Privacy Policy
Information on personal data processing (GDPR Compliance)
1. Data Controller
Name and Surname: Massimiliano Mattioli
Domain Name: Flowmatics.eu
Registered Office: Novodvorska 1070/4, 142 00 Praha-Libus, Repubblica Ceca
Identification Number (IÄŒO): 04774990
VAT Number (DIČ): CZ8302281273
2. Categories of Personal Data Collected
Identification and Contact Data
Name, Surname, Email address, Phone number, company data (where provided).
Navigation Data
IP address, browser type, date and time of access, pages visited (collected through cookies and analytical tools, regulated by the Cookie Policy).
Billing Data
Data necessary for issuing tax documents under Czech and EU law (e.g., Company name, Address, VAT/Tax Code).
3. Purposes of Processing and Legal Bases (Art. 6 GDPR)
| Purpose | Data Processed | Legal Basis |
|---|---|---|
| A. Handling Requests and Developing Offers | Identification and Contact | Performance of pre-contractual measures taken at the request of the data subject (Art. 6.1b) |
| B. Fulfillment of Legal and Tax Obligations | Identification and Billing Data | Compliance with a legal obligation (Art. 6.1c) to which the Controller is subject |
| C. Marketing and Promotional Activities | Email, Name | Explicit consent of the data subject (Art. 6.1a), freely given |
| D. Site/Service Analysis and Improvement | Navigation Data (Anonymized if possible) | Legitimate Interest of the Controller (Art. 6.1f) to improve services offered |
4. Processing Methods and Retention Period
Data is processed primarily using computer tools.
- Contract/Billing Data (A and B): Retained for 10 years (legal retention period for tax documents in the Czech Republic).
- Marketing Data (C): Retained until consent is withdrawn (Opt-out) by the user.
- Analytics Data (D): Retained for a maximum of 24 months, unless anonymized.
5. Data Recipients (Third Parties)
Data may be disclosed to the following parties (Data Processors under Art. 28 GDPR):
- Website hosting service providers
- Accountant (in CZ) for tax and accounting compliance
- Email marketing platforms (if used for purpose C)
- Public authorities and supervisory bodies, in case of legal obligation
Data will not be disclosed to the public, except with your specific and free consent.
6. Data Transfers Outside the EU
If services with servers located outside the European Economic Area (EEA) are used, the transfer will only take place with adequate safeguards, such as the adoption of Standard Contractual Clauses (SCC) approved by the European Commission or an adequacy decision.
7. Data Subject Rights (Art. 15-22 GDPR)
You have the right to request from the Controller:
- Access to your personal data
- Rectification (correction) of inaccurate data
- Erasure (right to be forgotten)
- Restriction of processing
- Data portability
- Objection to processing (especially for marketing purposes)
Right to Complain: You have the right to lodge a complaint with the competent Czech supervisory authority (Úřad pro ochranu osobnÃch údajů) or the supervisory authority of the Member State where you reside.