Privacy & cookies
Last updated:
This page explains how Petite Tap s.r.o. handles personal data on www.petitetap.com. It's short, because we process very little: no cookies, no forms, just anonymous visitor statistics.
This is a translation. The Czech version is authoritative.
Who is responsible
The controller of your personal data is:
Petite Tap s.r.o.
- Registered office
- Stochovská 686/68, 161 00 Prague 6 – Ruzyně
- Company ID
- 253 32 741
- Commercial Register
- Municipal Court in Prague, section C, insert 205218
- Phone
- +420 777 188 531
- Data box
- skmj9ni
We answer questions about personal data within one month at the latest.
What this notice covers
Only the website www.petitetap.com. The AI classes under the AIdoesAI brand have their own privacy policy at aidoesai.com.
The Naidoo app and its website have their own legal documents at naidoo.app.
Visiting the website
On every visit, the web server writes your IP address, the time of the request, the page address, your browser type and the page you came from to its access logs. Your browser sends these details with every request. Without your IP address, the server could not deliver the page to you.
We need these logs to run the website securely and reliably, so that we can spot attacks, abuse and errors. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
We keep the logs for 14 days at most.
Visitor statistics
To know how many people visit the website, which pages they read, where they come from and how fast the pages load for them, we use Cloudflare Web Analytics. When a page loads, your browser downloads a small script from a Cloudflare server. The script sends Cloudflare the page address, the page you came from and how fast the page loaded. From the IP address and the browser type, which your browser sends with every request, Cloudflare works out your country, browser, operating system and kind of device.
The script uses no cookies or other browser storage, gives you no lasting identifier and doesn't follow you from page to page or from site to site. We only see totals, never IP addresses or individual visitors.
The legal basis is our legitimate interest in knowing how the website is used and in improving it (Art. 6(1)(f) GDPR).
You don't have to share any of this: if you block the script from static.cloudflareinsights.com, for example with a content blocker, the website works exactly the same.
Cloudflare keeps the measurements for 6 months at most, and after the first 7 days only a sample of about one in ten for long-term statistics.
When you contact us
When you call us, email us or send a message to our data box, we process what you tell us. Usually that is a name, contact details and the message itself.
When it concerns a job, we process it to negotiate and perform a contract (Art. 6(1)(b) GDPR). For other questions and for contact persons of our clients, the legal basis is our legitimate interest in answering messages and communicating with clients (point f).
Giving us your details is voluntary. But without contact details we can't answer you, and without the details a contract and an invoice need, we can't enter into a contract with you.
We keep correspondence for 3 years after the last contact, so that we can show what was agreed. Invoices and accounting records are kept as long as tax and accounting law requires, usually up to 10 years (Art. 6(1)(c) GDPR).
Who processes data for us
Both the website and our mailbox run on a virtual server that we rent from NETHOST s.r.o., company ID 26226979, which is our processor. When our server is unavailable, NETHOST's backup mail server accepts incoming email and delivers it to us once the server is back.
Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, runs the visitor statistics for us as our processor, under its data processing agreement. This means the data may reach the USA. Cloudflare takes part in the EU‑U.S. Data Privacy Framework, for which the European Commission has decided that it ensures an adequate level of protection (Art. 45 GDPR). Should the framework stop applying, standard contractual clauses approved by the European Commission protect the data (Art. 46 GDPR).
An external accountant keeps our books. For that, they need our invoices and accounting records, which may include your details.
The server is in a data centre in Prague. Only the data for the visitor statistics leaves the European Union.
We don't sell data or use it for advertising. We pass it to public authorities only when the law requires it.
Cookies and local storage
The website uses no cookies or other browser storage, and stores nothing on your device that could identify you. That's why there is no cookie banner either.
Your browser only keeps the website's files, such as fonts, images and scripts, in its cache so that pages load faster. This kind of technical storage needs no consent (Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications).
The visitor statistics script reads only page-load data from your browser. It serves only the statistics of this website, can't be used to follow individual visitors, its results are anonymous and we don't combine them with other data. Under these conditions, audience measurement needs no consent.
The website's fonts, images and scripts come from our own server. The only exception is the visitor statistics script from Cloudflare's server. The “Show on map” link opens Mapy.com, where its operator's policy applies.
Profiling
We don't profile you and we make no automated decisions about you.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing and to data portability (Art. 15–18 and 20 GDPR). Just write to us or give us a call.
You can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the supervisory authority in the EU country where you live or work.
Your right to object
You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21 GDPR). We will then stop processing the data, unless we can show compelling legitimate grounds that override your interests, or we need the data to defend legal claims.
Changes
When the way we process data changes, we update this notice. The date at the top shows the current version.