Rooster One s.r.o. : User Privacy & Security Policy

Privacy Notice and Information Regarding Personal Data Processing

This Privacy Notice establishes the framework governing the collection, processing, retention, and safeguarding of personal data by Rooster One s.r.o., operating as the controller of digital services and service-related landing pages. Maintaining absolute transparency and strict compliance with applicable regulatory frameworks, including the General Data Protection Regulation (GDPR) and local legislative mandates effective as of 2026, is a foundational operational standard for our organization. By interacting with our service page, submitting inquiries, or engaging with our digital assets, data subjects acknowledge the practices, protocols, and protective measures outlined within this comprehensive document.

Categories of Collected Information

To facilitate the delivery of requested services, process inquiries, and optimize user experience, Rooster One s.r.o. systematically gathers specific categories of personal data. The scope of collected information is strictly limited to what is necessary for fulfilling the stated operational and commercial objectives.

Identification and Contact Details: Full name, corporate or residential address, electronic mail address, and telephone number, provided voluntarily through direct inquiry forms.
Transactional and Service Data: Information concerning service specifications, project parameters, contract histories, and billing preferences pertinent to the requested offerings.
Technical and Device Information: Internet Protocol (IP) addresses, browser types, operating system versions, referral sources, and interaction timestamps collected automatically via analytical cookies and server logs.
Communication Records: Correspondence logs, feedback submissions, and records of interactions maintained between the data subject and our support or sales personnel.

Purposes and Legal Bases for Data Processing

Rooster One s.r.o. processes personal information exclusively for explicit, legitimate, and transparent purposes. Every processing activity is strictly anchored to a recognized legal basis under current privacy regulations, ensuring complete alignment with statutory requirements.

Contractual Performance: Processing contact details and service specifications is necessary for taking pre-contractual steps at the request of the user, preparing formal service proposals, and executing binding service agreements.
Explicit Consent: Where users subscribe to specialized promotional communications, participate in marketing initiatives, or consent to non-essential tracking technologies, processing is conducted on the basis of freely given, specific, and informed consent.
Legitimate Interests: Analyzing technical site performance, enhancing user interface security, preventing fraudulent activities, and optimizing digital infrastructure are pursued based on our overriding legitimate interests in maintaining a secure and efficient service environment.
Legal Obligations: Retaining specific transactional, financial, and identification records to comply with statutory accounting, tax, and regulatory retention mandates imposed by applicable governing authorities.

Data Retention Timelines

Personal data is retained only for the duration necessary to fulfill the specific purposes for which it was collected, or to satisfy statutory archiving and reporting duties. Upon the expiration of these retention periods, data is securely erased, anonymized, or destroyed.

Inquiries and Unconverted Leads: Personal data submitted via service interest forms without resulting in a contractual relationship is retained for a maximum duration of twelve months from the last documented interaction.
Active Contracts and Transactional Records: Information related to fulfilled service agreements, invoicing, and commercial correspondence is preserved for the statutory period mandated by financial and tax legislation, typically extending up to ten years following the termination of the business relationship.
Consent-Based Marketing Data: Data processed solely on the basis of marketing consent is retained until the data subject withdraws their consent, or until a period of inactivity exceeding twenty-four months is recorded.

Third-Party Data Disclosure and International Transfers

Rooster One s.r.o. maintains strict confidentiality standards and does not trade, lease, or commercially distribute personal data to unauthorized external entities. Disclosure of information occurs exclusively under strictly controlled conditions and contractual safeguards.

Authorized Processors: Information may be shared with trusted third-party service providers, including cloud hosting vendors, customer relationship management platforms, and analytical tool operators, acting strictly under our documented instructions and bound by robust data processing agreements.
Legal and Regulatory Authorities: Data may be disclosed to law enforcement agencies, regulatory bodies, or judicial institutions when mandatory under applicable statutory provisions or to protect the vital legal interests of Rooster One s.r.o.
International Data Flows: Any transfer of personal data outside the European Economic Area is executed in strict compliance with adequacy decisions, standard contractual clauses, or other approved legal mechanisms ensuring an equivalent level of privacy protection.

Security Measures and Infrastructure Protection

Protecting the confidentiality, integrity, and availability of personal data is a critical priority for Rooster One s.r.o. We implement comprehensive technical and organizational safeguards designed to mitigate risks of unauthorized access, accidental loss, alteration, or unlawful destruction.

Encryption Protocols: Data in transit between the user's browser and our servers is secured using robust Transport Layer Security (TLS) encryption standards. Sensitive stored data undergoes advanced cryptographic hashing and encryption at rest.
Access Restrictions: Access to personal information is strictly restricted to authorized personnel who require such access to perform specific professional duties, governed by multi-factor authentication and role-based permissions.
System Monitoring and Audits: Our IT infrastructure is subject to continuous security monitoring, vulnerability assessments, and periodic reviews to identify and remediate potential risks promptly.

Rights of the Data Subject

Individuals interacting with our services retain comprehensive rights concerning their personal data under prevailing regulatory standards. Rooster One s.r.o. ensures seamless procedures for exercising these statutory prerogatives without undue delay.

Right of Access: Data subjects possess the right to obtain confirmation as to whether or not personal data concerning them is being processed, along with detailed information regarding the processing activities.
Right to Rectification: Individuals may request the immediate correction of inaccurate personal data or the completion of incomplete records held within our systems.
Right to Erasure ("Right to be Forgotten"): Under specific legal conditions, users may demand the permanent deletion of their personal data where it is no longer necessary for the purposes for which it was collected.
Right to Restriction and Objection: Users hold the right to limit processing operations under contested circumstances or object to processing based on legitimate interests and direct marketing purposes.
Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, individuals may request to receive their data in a structured, commonly used format.

Exercising Rights and Administrative Inquiries

To exercise any of the aforementioned rights, submit inquiries, or address concerns regarding data privacy practices implemented by Rooster One s.r.o., data subjects may utilize the official communication channels provided below. We commit to responding to all legitimate requests within the legally mandated timeframes.

Official Electronic Mail: [email protected]
Telephone Support: 80-018-381-3
Registered Corporate Address: Na dlouhém lánu 418/21, Vokovice, 160 00 Praha 6

Last updated: 2026-09-26