This is an English translation provided for convenience. The legally binding version is the Czech one (Ochrana osobních údajů); in case of any discrepancy, the Czech version prevails.

1. Controller

The controller of personal data is Asiacon Productions, s.r.o., registered office at Třeboňská 591/5, Michle, 140 00 Praha 4, Czech Republic, Company ID (IČO) 05439108, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 263429 (trade name HoroPC).

For any question about personal data, contact me at info@horopc.cz or +420 732 210 218. I have not appointed a data protection officer, as the law does not require me to.

2. What data I process and why

Enquiries via the form, email or phone

Name, phone, email, device make and model and a description of the fault. I need them to get back to you and agree on the job.
Legal basis: steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR. I don’t need your consent for this, which is why the form has no consent checkbox.
How long: if no job comes of the enquiry, I delete the data within 12 months at the latest.

Jobs (repair, service, sale, data recovery)

Contact details, pickup address, billing details, information about the device and the course of the repair.
Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
How long: for the duration of the job and the period for claiming defects.

Accounting and tax

Data on invoices and receipts.
Legal basis: compliance with a legal obligation, Art. 6(1)(c) GDPR.
How long: for the period required by accounting and tax regulations, usually 5 to 10 years.

Defence of legal claims

Records of the job and related communication, in case of a dispute.
Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
How long: until the limitation periods expire, usually 4 years after the job is completed.

Data on your device

During repairs and data recovery I may have access to files stored on the device. I work with them only to the extent necessary for the repair and for checking it, I do not look at the content beyond that and I keep it confidential. I delete working copies from data recovery without undue delay after handover, at the latest within 30 days.

Website analytics

Which pages you view, where you came to the website from, device and browser type, approximate location by country and city, and a random identifier stored in a cookie.
Legal basis: your consent, Art. 6(1)(a) GDPR. Without consent, analytics do not start at all.
How long: I keep analytics data for 12 months at the most. The cookie is valid for 1 year at the most unless you withdraw consent earlier.

I do not send marketing messages or newsletters.

3. Who I share data with

I do not sell data to anyone. To run the business I need several suppliers who process it only on my instructions (processors):

Cloudflare, Inc. (USA) — website hosting.
Web3Creative (India), operator of the Web3Forms service — forwards messages from the contact form to me by email. It keeps a copy of each message for 3 years at the most.
Heinlein Hosting GmbH (Germany), operator of the mailbox.org service — the mailbox where messages arrive.
PostHog Inc. (USA), with data stored on servers in Germany (Frankfurt) — website analytics, only with your consent.
an external accounting service that keeps my books — only data on accounting documents.
a specialist data recovery laboratory — only if the medium is physically damaged and you expressly agree to the handover. I tell you which laboratory in advance.

I also share data with public authorities where the law requires me to.

4. Transfers outside the European Union

Cloudflare may process data in the USA. The transfer relies on the EU–US Data Privacy Framework, to which the company is certified.

PostHog stores data in the EU. If it is accessed from the USA, the transfer relies on standard contractual clauses approved by the European Commission, which form part of the data processing agreement.

Web3Forms processes data in India and with providers that may operate in various countries. The transfer relies on standard contractual clauses approved by the European Commission, which form part of the data processing agreement with Web3Creative.

5. Your rights

You have the right to:

request access to your data and a copy of it,
request correction of inaccurate data,
request erasure if I no longer need the data or am not allowed to process it,
request restriction of processing,
data portability for data you provided to me,
object to processing based on legitimate interest,
lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Praha 7, www.uoou.gov.cz.

Just write to info@horopc.cz. I will reply within one month at the latest.

I do not use automated decision-making or profiling.

6. Cookies and similar technologies

This website does not use advertising cookies. Analytics and Google Maps cookies are stored only with your consent, which you give in the banner on your first visit.

Website analytics (PostHog): starts only after you click Accept in the banner. Until then the analytics script is not loaded at all and your browser does not communicate with it. It stores a cookie and a local storage entry whose names start with “ph_”, valid for 1 year at the most. Session recording is switched off.
Changing your choice: you can withdraw consent at any time via the Cookie settings link in the footer. Analytics stop, the analytics cookies are deleted and the map is hidden. Cookies already stored by Google cannot be deleted by me — you can remove them in your browser settings.
Your choice: whether you accepted or rejected is remembered in your browser’s local storage (an entry named “horopc-consent” with the date of your choice), so you are not asked on every page.
Dark mode: if you switch between the light and dark theme, your browser remembers the choice in local storage. Nothing is sent anywhere and you can delete it in your browser settings at any time.
Map: the Google map on the Contact page loads only after you accept cookies. Only then may Google store cookies and process your IP address under its own policy. Without consent, the address and a link to Google Maps are shown right above the map.
Videos: embedded YouTube videos load in privacy-enhanced mode and start only after you click them.
Website operation: Cloudflare, as the hosting provider, processes technical access data such as IP addresses for security and protection against attacks. The legal basis is my legitimate interest in running the website securely.

7. Changes

I may update this policy, for example when I change a supplier. The current version is always on this page.

This policy applies from 1 October 2026.

Privacy Policy