

Privacy Policy
Our company, as the data controller, places the utmost importance on safeguarding personal data you
provide to us. Protection of your personal data and its processing in compliance with applicable
regulations is our priority.
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we provide you with detailed information on the personal data we process. This applies to the processing of personal data relating to our clients, website users, and other business partners. This Privacy Policy outlines the legal basis for processing personal data, the purposes of such processing, potential recipients of the data, and your rights in connection with its processing.
If you have any questions, comments, or concerns regarding your personal data and its processing, or you wish to exercise any of your rights regarding your personal data we process as described further in this Privacy Policy, you can contact us via following contact details:
Wonder Makers s.r.o.
Mezibranská 1668/5, Nové Město, 110 00 Prague 1, the Czech Republic
team@wondermakers.digital
+420 603 410 127
Personal data encompasses any information that relates to you as an individual or, in the case of a legal entity, to your contact persons as individuals. This includes any data that can directly or indirectly identify you or your contact persons.
Below is more detailed overview of the purposes for which we process personal data, along with the primary legal basis we rely on for such processing:
Personal data will typically be processed and retained for the following periods:
All personal data is processed by us as the controller. This means that we determine the purposes for which your personal data is collected and processed, and the methods of processing. We are responsible for ensuring proper handling of your personal data processed by us or on our behalf.
We may also share personal data with third parties who act as external contractors providing us certain services necessary for the operation of our website, delivery of our products or services, and conducting our other business activities. These third parties may process personal data for purposes such as web hosting, collection, processing of data from our website contact form, securing safety and security of our website, marketing services and related analytical purposes, and provision of external advisory services (e.g., tax, accounting, or legal services). At this moment, the external providers which may receive your personal data as third-party processors include:
These measures are designed to prevent unauthorized or unlawful processing of your personal data. While we strive to comply with all applicable legal requirements and do our best to protect your data, we cannot guarantee its security if it is transmitted or transferred in an insecure manner.
General information about your rights can also be found on the website of the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) at https://uoou.gov.cz/verejnost/zakladni-prirucka-k-ochrane-udaju.
This version of the Privacy Policy is effective as of January 24, 2025. Wonder Makers s.r.o. reserves the right to update this Privacy Policy at any time upon its sole discretion.
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we provide you with detailed information on the personal data we process. This applies to the processing of personal data relating to our clients, website users, and other business partners. This Privacy Policy outlines the legal basis for processing personal data, the purposes of such processing, potential recipients of the data, and your rights in connection with its processing.
1. CONTROLLER OF THE PERSONAL DATA
The controller responsible for the processing of your personal data is Wonder Makers s.r.o., with its registered seat at Mezibranská 1668/5, Nové Město, 110 00 Prague 1, the Czech Republic, Company ID No.: 178 44 576, registered in the Czech Commercial Register maintained by the Municipal Court in Prague under File No. C 376671, unless stated otherwise in this Privacy Policy.If you have any questions, comments, or concerns regarding your personal data and its processing, or you wish to exercise any of your rights regarding your personal data we process as described further in this Privacy Policy, you can contact us via following contact details:
Wonder Makers s.r.o.
Mezibranská 1668/5, Nové Město, 110 00 Prague 1, the Czech Republic
team@wondermakers.digital
+420 603 410 127
2. WHAT PERSONAL DATA WE PROCESS
The type of personal data we process about you, or your contact persons if you are a legal entity, depends on the specific processing activities involved. Typically, the personal data we process includes:- Identification data: Name, surname, address, company name (if you represent a legal entity), and identification numbers (e.g., company or trade license ID).
- Contact details: Address, phone number, email address, data box etc.
- Location data: Address, IP address.
- Business details: Information about products or services you are requesting, expected budget for the requested products or services (optional), details of your potential complaints.
- Payment details: Bank account numbers, payment records, invoices.
- Cookies: For a detailed description of the cookies collected and their purpose and processing, please refer to our Cookies Policy.
3. PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
We process personal data based on one or more of the following legal basis:- Performance of a contract: To conclude a contract with you or take other steps at your request prior to conclusion of the contract, or to perform the contract with you and fulfil our rights and obligations thereunder.
- Legitimate interest: To pursue our legitimate interests, as long as these are not overridden by your interests or fundamental rights and freedoms.
- Legal obligations: To comply with our obligations under applicable laws and regulations.
- Consent: Where you explicitly agree to the processing of your personal data for specific purposes.
Personal data encompasses any information that relates to you as an individual or, in the case of a legal entity, to your contact persons as individuals. This includes any data that can directly or indirectly identify you or your contact persons.
Below is more detailed overview of the purposes for which we process personal data, along with the primary legal basis we rely on for such processing:
A. Performance of a contract
If you inquire about our products or services (whether for binding or informative purposes),
initiate or respond to negotiations regarding potential cooperation, or enter into a contract with
us, we are entitled to process personal data necessary for us to facilitate these steps. This
includes actions required before entering into a contract, executing the contract, performing rights
and obligations under the contract, and achieving its intended purpose.
Such processing purposes may primarily include the following:
Such processing purposes may primarily include the following:
- Contacting you to discuss and negotiate potential cooperation.
- Communicating with you should you decide to work with us.
- Negotiating and entering into a contract.
- Performing the contract, including delivering or deploying the ordered products or agreed services, and conducting related activities such as communication, invoicing, accepting potential complaints, resolving potential errors, debt collection, etc.
- Insertion or your data into our database of clients or potential clients.
B. Legitimate interest
We may process your personal data based on our legitimate interest under stringent conditions,
ensuring that our interests do not override your interests or fundamental rights and freedoms.
Such processing purposes may primarily include the following:
Such processing purposes may primarily include the following:
- Testing new functions of our website and improving our products or services.
- Promoting our products or services through direct marketing efforts.
- Sharing our business updates, newsletters, and other commercial communications (the “Commercial Communication”), provided you have engaged in final stage of negotiations to enter into, or have already entered into, a contract for the delivery of our products or provision of our services.
- Ensuring the security of our network and information systems.
- Safeguarding our property and preventing fraudulent activities.
- Protecting our legal interests and exercising or defending legal claims.
C. Performance of a legal obligation
Where we rely on a legal obligation as the legal basis for processing personal data, this is to
ensure compliance with our regulatory and statutory duties. The type of personal data processed
based on this legal basis will vary depending on the particular legal obligation applicable to us in
connection with products, services and activities provided to you. Common examples of such legal
obligations include compliance with financial or statistical regulations, such as Act No. 235/2004
Coll., on Value Added Tax, as amended, or Act No. 563/1991 Coll., on Accounting, as amended.
D. Consent
When using your consent as legal basis for processing personal data, we will also inform you about
the processing beforehand and make sure that we have your explicit consent before the processing is
initiated.
This legal basis will typically apply in case you sign up for our Commercial Communication mailing list. Such processing purposes may primarily include the following:
You have the right to withdraw your consent at any given time by contacting us via team@wondermakers.digital.
This legal basis will typically apply in case you sign up for our Commercial Communication mailing list. Such processing purposes may primarily include the following:
- Insertion of your data into our database for emailing our Commercial Communications.
- Sharing our Commercial Communications.
You have the right to withdraw your consent at any given time by contacting us via team@wondermakers.digital.
4. RETENTION PERIOD OF YOUR PERSONAL DATA
We process and retain personal data only for as long it is necessary to fulfil the purpose for which it was collected. Personal data may be retained for a longer period if required by applicable law or for the purpose of exercising our legitimate interests, including exercising or defending our legal claims.Personal data will typically be processed and retained for the following periods:
- Performance of a contract: For a period of 10 years from the last day of contract performance.
- Initial negotiations that do not result in a contract: For a period of 6 months from the last communication between us regarding the matter.
- Exercising or defending legal claims: For a period of 10 years from the termination of our cooperation or the contract, or from our last communication, or for a longer period if a lawsuit is initiated within the statute of limitations.
- Commercial Communication: For a period of 3 years from the last time you ordered our product or used our services or until you unsubscribe from receiving our Commercial Communications, whichever occurs first.
- Other legitimate interests: For a period of 4 years from the termination of our cooperation or the contract, or from our last communication.
- Performance of a legal obligation: For a period stipulated by the relevant legal regulation, but no longer than 10 years, unless the legal regulation specifies a longer period.
- Consent: For the duration of purpose for which the consent to process personal data was granted or until such consent is withdrawn, whichever occurs first.
5. TRANSFER OF PERSONAL DATA TO THIRD PARTIES
We will only disclose personal data to our authorised employees and data processors engaged by us under relevant contracts, or to other data controllers, but only to the extent necessary to achieve the purpose of the processing and based on the applicable legal basis for the processing of personal data.All personal data is processed by us as the controller. This means that we determine the purposes for which your personal data is collected and processed, and the methods of processing. We are responsible for ensuring proper handling of your personal data processed by us or on our behalf.
We may also share personal data with third parties who act as external contractors providing us certain services necessary for the operation of our website, delivery of our products or services, and conducting our other business activities. These third parties may process personal data for purposes such as web hosting, collection, processing of data from our website contact form, securing safety and security of our website, marketing services and related analytical purposes, and provision of external advisory services (e.g., tax, accounting, or legal services). At this moment, the external providers which may receive your personal data as third-party processors include:
- Vercel- web hosting.
- Basin- collection and processing of data from the website contact form.
- Google reCAPTCHA- safety and security protection of our website.
- Google Analytics- marketing and analytical purposes.
- Google Tag Manager- website tracking and analytics.
6. DATA SECURITY
We are dedicated to ensuring the secure processing of your personal data. To achieve this, we have implemented appropriate physical, technical, and organizational measures to protect and secure all information collected and processed by us.These measures are designed to prevent unauthorized or unlawful processing of your personal data. While we strive to comply with all applicable legal requirements and do our best to protect your data, we cannot guarantee its security if it is transmitted or transferred in an insecure manner.
7. RIGHTS OF THE DATA SUBJECT
As data subject, you are entitled to the following rights:- Right to withdraw consent You have the right to withdraw consent where such consent establishes the legal basis for the processing of your personal data, for example when your personal data is collected for certain marketing activities. Please note that the withdrawal of consent will not affect the lawfulness of processing based on your consent conducted before its withdrawal.
- Right to access to the personal data You have the right to ask for copies of your personal data that we process about you. By obtaining this copy, you will be able to understand what of your personal data we hold and process. The right of access applies when a record contains information that can identify you as an individual. Records made available to you might also contain personal data of other individuals. If so, such personal data of other individuals will be redacted where necessary to protect their right to privacy. Additionally, if someone else requests access to a record containing your personal data, it will be redacted to protect your privacy. There are other legal exemptions that may apply, such as records where legal privilege must be maintained or where there is a confidentiality obligation in specific situations. Any applicable exemption will have a clear legal basis, and we will explain it to you if required.
- Right to rectification of inaccurate personal data and completion of incomplete personal
data You have the right to request that we rectify any information you consider inaccurate. You also have the right to request that we complete any information you consider incomplete. This right is aligned with one of the core principles of data protection. Any request to rectify your personal data will also be communicated and actioned by any processor with whom we have shared your personal data. This process is managed by us, and you will not need to take any additional action to exercise your right in full.
- Right to erasure the personal data You have the right to ask us to erase your personal data when (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (ii) the personal data have been unlawfully processed, (iii) you object to the processing, and there are no overriding legitimate grounds for the processing of your personal data on our side, or (iv) the legal obligation under EU or national law to process personal data no longer applies. But please be advised that we are obliged to keep several records according to applicable laws. If so, we may not be able to delete every record or personal data that is processed about you. If this happens, we will explain to you the circumstances where relevant.
- Right to restriction of processing the personal data You have the right to ask us to restrict the processing of your personal data in certain circumstances such as if the respective data is not relevant to fulfil our legal obligations or fulfil the purpose for which they were collected and processed.
- Right to object to processing the personal data You have the right to object to the processing of your personal data. The right can be invoked when the legal basis is legitimate interest, including profiling. If an objection is made, we must show compelling legitimate interests to continue processing personal data for that specific purpose.
- Right to data portability You have the right to request that we transfer the personal data you provided to us to another organisation or to yourself. This allows you to transfer the data in a machine-readable format to another recipient. This right to data portability applies to personal data that is processed based on your consent or for the performance of a contract. It only applies to the personal data that you have provided us directly, and we have not received them through any third party. This right will not be exercised if it would adversely affect the rights of others. In such cases, we will not be able to transfer your personal data.
- Right to complain to a data protection authority and right to effective judicial remedy If necessary, you have the right to file a complaint with a data protection authority and the right to effective judicial protection through a court. For us, the relevant supervisory authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) which can be reached using the contact details below. You can also contact your local data protection authority.
Úřad pro ochranu osobních údajů
Pplk. Sochora 27, 170 00 Prague 7
+420 234 665 800
posta@uoou.gov.cz
Kontakt | Úřad pro ochranu osobních údajů (gov.cz)
General information about your rights can also be found on the website of the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) at https://uoou.gov.cz/verejnost/zakladni-prirucka-k-ochrane-udaju.
This version of the Privacy Policy is effective as of January 24, 2025. Wonder Makers s.r.o. reserves the right to update this Privacy Policy at any time upon its sole discretion.