1. Controller

The data controller for the purposes of the General Data Protection Regulation (EU 2016/679, "GDPR") and applicable Czech law is:

dvoora s.r.o.
Czech Republic
Contact: david.voracek@forgingways.com

2. What Data We Collect

We collect the following categories of personal data:

• Contact information — name, email address, company name, and message content submitted via the contact form.
• Usage data — IP address, browser type, pages visited, and time spent on pages, collected via cookies and server logs.
• Communication records — emails and correspondence exchanged with us.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR) — for analytics, security, and improving our services.
• Consent (Art. 6(1)(a) GDPR) — for non-essential cookies, where you have opted in.
• Contract performance (Art. 6(1)(b) GDPR) — when processing is necessary to fulfil an engagement.
• Legal obligation (Art. 6(1)(c) GDPR) — where required by Czech or EU law.

4. How We Use Your Data

• To respond to enquiries submitted via the contact form.
• To manage client engagements and communications.
• To analyse website traffic and improve our digital presence.
• To comply with legal and regulatory obligations.

5. Cookies

Our website uses cookies. Strictly necessary cookies are set automatically. Non-essential cookies are only set after you provide consent via our cookie banner. See our Cookie Policy for full details.

6. Data Sharing

We do not sell or rent your personal data. We may share data with hosting and email service providers under data processing agreements, and with legal authorities where required by law.

7. International Transfers

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Retention

Contact form data is retained for up to 3 years. Usage and log data for up to 12 months. Client engagement data is retained as required by Czech accounting and commercial law (typically 5–10 years).

9. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to, and port your personal data, and to withdraw consent at any time. To exercise these rights, contact david.voracek@forgingways.com. You may also complain to the Czech supervisory authority, the Úřad pro ochranu osobních údajů (ÚOOÚ), at www.uoou.cz.

10. Security

We implement appropriate technical and organisational measures to protect your personal data. Our website is served over HTTPS.

11. Changes

We may update this policy from time to time. Continued use of the website after changes constitutes acceptance of the revised policy.

12. Contact

For questions, contact us at david.voracek@forgingways.com.