Privacy Policy

Effective from August 24, 2026

Data Controller

The data controller is Commonsky s.r.o., Company ID: 19444745, registered at Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic.

Scope of Processed Data

We process personal data you provide through contact forms, demo access requests, or other communication. This includes your email address, name, phone number, and organization name.

Data Processing in the Online Shop

When you place an order in our online shop, we process identification and contact data (name, email, phone number, billing and delivery address and, for businesses, company registration number, VAT number and company name) together with order details. We need this data to conclude and perform the purchase contract, issue a tax document and deliver the goods. Providing it is a contractual requirement — without it we cannot process the order. Company data is prefilled automatically from the public Czech ARES register based on the registration number you enter.

Purpose of Processing

We process your personal data to respond to your inquiries, provide access to the demo environment, send commercial offers and information about Sensorico services, and fulfill legal obligations.

Legal Basis

We process personal data based on your consent (Art. 6(1)(a) GDPR), legitimate interest of the controller (Art. 6(1)(f) GDPR), and contract performance (Art. 6(1)(b) GDPR).

Cookies and Local Storage

We use only strictly necessary cookies and browser local storage: the i18n_redirected cookie remembers your language choice, and local storage holds the contents of your shopping cart. No consent is required for these under Section 89(3) of Czech Act No. 127/2005 Coll. We use no marketing or advertising cookies. You can delete the stored data at any time in your browser settings.

Website Analytics

We measure traffic with Plausible Analytics, which we self-host on our own infrastructure in the European Union. Plausible uses no cookies, stores no IP addresses, builds no user profiles and collects only anonymous aggregate statistics that cannot identify you.

Recipients and Processors

We do not share personal data with third parties for their own purposes. Our processors may access the data to the extent necessary: our hosting and cloud infrastructure provider, Resend, Inc. (sending transactional and contact emails), Google Ireland Limited (reCAPTCHA protecting our forms against abuse), carriers delivering ordered goods, and external accounting and tax advisors. We also disclose data to public authorities where required by law.

Transfers Outside the EU

Some processors (Resend, Inc., Google) may process data in the United States. Such transfers rely on the European Commission's adequacy decision (EU–U.S. Data Privacy Framework) or on Standard Contractual Clauses approved by the European Commission.

Retention Period

We retain personal data from contact forms and demo requests for up to 3 years from the last contact. Order data and tax documents are retained for 10 years from the end of the tax period in which the transaction took place, as required by Czech accounting and VAT legislation. Once these periods expire, we delete or anonymise the data.

Data Security

Traffic between your browser and our servers is encrypted with HTTPS. Only authorised persons bound by confidentiality can access personal data, and access is limited to what their work requires. We apply organisational and technical measures appropriate to the processing, including access control and regular backups.

Automated Decision-Making

We do not use personal data for automated decision-making or profiling that would have legal effects on you or similarly significantly affect you.

Your Rights

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing, including processing for direct marketing purposes. You may withdraw any consent you have given at any time without affecting the lawfulness of processing carried out beforehand. Send your request to [email protected]; we will respond within one month. If you have concerns about the lawfulness of processing, you may file a complaint with the Czech Data Protection Authority (www.uoou.cz) or your local supervisory authority.

Contact

For questions about personal data processing, contact us at [email protected].