Privacy policy
Last updated May 5, 2026.
1. Controller
The personal-data controller is i.RICH PRODUCTION s.r.o., registered office Praha, Česká republika, company ID (IČO): —. Registered in the Commercial Register at Městský soud v Praze.
Contact: info@irich.cz.
2. What data we process and why
Inquiry / cooperation form
Company name, contact name, email, phone (optional), website (optional), industry (optional), budget range, time horizon, campaign goals, preferred formats, free-form message. Legal basis: consent (Art. 6(1)(a) GDPR). Purpose: handling your inquiry and contacting you back.
Event registration
Full name, email, phone (optional), note (optional), VIP-specific fields where applicable. Legal basis: performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR). Purpose: event admission, capacity and communication about the event.
Server logs
Hosting providers (Cloudflare, Supabase) keep technical logs (IP address, user agent, request time) on a short rotation. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Purpose: security and abuse prevention.
3. Recipients
- Supabase, Inc. , data hosting (EU-Frankfurt region). Processor.
- Cloudflare, Inc. , web hosting and CDN. Processor.
- Resend / SMTP provider , transactional email delivery, only if you receive a confirmation message.
- State authorities only when required by law.
We do not sell or share your personal data for marketing of unrelated third parties.
4. International transfers
Data is stored in the European Union. Where a processor is based outside the EEA, the transfer is covered by the EU Standard Contractual Clauses.
5. Retention
- Cooperation inquiries: 24 months from submission, then deleted.
- Event registrations: 12 months after the event, then deleted.
- Accounting documents: 10 years (statutory obligation).
- Server logs: max. 30 days.
6. Your rights
Under GDPR you have the right to:
- access your data and receive a copy;
- have inaccurate data corrected;
- have your data erased (right to be forgotten);
- have processing restricted;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting prior processing;
- lodge a complaint with the supervisory authority , Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.
To exercise any right, write to info@irich.cz. We respond within 30 days.
7. Cookies
See our separate Cookies policy. We use only essential cookies necessary for the operation of the website (authentication for the admin area). No analytics or marketing cookies are used.
8. Security
All connections use TLS 1.2+. The database is protected by Row-Level Security and backups; access is limited to authorised staff.
9. Changes to this policy
We may update this policy. Any material change is reflected in the "Last updated" date at the top of this page.