PRIVACY POLICY (WEBSITE AND CLIENTS)
REBUS Agency s.r.o.
Company ID (IČO): 46961313
VAT ID: CZ46961313
Registered office: Lidická 700/19, 602 00 Brno, Czech Republic
represented by Josef Budaj, Managing Director
E-mail: rebus@rebus.cz
Website: https://www.rebus.cz
INTRODUCTION
This Privacy Policy explains how REBUS Agency s.r.o. (“Company”, “we”, “us”) processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 110/2019 Coll. on Personal Data Processing, Act No. 480/2004 Coll. on Certain Information Society Services, Act No. 127/2005 Coll. on Electronic Communications, and related legislation.
This Policy applies to visitors of the Company website, customers, business partners, suppliers, and persons contacting the Company.
DATA PROTECTION OFFICER
The Company has assessed its data processing activities and determined that the appointment of a Data Protection Officer (DPO) is not mandatory under Article 37 GDPR. No DPO has therefore been appointed. For any matters relating to personal data protection, please contact us at rebus@rebus.cz.
WHAT PERSONAL DATA WE PROCESS
We may process the following categories of personal data:
• Identification data (name, surname, company name)
• Contact details (e-mail address, telephone number, mailing address)
• Billing and payment information
• Communication records
• Technical website data, including cookie and similar identifiers, pages visited, website interactions, referring URLs, timestamps, browser and device information, IP addresses where processed by the relevant service, and cookie consent preferences
• Marketing preferences
PURPOSES AND LEGAL BASIS OF PROCESSING
We process personal data for the following purposes:
A. Contract performance
Legal basis: Article 6(1)(b) GDPR
Purpose:
• responding to inquiries
• project delivery
• invoicing
• customer and supplier communication
B. Legal obligations
Legal basis: Article 6(1)(c) GDPR
Purpose:
• accounting obligations
• tax obligations
• mandatory archiving under applicable laws
C. Legitimate interest
Legal basis: Article 6(1)(f) GDPR
Purpose:
• cybersecurity and website security
• protection and enforcement of legal claims
• communication with existing clients
• operation and administration of the website
D. Consent
Legal basis: Article 6(1)(a) GDPR
Purpose:
• newsletter subscriptions and marketing communications where consent is required
• website traffic and interaction analysis using Google Analytics 4
• advertising performance measurement and audience insights using the LinkedIn Insight Tag
Consent for website analytics and marketing technologies is obtained separately through our cookie consent interface. Further details are provided in the Cookie Policy below.
NEWSLETTERS AND MARKETING COMMUNICATION
We send newsletters and other marketing e-mails on the basis of your prior consent, unless the existing-customer exception described below applies. Submitting an inquiry or contacting us about our services does not, by itself, subscribe you to marketing communications.
Existing customers may receive marketing e-mails about our own services similar to those previously provided, in accordance with Section 7(3) of Act No. 480/2004 Coll. This applies only where the contact details were obtained in connection with the sale of a product or service and the customer was given a clear, simple and free opportunity to opt out both when the contact details were collected and in every subsequent marketing e-mail.You may unsubscribe from marketing communications at any time by:
• clicking the unsubscribe link in the e-mail; or
• contacting us at rebus@rebus.cz.
You also have the right to object to the processing of personal data for direct marketing purposes at any time.
CONTACT FORM
When you submit an inquiry through the contact form on our website, we process the personal data you provide (name, surname, e-mail address, telephone number, and message content) for the purpose of responding to your inquiry and, where applicable, for the preparation and performance of a contract. The legal basis for this processing is Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest in handling business inquiries). Data submitted through the contact form is retained for a period of 12 months unless a contractual relationship is established, in which case the retention periods applicable to contractual documentation apply.
COOKIES
Our website uses necessary cookies and similar technologies for its operation and security. Where strictly necessary to provide a service requested by the user, these technologies do not require consent.
With your prior consent, we also use Google Analytics 4 for website analytics and the LinkedIn Insight Tag for advertising measurement and audience insights. These technologies are activated only after you consent to the relevant Statistics or Marketing category.
We use Cookiebot to manage cookie preferences. You can accept or reject non-essential cookies, choose individual categories, and change or withdraw your consent at any time through the cookie settings icon displayed on the website. Refusing non-essential cookies does not prevent you from browsing the website or contacting us.
Details about these services, the information processed and cookie storage periods are provided in the Cookie Policy below and in the Details section of the cookie consent interface.
RECIPIENTS OF PERSONAL DATA
Personal data may be shared with trusted third-party service providers where necessary for the operation of the Company and the provision of services.
Such recipients may include:
• hosting and IT service providers
• accounting and tax advisors
• payment service providers
• external contractors and suppliers
Key service providers and recipients include:
• Google, including Google Ireland Limited, Google Cloud EMEA Limited and Google LLC, as applicable to the service and contractual arrangements, for Google Analytics 4, Google Workspace and Google reCAPTCHA.
• LinkedIn Ireland Unlimited Company and LinkedIn Corporation, as applicable, for the LinkedIn Insight Tag and related advertising measurement and audience insights.
• Usercentrics A/S, Denmark, for Cookiebot cookie consent management.
Service providers processing personal data on our behalf are subject to the applicable data processing agreements and confidentiality obligations.
For personal data processed through the LinkedIn Insight Tag, LinkedIn acts as an independent controller under its applicable terms and may process the data for its own purposes, including providing, supporting and improving its advertising and measurement services.
Further information is available in the Google privacy information, the LinkedIn Privacy Policy and the LinkedIn Independent Controller Addendum.
TRANSFERS TO THIRD COUNTRIES
Personal data may be processed outside the European Economic Area, including in the United States, in connection with Google Analytics 4, the LinkedIn Insight Tag, Google Workspace, Google reCAPTCHA and the service providers’ authorised subprocessors.
Where a transfer is covered by a European Commission adequacy decision, that decision provides the basis for the transfer. This includes the EU-U.S. Data Privacy Framework where the recipient is certified and the relevant processing falls within the scope of its certification.
For transfers not covered by an adequacy decision, the applicable Standard Contractual Clauses and any necessary supplementary safeguards are used.
Further information is available in Google’s information on data transfer frameworks and the LinkedIn Independent Controller Addendum. You may contact us at rebus@rebus.cz to request further information about the safeguards applicable to your data and how to obtain a copy.
DATA RETENTION
Personal data is retained only for the period necessary to fulfil the purposes described in this Policy or for the period required by applicable legal regulations.
Typical retention periods include:
• accounting and tax documents: 10 years
• contractual documentation: 5 years after termination of contractual relationship
• business inquiries: 12 months
• marketing communication data: until consent is withdrawn or an objection is received. We may retain the minimum information necessary to record your opt-out and prevent further marketing communications.
• Google Analytics 4 user-level and event-level data: the retention period is set to 14 months. The retention period for user identifiers is not reset when a user returns to the website. This setting does not apply to standard aggregated reports.
• LinkedIn Insight Tag data: according to LinkedIn, direct member identifiers are removed within seven days and the remaining pseudonymised data is deleted within 180 days.
• cookies and similar browser storage: the applicable storage periods are specified in the Details section of our cookie consent interface. These periods are separate from the retention of data already transmitted to the relevant service provider.
PROVISION OF PERSONAL DATA
The provision of personal data is generally voluntary. However, certain personal data may be necessary in order for us to respond to an inquiry, enter into or perform a contract, or comply with applicable legal obligations.
If you do not provide data that is necessary for these purposes, we may be unable to respond to your inquiry, enter into a contractual relationship with you, or provide the relevant services.
Providing personal data for website analytics or marketing purposes is optional. Refusing or withdrawing consent to analytics or marketing technologies does not affect your ability to use the basic functions of the website or contact us.
DATA SUBJECT RIGHTS
Under GDPR, you have the right to:
• request access to your personal data
• request rectification of inaccurate or incomplete personal data
• request erasure of personal data
• request restriction of processing
• object to processing
• request data portability
• withdraw consent at any time
• lodge a complaint with the supervisory authority
CONTACT DETAILS
REBUS Agency s.r.o.
Lidická 700/19
602 00 Brno
Czech Republic
E-mail: rebus@rebus.cz
Supervisory authority:
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
AUTOMATED DECISION-MAKING
The Company does not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR. Last updated: 28 May 2026
COOKIE POLICY
WHAT ARE COOKIES
Cookies are small text files stored on your device when visiting a website.
TYPES OF COOKIES USED
Necessary Cookies
The website uses necessary technical cookies required for:
• secure website operation
• page functionality
• protection against misuse and cyber threats
These cookies do not require user consent.
Google reCAPTCHA
Our contact form uses Google reCAPTCHA to protect against spam and automated abuse. The service processes technical and interaction data, including information about the browser, device and user interactions needed to assess whether a request is made by a human.
REBUS Agency s.r.o. acts as the controller of the personal data processed for this purpose, and Google processes the data on our behalf under the applicable Google Cloud Data Processing Addendum.
The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in protecting the website and handling genuine inquiries securely. Any storage of, or access to, information on your device without consent is limited to what is strictly necessary for this security function.
Information about possible processing outside the European Economic Area is provided in the “Transfers to Third Countries” section above.
ANALYTICAL OR MARKETING COOKIES
Google Analytics 4
With your prior consent to the Statistics category, we use Google Analytics 4 to understand website traffic and how visitors interact with our content. This includes information such as pages visited, interactions, referring websites, browser and device characteristics, and cookie or similar identifiers.
The purpose is to evaluate and improve the website and our communication. The legal basis for processing personal data is Article 6(1)(a) GDPR. Further information is available in How Google uses information from sites or apps that use its services.
LinkedIn Insight Tag
With your prior consent to the Marketing category, we use the LinkedIn Insight Tag to measure advertising performance, obtain aggregated insights into our website audience and, where applicable, support conversion tracking, audience creation and retargeting for LinkedIn advertising.
The tag may transmit information including the page URL, referrer, IP address, browser and device characteristics, timestamps and identifiers to LinkedIn. LinkedIn may associate this information with a LinkedIn member account. The reports provided to us do not identify individual members. LinkedIn may also use information collected through the Insight Tag for cross-device measurement and advertising purposes in accordance with its applicable terms and Privacy Policy.
The legal basis for our collection and transmission of this information is Article 6(1)(a) GDPR. LinkedIn’s subsequent processing is described in its Privacy Policy.
Cookie details
The Details section of our cookie consent interface lists the cookies and similar technologies used on the website, including their providers, purposes and storage periods. Non-essential cookies and tracking technologies require your prior consent to the relevant category.
COOKIE SETTINGS
You can manage your consent at any time by clicking the cookie settings icon in the lower-left corner of the website. Select “Change your consent” to adjust individual categories or “Withdraw your consent” to withdraw an existing consent.
Statistics and Marketing cookies are optional and are not activated unless you consent to the relevant category. You can reject all non-essential cookies without losing access to the website’s basic functions.
Withdrawing consent stops future processing based on that consent. It does not affect the lawfulness of processing carried out before withdrawal. You may also delete cookies already stored on your device through your browser settings.
Last updated: 11 September 2026