Privacy Policy

The data controller is DEVIS s.r.o., Mikanova 3251/7, 106 00 Praha 10, Czech Republic, Company ID (IČO) 28535901, VAT ID CZ28535901, registered with the Municipal Court in Prague, Section C, Entry 148683 ("DEVIS").

For data protection matters you can contact us at info@dev-is.cz.

Software development inquiry (/contact/): full name, email and a description of your needs (required); company, phone and service context (optional).

Training inquiry (/training-inquiry/): full name, email and a selected course or custom topic (required); company, phone, number of participants, their level, preferred date, format and message (optional).

We also process the time the inquiry was received and the technical data needed to deliver it and protect the form against abuse.

We process your data to handle your inquiry, communicate with you about it, and prepare a possible offer or contract.

The legal basis is taking steps at your request prior to entering into a contract (GDPR Art. 6(1)(b)) — by submitting the form, you yourself ask us to contact you about a specific service. We process the anti-abuse protection on forms (Cloudflare Turnstile) on the basis of our legitimate interest in operating the site securely (GDPR Art. 6(1)(f)).

The forms therefore don't include a separate consent checkbox — the legal basis is handling your request, not consent.

Only an authorized DEVIS staff member handling your inquiry has access to the stored inquiry.

We use the following processors to operate the site and deliver your inquiry:

• Cloudflare, Inc. — operating the website, storing the received inquiry (Cloudflare D1), and protecting forms against automated abuse (Cloudflare Turnstile); for anonymous visitor statistics we use Cloudflare Web Analytics, which uses no cookies or other client-side storage and does not track individual visitors.
• Resend — delivering the internal notification about your inquiry and the email confirmation to you as the customer.
• Google Fonts (Google Ireland Limited) — loading the site's typeface; your IP address is sent to Google when you visit the site. Not specific to the inquiry forms' content, but happens on every visit.

These processors may process data outside the European Economic Area; where that applies, DEVIS requires appropriate safeguards under the GDPR (e.g. standard contractual clauses). We do not sell your data or pass it on for third-party marketing purposes.

We keep received inquiries for an indefinite period, with no fixed retention limit. No automatic time-based deletion is configured.

You can request the deletion of your data at any time — see "Your rights" below.

You have the right to access your personal data, have it corrected or erased, restrict its processing, receive it in a portable format, and object to processing based on legitimate interest. You can exercise these rights at info@dev-is.cz.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).

Data transmitted between your browser and our servers is encrypted. Only a limited group of authorized people has access to stored inquiries, and message content and personal data are not part of routine technical logs.