Privacy
What this site stores about you, why, for how long and who gets to see it. Short and specific.
Data Controller
Headers s.r.o.
IČO: 08496919
Radniční 133/1, 370 01 České Budějovice
company registered in the Commercial Register maintained by the Regional Court in České Budějovice, Section C, Insert 29198
info@headers.cz
Processing of Personal Data
Contact form
Purpose: answering your message and negotiating cooperation
Scope: name, email, optionally company and the message itself
Retention: while we negotiate, at most 12 months after the last message; if a contract follows, as the contract and the law require
Legal basis: steps prior to entering into a contract and our legitimate interest in answering an inquiry (Art. 6(1)(b) and (f) GDPR)
Document uploaded in the extraction demo
Purpose: assessing whether the document can be read and how hard that would be, and answering you
Scope: the uploaded file, your email, an estimate of your monthly document volume and a record of which steps of the form you went through; we read the file only for the assessment
Retention: the file is deleted no later than 30 days after upload; the email and our answer are kept as with the contact form
Storage: private storage of our hosting provider in the EU (Frankfurt), reachable only by our server; for the assessment the file reaches us by e-mail
Legal basis: steps prior to entering into a contract and our legitimate interest in answering an inquiry (Art. 6(1)(b) and (f) GDPR)
Anonymous traffic measurement
Purpose: knowing how many people read the site and which pages interest them
Scope: the addresses visited and what the browser sends with every request; nothing is stored on your device and nothing is read from it, which is why we do not ask permission for it
Legal basis: our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR)
Analytics cookies and recording behaviour on the site
These are the analytics cookies the notice asks about on a first visit.
Tool: an analytics service operated in the European Union; it is named below in the list of processors
Purpose: to find where people get stuck on the site and fix it
Scope: movement around the page, clicks and the addresses visited; the contents of form fields are masked and never reach the record; the IP address is anonymised
Retention: no longer than 12 months from the visit; we will tell you the current setting on request
Legal basis: your consent under Art. 6(1)(a) GDPR and § 89(3) of Czech Act No. 127/2005 Coll.
You can withdraw consent at any time through the Consent settings link in the footer. Until you give it, nothing is recorded.
Running the site
The server records technical request data (IP address, time, page address, browser) for security and troubleshooting
Retention: for the limited time needed for security and debugging
Legal basis: legitimate interest in running the site securely
Cookies and browser storage
hdrs_lang: remembers the chosen language, a technical cookie that needs no consent
hdrs_consent: remembers your answer about cookies. It is stored even when you decline - otherwise we would have to ask again on every page load. It is a technical cookie and needs no consent. The same answer also goes into browser storage, because some browsers delete cookies written by a page after a while.
Analytics cookies: with your consent only; they store an id in the browser so the tool can tell one visit from another. Without consent nothing is stored.
None of them lasts longer than 13 months. The site sets no other cookies.
Who processes the data
We process the data ourselves. These processors hold it for us technically:
Vercel Inc. (USA)
- Hosting of the site, handling of the forms and private storage of demo documents (kept in Frankfurt)
- Transfer to the USA is covered by the EU-US Data Privacy Framework and standard contractual clauses
Resend, Inc. (USA)
- Delivery of form messages to our mailbox
- Transfer to the USA is covered by standard contractual clauses
PostHog, Inc.
- Analytics cookies and recording behaviour on the site, with your consent only
- Processing runs on the tool's European instance and the data stays in the European Union; any access from the United States is covered by standard contractual clauses
Rights of Data Subjects
Right of access to data
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Right not to be subject to automated decision-making
Right to lodge a complaint with the Office for Personal Data Protection (UOOU)
Final Provisions
For questions regarding the processing of personal data, contact us at:
info@headers.cz
The controller has not appointed a data protection officer
The controller is entitled to amend these terms unilaterally
This policy applies from 23 August 2026 and replaces the version of 21 August 2026