Privacy policy

We value your privacy. This page explains, in plain language, what personal data we process, why, for how long, and what rights you have. We keep it human – no unnecessary legalese, but factually complete.

Who is the controller

The controller of your personal data is:

NAVO design s.r.o.
Tovární 403, 417 61 Bystřany, Czech Republic
Company ID (IČO): 07642458, VAT ID (DIČ): CZ07642458
E-mail: [email protected]
Phone: +420 606 686 279

For any privacy matters, contact us at [email protected].

What data we process

From contact and inquiry forms – when you write to us through a form on the website, we process the data you enter: full name, e-mail, phone, the text of your message; depending on the form also your location, the topic of your enquiry, the project type, or the name of your studio or company (these are optional). Required fields are marked with an asterisk.

For technical and security reasons we additionally store the time of submission, a hashed form of your IP address and information about your browser. We use them only to protect against spam. The form content is stored with us and sent to our address as an e-mail notification. We do not send you an automatic confirmation reply.

When you send an inquiry, we also store where you came to our website from (for example a Facebook or Instagram ad, an e-mail or a link on another website), as a source label and the campaign, ad set and ad number if the link contained them. We use this only to evaluate which campaigns bring inquiries. We do not store the full page address or anything identifying you in other services. This information is part of the inquiry and is kept for as long as the inquiry, for no longer than 5 years.

From website statistics – we measure traffic with our own tool provided by the FlowBridge platform the site runs on. We want to know which pages people read, for how long, and where they come from. We store nothing on your device – no cookie and no other identifier.

When a page is viewed, we record the page address, time, reading time, the website or campaign you came from, your country derived from your IP address, and the device type (computer, tablet, phone). We do not store your IP address or detailed browser information. We only use them to create a code that lets us group page views within the same day. The code changes every day, so we do not link page views from different days in this way.

Statistics run regardless of your choice in the cookie bar. We count cookie bar choices only in aggregate, without linking them to any specific page views.

From the Meta Pixel (Facebook, Instagram) – helps us see how our ads perform and show them to people who were interested in our projects. It loads only with your consent to marketing cookies. Meta then receives information about your visit (for example the pages you viewed) together with browser data and your IP address. We are jointly responsible with Meta for this transfer. Further processing is governed by Meta's privacy policy.

Necessary technical data – a small cookie holding your consent choice and a login/preview session for content management (applies only to site administrators).

Purposes and legal bases

• Handling your inquiry and communication about a project – Art. 6(1)(b) GDPR (steps prior to entering into a contract); for general questions Art. 6(1)(f) GDPR – our legitimate interest in replying.
• Website statistics – Art. 6(1)(f) GDPR – our legitimate interest in understanding how the site is used and improving it. You can object to this processing at [email protected].
• Marketing and remarketing (Meta Pixel) – Art. 6(1)(a) GDPR – consent.
• Necessary cookies and site security – Art. 6(1)(f) GDPR – legitimate interest (site functionality, storing your choice, abuse protection).

How long we keep the data

• Inquiries and form messages: 2 years from the last communication if no project arises; in the case of a project, for as long as needed to complete it and meet legal obligations.
• Cookie consent: 12 months (after which we ask again).
• Website statistics: individual records for 90 days. After that only aggregate daily counts remain, which no longer contain the daily code or individual records.
• Meta Pixel: the _fbp cookie for 90 days. Data passed to Meta is kept by Meta under its own rules.

Who we share data with

We do not sell your data. We disclose it only to the extent necessary to the following recipients:

• The FlowBridge web platform operator – technical operation of the website, forms and our own website statistics.
• Hetzner Online GmbH – hosting, servers in Germany.
• Cloudflare, Inc. – fast and secure website delivery; processes connection data including your IP address, which may be transferred to the USA under the EU-US Data Privacy Framework.
• E-mail service provider – delivering form messages to our inbox.
• OpenStreetMap Foundation (United Kingdom) – the map on the Contact and Showroom pages; when displayed, it receives your IP address and browser information.
• Meta Platforms Ireland Ltd. – only with your consent to marketing cookies.

Your rights

In relation to your personal data you have the right to:

• access – find out what data we process about you,
• rectification of inaccurate data,
• erasure ("right to be forgotten"),
• restriction of processing,
• objection to processing based on legitimate interest,
• data portability,
• withdraw consent at any time (withdrawal does not affect processing before it).

You can exercise any of these rights by e-mail at [email protected]. If you believe we handle your data unlawfully, you may lodge a complaint with the supervisory authority:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.

Cookies

The website uses cookies in three categories:

• Necessary – required for the basic operation of the site and to store your consent choice. They cannot be turned off.
• Analytics – currently not used on this site; we measure traffic without cookies (see Website statistics).
• Marketing – measurement and remarketing (Meta Pixel). Only with your consent.

Without your consent we do not load the Meta Pixel or any other marketing tools, and we store no cookies except the one that remembers your choice. You can change your choice at any time via the Cookies link in the footer. The change takes effect immediately; it does not affect website statistics.

Overview:

• cookie_consent (necessary) – remembers your choice and when you made it; 12 months.
• login/preview session (necessary) – site administrators only; for the session.
• _fbp (marketing, Meta) – recognises your browser for ad measurement; 90 days; only after consent.
• lastExternalReferrer, lastExternalReferrerTime (marketing, Meta, browser storage) – where you came to the site from; stored by the Meta Pixel after consent; kept until you clear them in your browser.