Privacy Policy

You provide us with your personal information if you:

  • visit our website or blog,
  • fill in and submit the contact form as a potential customer, job seeker, or blog reader,
  • register as a participant in our Facebook event,
  • go to our educational event,
  • become a fan of our site, give us Like or write a comment on Facebook or Instagram.

Here you'll find out what's happening to your data, how it's secured, and what rights you have in relation to the applicable legal regulations.

We process your personal data in accordance with General Data Protection Regulation (EU) 2016/679 (GDPR).

Who is the controller of your data?

We are a team of Webvalley s.r.o., Pohraniční 504/27, 703 00 Ostrava, The Czech Republic, VAT CZ29448531, represented by the Managing Director Lukáš Vlček.

We run web sites,, facebook page Webvalley and profile @webvalleyagency on Instagram. We organize educational events such as lectures, workshops and open days where you can register through a facebook event.

We are in the position of a controller of your personal data because we determine the purposes, means and the length of processing of personal data, and we instruct processors to provide us with the necessary processing that we are not able to manage ourselves.

If you want to know more about the processing of your personal data after reading our Privacy Policy, you can contact us at

How do we process your personal information?

We process personal information you entrust to us for the following reasons (to fulfill these purposes):

Company website and cookies

When you visit our website or blog, we automatically store some information about you in the server logs. We gather information about your device from the protocol and cookies, such as the operating system and its version, screen resolution, browser type and version, IP address, your activities and preferences for a certain period of time, so you do not have to re-enter them when you return or transition from page to page.

The server provider for our sites is Amazon Web Services, Inc., headquartered at 410 Terry Avenue North, Seattle WA 98109, USA. We currently use datacenters located in Germany, so that we do not transfer your data outside of the EU. You can find how Amazon processes your personal information HERE.

Some information about visiting our site may be recorded using pixel tags that share the information with third parties through cookies. The information gathered by pixel tags does not allow us to identify a certain person, even though it can be linked to your personal information. We use them to support our marketing activities and the development of our services.

Cookies are used to distinguish individual users and store users preferences. Cookies carry a small amount of data that our website puts onto your computer or mobile device. Every time you visit our site, your browser sends the stored data back to the server hosting our site.

We use cookies that are necessary for proper functionality of our site, technical storage, message delivery, or the provision of required services through our website. Your consent is not required for the use of these cookies. These are relational and permanent cookies.

Relative cookies help to properly display the pages and automatically delete themselves after you leave the page. Permanent cookies are stored on your device and may contain an anonymous identifier of your browser. They do not serve to identify you, but they identify access to the site and the behavior of users accessing the site through a particular device for the purpose of site usage statistics. The tracking cookie can recognize repeated visits to websites from the same browser on the same device, and track activity while browsing the site.

We also use third-party services that store cookies on your computer to track traffic and access to our website. You can get more information about these cookies on the Google Analytics and Facebook.

The use of third-party cookies is only allowed with your consent. Your consent to the use of cookies is indicated by a web browser setup where you can accept or reject cookies. You can change your settings at any time or delete existing cookies. However, if cookies are disabled, it may be more difficult to use our website or you will not be able to use our website properly.

Contact forms on our website

Potential clients and job seekers can contact us via a form on our website.

If you are interested in our services and possible cooperation, you can send us your contact details and the proposal of an order. You can expect us to contact you with an offer. In this case, we do not require consent to process your personal information in order to establish communication with you, because we are allowed to gather necessary information before creating a contract.

Even if we finally do not enter into a cooperation, we would like to keep you in the database of potential clients for 2 years. It is possible that in the future we will come up with new opportunities, a better price or technological solutions that could revive our cooperation. Therefore, in the context of performance of the contract, we perceive a legitimate interest to contact you again for such purpose. You can oppose the processing at any time, and your data will be deleted from our database.

When you respond to our advertisements in the Career section, you give us your personal information for the purpose and during the time of the selection process. We do not require your consent for this purpose because it is a legal processing for the purpose of concluding a contract of employment.

If you are not selected, your details will be deleted after the selection process. However, if you are interested in getting similar job offers from us beyond the selection process, you can give us permission to process your personal data for the purpose of registering your person and offering similar jobs for a period of 2 years after the selection process has ended.

The communication and records of potential clients and job seekers are handled by Microsoft Ireland Operations Ltd, Carmanhall Road, Sandyford Industrial Estate, Dublin, 18 Ireland through their Office 365 electronic systems. Your personal data may be transferred and stored by the processor in the non-EU countries, which provide adequate protection of personal data. For the details on Privacy Policy, visit the Microsoft Web site HERE.

Fans, Likes and Comments

Through our social networks and blog, you can voluntarily provide us with your contact information by becoming our fan, giving us Likes or writing a comment. In this case, we perceive a legitimate interest in using the contact you provide for the purposes of marketing communications about events and our e-commerce and site development activities. You can oppose such processing at any time by sending an email to

We promote our company on social networks Facebook and Instagram. The processor of your personal data in such case is Facebook Ireland Ltd., located at 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. Learn more about their Privacy Policy HERE.

Organization of events on Facebook

We need you to register to a facebook event to organize the event. On the page of the event you can learn about the program and venue. We also publish videos from the event there that you will have free access to. We may also send you messages with notifications regarding the event you are registered to.

If you have registered to our event, we have a legitimate interest in sending you news about our similar events and other e-commerce and site development activities. We will do this for 2 years from registering and you can object at any time by sending an email to

If you would like to hear about similar events by Webvalley even after that, you can grant us written permission to process your facebook contact for the purpose of informing you about events and other company activities.

Visiting our event

When you go to any Webvalley event, we may ask you for written consent to acquire and use your photos, video and audio records for the purpose of publishing and presenting our company on our website, blog and social networks. Such consent is not a prerequisite for participation in an event and you can revoke it at any time. Participants who give us consent will also get free ticket to the event.

Participants who do not give us consent to the processing at the entrance will pay full admission and will be visibly marked with distinctive bracelets. Before shooting, we will clearly invite these participants to temporarily leave the area.

If you participate in our event, as to an important customer, we will send you reports on organized events and other e-commerce and site development activities for 5 years from visiting the event. We will use the contact information you provide to us for such purpose based on the legitimate interest of the controller. At any time, you can object to getting commercial messages by sending an email to


If you become our client or buy a ticket to our event, we need your personal information (billing information) to comply with the legal obligation to issue and file invoices.

We issue electronic invoices via web application iDoklad from Solitea The Czech Republic, a.s., Drobného 49, 602 00 Brno, VAT CZ25568736. You can learn about their Privacy Policy HERE.

Accounting and tax records are provided by the external processing company MEDICONTAX s.r.o., Bachmačské náměstí 334/6, Dejvice, Prague 6, 160 00, VAT CZ24668397, with which we have a contract for the processing of personal data in accordance with GDPR.

Data transfer, storage and security

Your personal data are protected by appropriate technical and organizational measures that are reasonable in terms of technological development and costs at the time of processing. We undertake to abide by all measures to prevent the misuse, erasure, alteration or destruction of your personal information.

Your personal data is processed by authorized staff who are liable for keeping your personal data and related security measures. All of our employees have been trained in the security of personal data processing.

We store your personal information for the duration of the limitation period unless a longer period is required by the law or we have stated otherwise in specific cases. Personal data is stored physically in lockable registry or in electronic form in the applications of our processors that provide an adequate level of protection.

We use the services and applications of specialized processors who follow GDPR to provide some specific processing operations that we cannot provide ourselves. We put high demands on security and processing quality when choosing our processors. Terms and conditions of the processing of personal data are specified in the contract. Without your consent, your personal data will not be disclosed to any third party.

We process personal data in countries within the European Union or in countries that provide an adequate level of protection based on a European Commission decision.

Below you will find a summary of all processors that we are currently using with links to publicly available processing contracts. In the future, we may choose to use applications of another processors for easier and better processing, which will be added to our Policy.

Amazon – servers

Facebook – company promotion, event organization, messaging to subscribers

Google – website traffic analysis

iDoklad – registration and issuing of invoices

Instagram – company promotion

Microsoft – emailing in Outlook, database of contacts in Excel

Medicontax – accounting

What are your rights?

According to the data protection legislation, especially Chapter III GDPR, you as the data subject have the following rights. You can exercise your rights by email at

Right to information

We post our privacy policy to keep you informed about all the facts concerning the processing and protection of your personal information. If you are interested in any additional information, you can contact us at any time.

Right to object to processing

The messages you receive from us are sent out based on your consent, a contract with you or our legitimate interest. For example, if you send us a contact form from our website and then you change your mind and you do not want to receive any more news from us, you can at any time object to direct marketing and we will respect your decision.

Right of access to personal data

At your request, we will let you know within 30 days what personal data we process about you and why. You may also ask us for a copy of the processed personal data.

Right to add and change personal information

If something changes or you find your personal information outdated or incomplete, please let us know.

The right to restriction of processing

If you believe we are processing an inaccurate data or we are processing them illegally, you may request that you limit the scope or purpose of processing your personal information. When you object to processing, for example, in response to our Facebook message, we will limit the purpose of processing your Facebook contact for sending marketing communications.

The right to transfer your personal data to another organization

If you use our services, you have the right to request termination of cooperation and we will provide you with your personal data in a structured, commonly used and machine-readable format. If technically feasible, we may pass your data directly to your new service provider.

The right to erasure

We will erase your personal information from all storages as soon as they are not needed for the purposes for which they were collected, if you withdraw your consent or ask us to do so. We also let all of our processors know about your decision. We cannot erase data on your request if it is processed on the basis of a legal obligation.

The right to withdraw consent

Our services are available to you regardless of your consent to processing that is not necessary for the performance of the services. For specific purposes that are not based on performance of the contract or our legitimate interest, you may voluntarily give us written consent to the processing of personal data. If you do not wish us to process your data in this way, you can withdraw your consent at any time. However, the withdrawal of your consent does not affect the lawfulness of the processing before its withdrawal.

Right to lodge a complaint with the Supervisory Authority

If you believe that we are violating privacy laws, you have the right to lodge a complaint with the Office for personal data protection in The Czech Republic or any other relevant supervisory authority against the processing. The Office informs you of resolving your complaint and the possibility of legal protection.

Please let us know if you suspect that we are not following the law and give us an opportunity to correct any mistakes.

The right not to be the subject of a decision based exclusively on automated processing, including profiling

We currently do not process your data for these purposes.

This Privacy Policy applies from 5/21/2018.