We only use personal data to reply to you, prepare a quote, help with financing and build your project, or to process your application to the Carpentry School. We don’t sell it to anyone. Analytics cookies are only switched on with your consent. You can ask us at any time what data we hold about you, and ask us to correct or delete it.
Who processes your data
The data controller is MMGR-sruby spol. s r.o. If you have any questions about your personal data, contact us by email, by phone or by post at our registered office.
- Data controller
- MMGR-sruby spol. s r.o.
- Registered office
- Táhlá 1816, Těptín, 251 68 Kamenice
- Company ID
- 05815762
- VAT ID
- CZ05815762
- Registration
- Commercial Register kept by the Municipal Court in Prague, Section C, Insert 271310
- Managing director
- Oto Doležal
- Phone
- +420 731 444 295
We have not appointed a data protection officer, as the law does not require us to.
What data we process and why
We mainly process data you send us yourself, and only as much as we genuinely need. This covers the following situations:
Building enquiry
Form on the Contact page
- Data
- First name, surname and email, plus your phone number if you choose to give it. For the enquiry itself: type of building, building location, plot, rough budget, when you’d like to build and what you have in mind.
- Purpose
- To reply to you, prepare a no-obligation quote and negotiate a contract for work with you.
- Legal basis
- Steps taken at your request prior to entering into a contract, Article 6(1)(b) GDPR.
Financing consultation
Form on the Financing page
- Data
- Full name and phone number, plus your email if you choose to give it. Also the approximate loan amount, type of building and a note.
- Purpose
- To go through the building budget with you, arrange a consultation and, at your request, pass your name, phone number and loan amount to a financial adviser who will contact you.
- Legal basis
- Steps taken at your request prior to entering into a contract, Article 6(1)(b) GDPR.
Application to the Carpentry School
Form on the Course dates page
- Data
- First name, surname and email, plus your phone number if you choose to give it. Also the course you’ve chosen, when you’d like to start, the language of instruction, your experience with timber and a note.
- Purpose
- To process your application, arrange a course date and send you further information.
- Legal basis
- Steps prior to entering into a contract and performance of the contract, Article 6(1)(b) GDPR.
Email and phone
When you write to us or call us
- Data
- Your name, contact details and the content of your message or call.
- Purpose
- To reply to you and deal with your query.
- Legal basis
- Steps prior to entering into a contract where the query concerns a project, Article 6(1)(b) GDPR. In other cases, our legitimate interest in answering your query, Article 6(1)(f) GDPR.
Contract and construction
When we enter into a contract with you
- Data
- Identification and contact details, the building site address, billing details and communication about the project.
- Purpose
- To perform the contract, issue accounting documents and meet our obligations under accounting and tax regulations.
- Legal basis
- Performance of the contract, Article 6(1)(b) GDPR, compliance with legal obligations, Article 6(1)(c) GDPR, and our legitimate interest in protecting our legal claims, Article 6(1)(f) GDPR.
Visiting the website
Technical data when pages are displayed
- Data
- IP address, browser and device type, time and address of the request.
- Purpose
- To display the website to you and protect it from misuse and attacks. These logs are kept by the hosting provider and retained only briefly.
- Legal basis
- Legitimate interest in the secure operation of the website, Article 6(1)(f) GDPR.
Once we’ve sent you a quote or agreed on a next step, we may get in touch after a while to ask whether you’re still planning to build, or to add information to your enquiry. We do this on the basis of our legitimate interest, Article 6(1)(f) GDPR. If you’d rather we didn’t, just drop us a line.
We need the details marked with an asterisk in the forms so that we can reply to you, and we can’t process your enquiry or application without them. All other details are optional.
Cookies and consent settings
Cookies and similar technologies store a small amount of data in your browser. We divide them into three groups, the same as in the cookie settings bar.
Necessary
- Purpose
- They remember your cookie choice so the bar doesn’t pop up on every visit. Your choice is saved in your browser’s storage (localStorage, item mmgr-cookies) and contains only the categories you selected and the date.
- Legal basis
- Legitimate interest in the functioning of the website, Article 6(1)(f) GDPR. They cannot be switched off.
- Duration
- Until you change your choice or clear your browser data.
Analytics
- Purpose
- Google Analytics 4 gives us aggregated visitor statistics, such as which pages people read and where they come to the site from. That tells us what to improve. It stores the _ga and _ga_<ID> cookies, with a random identifier, in your browser. Google Analytics does not store your IP address.
- Legal basis
- Only with your consent, Article 6(1)(a) GDPR. It won’t run without your consent.
- Duration
- Cookies for up to 13 months, statistics in Google Analytics for up to 14 months.
Marketing
- Purpose
- Measuring advertising campaigns and showing relevant offers. We don’t use them at the moment. If we introduce them in future, we’ll add them to this policy.
- Legal basis
- Only with your consent, Article 6(1)(a) GDPR.
You can change or withdraw your consent at any time via the Cookies link in the website footer, or right here.
Who we share data with
We don’t sell your data to anyone. We only pass it on where it’s needed to deal with your request or to run the website, to these recipients:
- Website hosting provider Vercel Inc. (USA), whose servers deliver the website.
- Email service provider, through which we receive and send emails.
- Resend (Plus Five Five, Inc., USA), through which the website delivers messages from the Contact, Financing and Course dates forms to our mailbox.
- Cloudflare, Inc. (USA), whose Turnstile service protects the forms from bots. It starts once you begin filling in a form and processes only your IP address and technical data about your browser, not the content of the form.
- Google Ireland Limited for Google Analytics, and only with your consent. On the Contact page you can display a Google map. It loads only after you click the Show map button, and Google then processes your IP address and browser data in accordance with its own privacy policy.
- Accountants and tax advisers who keep our accounts and handle our taxes.
- Financial adviser, to whom we pass your contact details if you ask us to via the Financing form. From then on, the adviser deals with you as an independent controller.
- Authorities and courts, where the law requires us to.
Vercel, Resend, Cloudflare and Google may also process data in the USA. Vercel Inc., Plus Five Five, Inc. (Resend), Cloudflare, Inc. and Google LLC are certified under the EU-US Data Privacy Framework, which the European Commission has found to ensure an adequate level of protection for personal data.
How long we keep your data
- Enquiries, queries and applications that did not lead to a contract: for up to 2 years from the last contact.
- Contracts and accounting documents: for the period set by accounting and tax regulations, and for as long as we may need to substantiate claims under the contract, for example relating to construction defects, for up to 10 years.
- Cookie choice: until you change it or clear your browser data.
- Analytics data: cookies for up to 13 months, statistics for up to 14 months.
Once this period has passed, we delete or anonymise the data.
Your rights
In relation to your personal data, you have the following rights:
- Access: to find out what data we process about you and obtain a copy.
- Rectification: to have inaccurate data corrected or incomplete data completed.
- Erasure: to ask us to delete your data if we no longer need it and are not required by law to keep it.
- Restriction of processing: for example, while we verify the accuracy of your data.
- Portability: to receive the data you have provided to us in a machine-readable format, or to have it transferred to another controller.
- Objection: to object to processing based on legitimate interest, including follow-up communication about a quote.
- Withdrawal of consent: you can withdraw your consent to cookies at any time. This does not affect the lawfulness of processing before the withdrawal.
- Complaint: to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.
You can exercise your rights by email at oto.dolezal@mmgr-sruby.cz, by phone on +420 731 444 295 or by post to our registered office. We’ll reply without undue delay, within one month at the latest, free of charge. So that we don’t release your data to the wrong person, we may ask you to verify your identity.
Automated decision-making and effective date
We do not make automated decisions about you or create profiles that would have legal or similarly significant effects on you.
This policy is effective from 15 October 2026. If we change it, you’ll always find the current version on this page.
Write to us and we’ll gladly explain everything.
