PRIVACY POLICY (WEBSITE AND CLIENTS)
REBUS Agency s.r.o.
Company ID (IČO): 46961313
VAT ID: CZ46961313
Registered office: Lidická 700/19, 602 00 Brno, Czech Republic
represented by Josef Budaj, Managing Director
E-mail: rebus@rebus.cz
Website: https://www.rebus.cz
INTRODUCTION
This Privacy Policy explains how REBUS Agency s.r.o. (“Company”, “we”, “us”) processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 110/2019 Coll. on Personal Data Processing, Act No. 480/2004 Coll. on Certain Information Society Services, Act No. 127/2005 Coll. on Electronic Communications, and related legislation.
This Policy applies to visitors of the Company website, customers, business partners, suppliers, and persons contacting the Company.
DATA PROTECTION OFFICER
The Company has assessed its data processing activities and determined that the appointment of a Data Protection Officer (DPO) is not mandatory under Article 37 GDPR. No DPO has therefore been appointed. For any matters relating to personal data protection, please contact us at rebus@rebus.cz.
WHAT PERSONAL DATA WE PROCESS
We may process the following categories of personal data:
• Identification data (name, surname, company name)
• Contact details (e-mail address, telephone number, mailing address)
• Billing and payment information
• Communication records
• Technical website data and cookies
• Marketing preferences
PURPOSES AND LEGAL BASIS OF PROCESSING
We process personal data for the following purposes:
A. Contract performance
Legal basis: Article 6(1)(b) GDPR
Purpose:
• responding to inquiries
• project delivery
• invoicing
• customer and supplier communication
B. Legal obligations
Legal basis: Article 6(1)(c) GDPR
Purpose:
• accounting obligations
• tax obligations
• mandatory archiving under applicable laws
C. Legitimate interest
Legal basis: Article 6(1)(f) GDPR
Purpose:
• cybersecurity and website security
• protection and enforcement of legal claims
• communication with existing clients
• operation and administration of the website
D. Consent
Legal basis: Article 6(1)(a) GDPR
Purpose:
• newsletter subscription and marketing communication
NEWSLETTERS AND MARKETING COMMUNICATION
If you subscribe to our newsletter or contact us regarding our services, we may process your e-mail address for the purpose of sending business and marketing communications.
Existing customers may receive information regarding services similar to those previously provided by the Company in accordance with Section 7(3) of Act No. 480/2004 Coll., unless they opt out.
You may unsubscribe from marketing communications at any time by:
• clicking the unsubscribe link in the e-mail; or
• contacting us at rebus@rebus.cz.
You also have the right to object to the processing of personal data for direct marketing purposes at any time.
CONTACT FORM
When you submit an inquiry through the contact form on our website, we process the personal data you provide (name, surname, e-mail address, telephone number, and message content) for the purpose of responding to your inquiry and, where applicable, for the preparation and performance of a contract. The legal basis for this processing is Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest in handling business inquiries). Data submitted through the contact form is retained for a period of 12 months unless a contractual relationship is established, in which case the retention periods applicable to contractual documentation apply.
COOKIES
Our website primarily uses necessary technical cookies required for secure and proper website operation. Necessary cookies are processed without consent because they are essential for the functionality and security of the website. At present, the Company does not use marketing or advertising tracking technologies such as advertising pixels or behavioral advertising systems. Should analytical or marketing cookies be implemented in the future, such technologies will only be activated based on the user’s prior consent in accordance with applicable legislation. Users may manage cookie settings through their web browser settings.
RECIPIENTS OF PERSONAL DATA
Personal data may be shared with trusted third-party service providers where necessary for the operation of the Company and the provision of services.
Such recipients may include:
• hosting and IT service providers
• accounting and tax advisors
• payment service providers
• external contractors and suppliers
The Company currently uses the following key data processors, among others:
Google LLC (Google Workspace for e-mail and document management, reCAPTCHA for contact form protection) - data may be processed in the United States; transfers are governed by Standard Contractual Clauses. Google’s privacy policy is available at https://policies.google.com/privacy.
All third parties processing personal data on behalf of the Company are contractually bound to comply with applicable data protection legislation and confidentiality obligations.
TRANSFERS TO THIRD COUNTRIES
Certain service providers used by the Company may process personal data outside the European Economic Area. This applies in particular to Google LLC in connection with the use of Google Workspace services and Google reCAPTCHA, which is integrated into the contact form on our website. reCAPTCHA collects hardware and software information, including device and application data, and sends it to Google for the purpose of spam and abuse prevention. Where such transfers occur, the Company ensures that appropriate safeguards are implemented in accordance with GDPR requirements, particularly through the use of Standard Contractual Clauses (SCC) or other lawful transfer mechanisms.
DATA RETENTION
Personal data is retained only for the period necessary to fulfil the purposes described in this Policy or for the period required by applicable legal regulations.
Typical retention periods include:
• accounting and tax documents: 10 years
• contractual documentation: 5 years after termination of contractual relationship
• business inquiries: 12 months
• marketing communication data: until consent withdrawal or objection
DATA SUBJECT RIGHTS
Under GDPR, you have the right to:
• request access to your personal data
• request rectification of inaccurate or incomplete personal data
• request erasure of personal data
• request restriction of processing
• object to processing
• request data portability
• withdraw consent at any time
• lodge a complaint with the supervisory authority
CONTACT DETAILS
REBUS Agency s.r.o.
Lidická 700/19
602 00 Brno
Czech Republic
E-mail: rebus@rebus.cz
Supervisory authority:
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
AUTOMATED DECISION-MAKING
The Company does not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR. Last updated: 28 May 2026
COOKIE POLICY
WHAT ARE COOKIES
Cookies are small text files stored on your device when visiting a website.
TYPES OF COOKIES USED
Necessary Cookies
The website uses necessary technical cookies required for:
• secure website operation
• page functionality
• protection against misuse and cyber threats
These cookies do not require user consent.
Google reCAPTCHA
The contact form on this website is protected by Google reCAPTCHA, a service provided by Google LLC. reCAPTCHA uses technical and behavioral data to distinguish human users from automated bots. This involves the transfer of data to Google servers, which may be located in the United States. The use of reCAPTCHA is subject to Google’s Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms). The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest in protecting the website against spam and abuse).
ANALYTICAL OR MARKETING COOKIES
The Company currently does not use analytical, marketing, or advertising tracking cookies.
Should such technologies be implemented in the future, they will only be activated based on the user’s prior consent through the cookie consent interface.
COOKIE SETTINGS
Cookies may be controlled or deleted through your browser settings. Restricting certain cookies may affect website functionality.
Last updated: 28 May 2026