Privacy Policy

Effective date: January 31, 2026

1. Data Controller

Smart Whales s.r.o.
Company ID: 07729979
Registration: C 305510 at Municipal Court in Prague, Czech Republic
Email: martin@smartwhales.cz

2. What Personal Data We Process

When using the contact form on our website, we process the following personal data:

• Name – for identification and communication
• Email – to respond to your inquiry
• Phone – if you voluntarily provide it
• Company name – if you voluntarily provide it
• Inquiry type – to route your message
• Message content – to answer your specific question

3. Purpose of Data Processing

We process your personal data for the following purposes:

• Answering inquiries submitted through the contact form
• Offering WhaleVibe services (white-label, custom strategies, consulting)
• Communication regarding potential collaboration
• Fulfilling legal obligations (archiving business correspondence)

4. Legal Basis for Processing

We process your personal data based on:

• Art. 6(1)(a) GDPR – consent of the data subject (by checking the checkbox when submitting the form)
• Art. 6(1)(f) GDPR – legitimate interest of the controller (business communication, marketing)
• Art. 6(1)(c) GDPR – compliance with legal obligation (archiving accounting documents)

5. Data Retention Period

• Email correspondence: 2 years from last contact
• Business contracts: 10 years (legal archiving requirement)
• Unsuccessful communication: 6 months, then deletion

After the retention period expires, your personal data will be securely deleted or anonymized.

6. Recipients of Personal Data (Third Parties)

We may share your personal data with the following categories of recipients:

• Formspree.io – contact form processor (EU hosting, GDPR compliant)
• Email provider – to deliver messages to martin@smartwhales.cz

We do not sell your data to third parties for marketing purposes.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to access – you can request a copy of your personal data
• Right to rectification – you can request correction of inaccurate data
• Right to erasure ("right to be forgotten") – you can request deletion of data
• Right to restriction of processing – you can request temporary suspension of processing
• Right to data portability – you can request export of data in a structured format
• Right to withdraw consent – you can withdraw consent to processing at any time
• Right to lodge a complaint – you can file a complaint with the Office for Personal Data Protection

To exercise your rights, contact us at martin@smartwhales.cz.

8. Cookies and Tracking Technologies

Our website uses minimal cookies:

• Technical cookies – necessary for website functionality (session ID)
• Analytical cookies – WE DO NOT USE Google Analytics or other tracking tools

We do not track your behavior on the website for marketing purposes.

9. Security of Personal Data

We protect your personal data using:

• HTTPS encryption (SSL/TLS certificate)
• Honeypot anti-spam protection (Formspree)
• Regular security audits of infrastructure
• Restricted access to data (authorized persons only)

10. International Data Transfers

We primarily process your personal data within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards under Art. 46 GDPR (standard contractual clauses).

11. Contact for GDPR Inquiries

If you have any questions regarding personal data processing, contact us:
Email: martin@smartwhales.cz
Subject: "GDPR inquiry"

12. Changes to Privacy Policy

We may update this policy in case of legislative changes or changes in data processing methods. The current version will always be available on this page.

---

Office for Personal Data Protection (Czech DPA)

If you suspect a GDPR violation, you can file a complaint with:
Úřad pro ochranu osobních údajů
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
Web: www.uoou.cz
Email: posta@uoou.cz