Privacy & Cookie Policy

Data controller

The controller is Sartin (Samir Inam), Company ID 17565332. Contact: info@sartin.cz.

What we process

• Form & interaction data — name, email, phone, company, message and calculator/quiz values — including content you type into a form even if you don't submit it.

• On-site behaviour — pages visited and time spent on each, scroll depth, clicks, source (referrer, UTM), device type and IP address.

• Company recognition — from the IP address we estimate the network type and, for corporate networks, attach public company-registry data (ARES). We do not identify individual persons.

Why & on what basis

• Contact & enquiries — based on your interest in our services (contract / legitimate interest to reply).

• Analytics & company recognition — only with your consent given in the cookie banner. You can withdraw it at any time.

Cookies

• Necessary — keep the site running, always on.

• Analytics & identification — load only after consent; measure traffic and help recognise company visitors. Your choice is stored in your browser.

Google Analytics 4

We use Google Analytics 4 to measure traffic (measurement ID). The processor is Google Ireland Limited, based in Dublin, Ireland.

What is sent to Google Analytics: a pseudonymous visitor identifier (visitorId), which we also use for our own analytics; the pages you view and their URLs; the page you arrived from; events (for example submitting a form, using the calculator or finishing the quiz); an approximate location derived from your IP address — typically city or region level; and technical details about your device, operating system, browser and language.

What is not sent: we transmit no personal data to Google Analytics. Your name, email, phone number, company name and the content of anything you type into a form stay strictly in our own systems. Google Analytics 4 does not store your IP address — it is used only to derive the approximate location and is then discarded. The visitorId is a random value with no link to your identity; on its own, neither we nor Google can turn it back into your name.

Legal basis: your consent under Art. 6(1)(a) GDPR. Without consent, no analytics cookies are written or read and no identifier is sent. You can withdraw consent at any time (see below).

Retention: user-level and event-level data is kept in Google Analytics for 14 months, after which Google deletes it automatically. Only aggregate statistics remain, from which no individual can be recognised.

Transfers outside the EU: Google may process the data on servers in the United States. The transfer relies on the EU–US Data Privacy Framework, in which Google is certified, and additionally on the European Commission’s standard contractual clauses.

Measurement before you decide (Consent Mode)

We use Google Consent Mode v2 in its advanced setting. We state plainly what that means, because it also covers the period before you have decided anything.

Google’s measurement script loads as soon as the page opens. Until you make a choice — and equally if you decline — it runs in a restricted mode: it writes and reads no cookies and sends no identifier that could be used to recognise you, link you across pages, or know you on a later visit.

In that state, only cookieless pings are sent to Google. They contain the address of the page viewed, the referring page, a timestamp, basic browser and device details, an approximate location derived from your IP address, and the fact that consent has not been given. They contain no visitorId, no client ID, no user ID and no other persistent identifier, and no profile can be built from them.

Why we do it: from these anonymous signals Google statistically estimates overall traffic, so that even at a low consent rate we can still see how many people visited and which pages are useful. Without it we would be blind to most visits. We think you are entitled to know this before you decide, which is why we describe it in this much detail.

Withdrawing consent, and what changes

You can withdraw consent at any time, as easily as you gave it. The button below reopens the same cookie banner you decided in originally, where you can choose “Necessary only”.

What withdrawal changes: analytics cookies stop being used, the visitorId stops being sent to Google Analytics and to our own analytics, and measurement returns to the cookieless mode described above. The site keeps working exactly as before — you lose no functionality.

Withdrawal takes effect going forward and does not affect the lawfulness of processing carried out beforehand. To have data already sent erased, write to info@sartin.cz; in Google Analytics it is in any case deleted automatically after 14 months at the latest. You can also clear the cookies stored in your browser from the browser’s own settings.

Who we share with

We use processors that run the site, traffic measurement, enquiry automation, and network recognition: Vercel (hosting & analytics), Google Ireland Limited (Google Analytics 4), our automation tool, which files enquiries into a Google Sheet and sends an email alert (Google/Gmail), optionally Resend (if configured), four free public sources for IP network estimation (ip-api.com, ipwho.is, rdap.org, and Google Public DNS), and the public ARES registry. We do not sell your data.

Retention

Enquiries are kept for as long as needed to handle them and follow up, at most 24 months. Google Analytics 4 data is kept for 14 months. Aggregate traffic data is kept in anonymised form.

Your rights

You have the right to access, rectify, erase, restrict or object to processing, to portability, and to withdraw consent — exercise them at info@sartin.cz. You may also lodge a complaint with the Czech DPA (uoou.cz).