Privacy Policy
Information on the processing of personal data (GDPR compliance)
1.Data Controller
Full Name: Massimiliano Mattioli
Domain Name: Flowmatics.eu
Registered Office: Novodvorska 1070/4, 142 00 Praha-Libuš, Czech Republic
Identification Number (IČO): 04774990
VAT Number (DIČ): CZ8302281273
2.Categories of Personal Data Collected
Identification and Contact Data
First name, last name, email address, telephone number, company details (where provided).
Browsing Data
IP address, browser type, date and time of access, pages visited (collected through cookies and analytics tools, governed by the relevant Cookie Policy).
Billing Data
Data necessary for issuing tax documents under Czech and EU law (e.g. company name, address, VAT number/tax code).
3.Purposes of Processing and Legal Bases (Art. 6 GDPR)
| Purpose | Data Processed | Legal Basis |
|---|---|---|
| A. Handling Requests and Developing Offers | Identification and Contact Data | Taking steps prior to entering into a contract at the request of the data subject (Art. 6.1b) |
| B. Compliance with Legal and Tax Obligations | Identification and Billing Data | Compliance with a legal obligation (Art. 6.1c) to which the Controller is subject |
| C. Analysis and Improvement of the Site/Service | Browsing Data (anonymised where possible) | Legitimate interest of the Controller (Art. 6.1f) in improving the services offered |
4.Method of Processing and Retention Period
Data are processed mainly by electronic means.
- Contract/Billing Data (A and B): Retained for 10 years (statutory retention period for tax documents in the Czech Republic).
- Analytics Data (C): Retained for a maximum of 24 months, unless anonymised.
5.Recipients of Data (Third Parties)
Data may be disclosed to the following parties (Processors under Art. 28 GDPR):
- Website hosting service providers
- Accountant (in the Czech Republic) for tax and accounting obligations
- Automation service (Make.com), which receives the data entered in the contact form
- Calendly, for managing video call bookings
- Public authorities and supervisory bodies, where there is a legal obligation
Data will not be disclosed to the public, except with your specific and freely given consent.
6.Transfers of Data Outside the EU
Where services with servers located outside the European Economic Area (EEA) are used, the transfer will take place only with appropriate safeguards, such as the adoption of the Standard Contractual Clauses (SCCs) approved by the European Commission, or where an adequacy decision applies.
7.Rights of the Data Subject (Art. 15-22 GDPR)
You have the right to request from the Controller:
- Access to your personal data
- Rectification (correction) of inaccurate data
- Erasure (right to be forgotten)
- Restriction of processing
- Data portability
- Objection to processing
Right to Lodge a Complaint: You have the right to lodge a complaint with the competent Czech Supervisory Authority (Úřad pro ochranu osobních údajů) or with the Supervisory Authority of the Member State in which you reside.