-up. On request, we will give you information about the safeguards used, to the extent that we are able to share it.

How long we keep data

  • Enquiries that do not lead to a contract, and general questions: 24 months from sending, unless keeping them longer is necessary, for example to protect legal claims.
  • Copies of enquiries held by Web3Forms: according to the provider’s terms. If we can delete them, we will delete them after 24 months at the latest.
  • Customer data: for the duration of the contractual relationship and then for as long as necessary to protect legal claims.
  • Accounting and tax documents: for the period laid down by the relevant legislation for each type of document.
  • Marketing messages: until you unsubscribe or raise a relevant objection, for no longer than 5 years after the end of the last contract, unless there is another legal ground for further processing.
  • References and reviews: for as long as publishing them is justified and serves the stated purpose.
  • CVs and emails about jobs: until the end of the selection process, for no longer than 12 months, unless there is another legal ground.
  • Data in Google Analytics: according to the service settings, planned at 14 months.
  • Google Analytics cookies and the record of your cookie choice: according to the website settings, planned at 6 months.
  • IP addresses and technical logs held by hosting and spam protection: for the period set by the provider and as long as necessary for running and securing the services and dealing with incidents.
  • Data in the CRM/ERP system Agendo: for as long as necessary to record and manage enquiries and jobs, or for the period laid down by law or needed to protect legal claims.

When the relevant period ends, we delete or anonymise the data, unless the law or another legal ground requires us to keep it.

Cookies and measuring website traffic

  • Strictly necessary storage: the website remembers in your browser whether you accepted or rejected measurement. To store this choice we use strictly necessary technical means, which do not require consent as long as they meet the legal conditions. Your choice is valid for 6 months, after which we will ask you to decide again.
  • Google Analytics 4: the provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The service measures website traffic, the pages viewed, where visits come from and enquiries sent. For an enquiry only the type of service and the type of customer are passed on, for example owners’ association, company or household. Your name, contact details and the text of your message are not sent to analytics.

We only start Google Analytics with your consent, in accordance with Article 6(1)(a) GDPR and the relevant rules on storing information in terminal equipment under Czech Act No. 127/2005 Coll. Without consent, analytics is not loaded.

You can withdraw your consent at any time. Click ‘Cookie settings’ in the website footer and choose ‘Reject’. We will then stop further measurement and remove the analytics cookies, where we can remove them through the website. Withdrawal does not affect the lawfulness of processing carried out before it.

Details of the cookies used and how long they remain valid follow the actual settings of the website and of the individual services.

Your rights

You have the right to access your personal data and obtain a copy, to have inaccurate data rectified, to erasure, to restriction of processing and, under the conditions set by the GDPR, to data portability.

You can object to processing based on legitimate interest. If we use your data for direct marketing, you can object at any time and we will then no longer process the data for that purpose.

You can withdraw your consent to traffic measurement at any time.

You can send your request to info@garik.cz or call +420 564 571 004. We will reply without undue delay and within one month at the latest, unless the law provides otherwise.

You can lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, website: https://uoou.gov.cz/.

Effective date

This information is effective from 20 October 2026. If we change it, we will publish the new version on this page.