H&P QA s.r.o.

Privacy

Information under Article 13 of Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. The Czech version is binding.

Controller

H&P QA s.r.o., Company ID 27528651, Alšova 780, 460 15 Liberec, Czech Republic, registered in the Commercial Register at the Regional Court in Ústí nad Labem, file C 31310. Contact: info@hpqa.cz, +420 733 641 000.

The hpqa.cz website uses no cookies

There are no cookies, analytics or advertising tools, social plugins or third-party fonts on this site, so we do not ask for cookie consent.

What we process and why

  • When you contact us: name, email, phone, company and your message, to reply and to negotiate a possible contract (Art. 6(1)(b)). Kept for the duration of the conversation and up to 3 years after it ends if no contract follows.
  • When you apply to work with us: your CV and interview notes, to select specialists for a specific project (Art. 6(1)(b)). Deleted within 6 months after the selection ends unless you agree to a longer period.
  • Clients and suppliers: contact and billing data, to perform contracts and meet accounting and tax obligations (Art. 6(1)(b) and (c)).
  • Server logs: IP address, time, requested URL and browser type, for operation and security of the site (legitimate interest, Art. 6(1)(f)). Deleted automatically after 14 days.

Client zone

  • User accounts of client staff: name, email, password hash, two-step verification settings, last sign-in. Purpose: secure access to contract documents (Art. 6(1)(b) and (f)). Accounts are deleted within 3 months after the engagement ends.
  • Audit log: sign-ins, failed attempts, document downloads and uploads including IP address, for security and accountability (legitimate interest). Deleted after 12 months.
  • Documents (timesheets, invoices, contracts, deliverables) may contain names and hours of our specialists. They are available only to users of the respective client.
  • The zone uses a single strictly necessary cookie to keep you signed in (8 hours). No consent is required for it.

Processors

  • Hetzner Online GmbH, Germany: website hosting on servers in the EU.
  • Microsoft Ireland Operations Ltd. (Microsoft 365): mailbox and office tools.
  • Our accountant and tax adviser, for client and supplier data.

We do not sell personal data and do not use it for automated decisions or profiling.

Your rights

You have the right of access, rectification, erasure, restriction and portability, and the right to object to processing based on legitimate interest. You may withdraw consent at any time. Write to info@hpqa.cz; we reply within one month. You may lodge a complaint with the Czech Office for Personal Data Protection, uoou.gov.cz.