Privacy

What this site stores about you, why, for how long and who gets to see it. Short and specific.

Data Controller

Headers s.r.o.

IČO: 08496919

Radniční 133/1, 370 01 České Budějovice

company registered in the Commercial Register maintained by the Regional Court in České Budějovice, Section C, Insert 29198

info@headers.cz

Processing of Personal Data

Contact form

Purpose: answering your message and negotiating cooperation

Scope: name, email, optionally company and the message itself

Retention: while we negotiate, at most 12 months after the last message; if a contract follows, as the contract and the law require

Legal basis: steps prior to entering into a contract and our legitimate interest in answering an inquiry (Art. 6(1)(b) and (f) GDPR)

Document uploaded in the extraction demo

Purpose: assessing whether the document can be read and how hard that would be, and answering you

Scope: the uploaded file, your email, an estimate of your monthly document volume and a record of which steps of the form you went through; we read the file only for the assessment

Retention: the file is deleted no later than 30 days after upload; the email and our answer are kept as with the contact form

Storage: private storage of our hosting provider in the EU (Frankfurt), reachable only by our server; for the assessment the file reaches us by e-mail

Legal basis: steps prior to entering into a contract and our legitimate interest in answering an inquiry (Art. 6(1)(b) and (f) GDPR)

Anonymous traffic measurement

Purpose: knowing how many people read the site and which pages interest them

Scope: the addresses visited and what the browser sends with every request; nothing is stored on your device and nothing is read from it, which is why we do not ask permission for it

Legal basis: our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR)

Analytics cookies and recording behaviour on the site

These are the analytics cookies the notice asks about on a first visit.

Tool: an analytics service operated in the European Union; it is named below in the list of processors

Purpose: to find where people get stuck on the site and fix it

Scope: movement around the page, clicks and the addresses visited; the contents of form fields are masked and never reach the record; the IP address is anonymised

Retention: no longer than 12 months from the visit; we will tell you the current setting on request

Legal basis: your consent under Art. 6(1)(a) GDPR and § 89(3) of Czech Act No. 127/2005 Coll.

You can withdraw consent at any time through the Consent settings link in the footer. Until you give it, nothing is recorded.

Running the site

The server records technical request data (IP address, time, page address, browser) for security and troubleshooting

Retention: for the limited time needed for security and debugging

Legal basis: legitimate interest in running the site securely

Cookies and browser storage

hdrs_lang: remembers the chosen language, a technical cookie that needs no consent

hdrs_consent: remembers your answer about cookies. It is stored even when you decline - otherwise we would have to ask again on every page load. It is a technical cookie and needs no consent. The same answer also goes into browser storage, because some browsers delete cookies written by a page after a while.

Analytics cookies: with your consent only; they store an id in the browser so the tool can tell one visit from another. Without consent nothing is stored.

None of them lasts longer than 13 months. The site sets no other cookies.

Who processes the data

We process the data ourselves. These processors hold it for us technically:

Vercel Inc. (USA)

  • Hosting of the site, handling of the forms and private storage of demo documents (kept in Frankfurt)
  • Transfer to the USA is covered by the EU-US Data Privacy Framework and standard contractual clauses

Resend, Inc. (USA)

  • Delivery of form messages to our mailbox
  • Transfer to the USA is covered by standard contractual clauses

PostHog, Inc.

  • Analytics cookies and recording behaviour on the site, with your consent only
  • Processing runs on the tool's European instance and the data stays in the European Union; any access from the United States is covered by standard contractual clauses

Rights of Data Subjects

Right of access to data

Right to rectification

Right to erasure

Right to restriction of processing

Right to data portability

Right to object

Right not to be subject to automated decision-making

Right to lodge a complaint with the Office for Personal Data Protection (UOOU)

Final Provisions

For questions regarding the processing of personal data, contact us at:

info@headers.cz

The controller has not appointed a data protection officer

The controller is entitled to amend these terms unilaterally

This policy applies from 23 August 2026 and replaces the version of 21 August 2026