Controller and contact
The controller for operation of this website and communication with you is Monaxa professional s.r.o., company registration number 08360910, registered office Dubnice 28, 794 01 Lichnov, Czech Republic. For privacy questions or requests, email nakup@vykuptvrdokovu.cz or call +420 722 086 304.
Email and telephone
When you email or call us, we process the details you provide, usually your name, contact details, message and information about the material offered. We use them to reply, prepare an offer and discuss a possible purchase. Where you request steps before a contract, the basis is Article 6(1)(b) GDPR. For general inquiries and contacts from company employees, our legitimate interest in handling business communication is the basis under Article 6(1)(f) GDPR.
Contacting us is voluntary. Without a return address or description of the request, we may be unable to reply or prepare an offer. We do not use these details for marketing mailings.
Contact and inquiry forms
The general contact form requires a name, email and message; telephone is optional. The inquiry form requires first and last name, telephone, email, material type and estimated quantity; company and additional message are optional. We need the required details to reply and assess your inquiry. Depending on its content, handling the message is based on requested pre-contractual steps (Article 6(1)(b) GDPR) or our legitimate interest in replying to a general or company inquiry (Article 6(1)(f) GDPR). The required form confirmation is neither a marketing choice nor consent to optional measurement.
We send entries via an SMTP provider to our company email. After the mail server accepts the email, we also send contact details and the content to the internal MonaxaPlus CRM; a client and inquiry record is created when that transfer succeeds. The website has no database of form submissions. If sending fails, a draft may remain only in the memory of the open page. General contact messages receive a confirmation email; inquiries do not receive an automatic confirmation.
Website operation, measurement and fonts
To deliver and protect the website, the server and hosting provider process technical data, particularly IP address, time and requested URL. Protection against excessive form submissions uses files containing a hash of the IP address, form type and attempt times. These security records do not contain the message text. The purpose is service availability and security; the legal basis is our legitimate interest under Article 6(1)(f) GDPR.
On the production domain we measure aggregate traffic with our own Umami installation at data.sabemio.cz. Its tracker uses no cookies. It records page visits and limited events for phone or email clicks and accepted form submissions; we do not send form values, contact details or URL query strings and fragments. We respect Do Not Track. Technical requests to the measurement server may nevertheless include an IP address in operational logs. The purpose is improving the website, based on our legitimate interest under Article 6(1)(f) GDPR. According to the Umami documentation, self-hosted data does not expire by default until removed; this does not establish a configured retention period for our installation.
Optional Google Tag Manager and Microsoft Clarity start only after your explicit consent (Article 6(1)(a) GDPR). You can change your choice at any time through “Measurement settings” in the footer. Withdrawal does not affect the lawfulness of processing before withdrawal or prevent us from handling your message. The GTM container currently has no Google Analytics or Google Ads tags. We use Clarity session recordings, clicks and heatmaps to understand visitor behavior and improve layout and usability. Clarity may process IP address, URL, device data, interactions and its own pseudonymous identifiers. We mask forms and confirmation screens; we send no custom user identifier or form values to Clarity. Advertising storage is denied. We do not start Clarity on this website when Do Not Track is enabled.
Clarity is provided by Microsoft Ireland Operations Limited. Microsoft describes its Clarity role as a controller; its Privacy Statement explains further processing. The Clarity FAQ says that subsequent transfer between the Irish and US Microsoft companies may take place under standard contractual clauses. Microsoft states that ordinary playback recordings are retained for 30 days, while click data, heatmaps and labeled or favorited sessions are retained for 9 months.
We serve this website’s fonts directly from our own domain. Loading them does not require a connection to Google Fonts servers.
Cookies and local storage
| Name | Provider | Purpose | Lifetime | Optional |
|---|---|---|---|---|
monaxa_measurement_consent_v2 (localStorage) | MONAXA | Remember your measurement choice. | No automatic expiry; until overwritten or cleared in the browser. | No |
monaxa_measurement_gate_v2 (cookie) | MONAXA | Apply the choice on this host. | 365 days after the last write. | No |
_clck (cookie) | Microsoft Clarity | Pseudonymous visitor ID and preferences for this site. | Normally 365 days per Clarity defaults; the browser may delete it earlier. | Yes |
_clsk (cookie) | Microsoft Clarity | Join page views into one session. | Normally 1 day per Clarity defaults; the browser may delete it earlier. | Yes |
_cltk (sessionStorage) | Microsoft Clarity | Identify the open tab. | Until the tab session ends. | Yes |
The Microsoft cookie list also names cookies on Microsoft domains that Clarity may use after consent, such as CLID, ANONCHK, MR, MUID and SM; actual use depends on the browser and Microsoft service. Older keys monaxa_cookie_consent_v1, monaxa_analytics_gate_v1 and monaxa_cookie_notice_v4 may remain from an earlier version. They do not grant new Clarity consent; the older cookie lasts 365 days from its write, and older localStorage keys have no automatic expiry. Umami sets no cookies.
Recipients and retention
Authorized MONAXA staff access the data as needed. Hosting at SvetHostingu.cz s.r.o. and measurement infrastructure provide technical operation, the SMTP provider carries emails, and the internal MonaxaPlus CRM records submissions. Direct calls and emails pass through communication services used by you and us. Google may receive technical details through GTM after consent; Microsoft receives Clarity data only after consent.
We use Umami statistics as needed to understand website use and evaluate changes; we do not state a fixed retention period for our installation. We keep emails and CRM records for the time needed to resolve the inquiry, offer and subsequent discussions. If the matter leads to contractual or other legally required records, the relevant data follows mandatory retention periods; disputed matters may be kept as needed to protect legal claims. Security records from the website and form protection are kept according to operating needs, incident investigation and abuse prevention. The ten-minute form rate limit does not automatically delete its file. External service retention follows their own policies; Clarity periods are stated above.
Your rights
You can request access, correction, erasure or restriction of your personal data. Where applicable, you may object to processing based on legitimate interest and request data portability. You can withdraw consent to optional measurement at any time through “Measurement settings” in the footer. Email requests to nakup@vykuptvrdokovu.cz; we will reply within the statutory period.
You may complain to the Czech Office for Personal Data Protection. Its overview of data subject rights has more information.