Privacy Policy

We care that you know what personal data we process, why, and what rights you have. This policy applies to the www.squellapps.com website, our mutual communication and the provision of our services under the Squell Apps brand.

1. Who is the controller of your data

The controller of personal data is Patrik Pešta, Company ID (IČO) 21241317, with registered office at Písty 24, 289 13 Písty, Czech Republic, a sole trader registered in the Czech Trade Licensing Register (“we”).

Contact for personal data matters: david.jurica@squell.cz, phone +420 732 566 663.

We have not appointed a data protection officer (DPO) — the law does not impose this obligation on us.

2. What data we process, why and for how long

a) Enquiries and communication

When you contact us via the contact form, by e-mail or by phone, we process your name, e-mail, phone number (if provided), company name, website URL and the content of your message.

• Purpose: replying to your enquiry, the initial consultation, preparing an offer and a prototype.
• Legal basis: steps taken prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in handling the communication (point (f)).
• Retention: 2 years from the last communication, if no contract is concluded.

b) Performance of the contract

If you become our client, we process identification and contact details, billing details, access credentials to your systems and services, and the content of our mutual communication (including feedback on the development).

• Purpose: development, deployment, operation and maintenance of the application, project communication.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Retention: for the duration of the contract and then 4 years after its end for the purpose of defending our legal claims (legitimate interest).

c) Invoicing and accounting

We process billing details (name/company, address, company ID, items of performance) because accounting and tax regulations require us to do so.

• Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Retention: for the period required by legal regulations, at most 10 years.

d) References and case studies

For completed projects we may state the client’s name, logo and a general description of the project in our references; you may object to this at any time. More detailed case studies (screenshots, metrics, quotes) are published only with the client’s prior consent.

• Legal basis: legitimate interest in presenting our work, or consent.
• Retention: for the duration of the presentation, at most until an objection is raised or consent is withdrawn.

e) Cookies and traffic measurement

With your consent, we may use analytics and marketing tools on the website. Details — including purposes, storage periods and how to withdraw consent — can be found in the separate Cookie Policy.

3. Data in our clients’ applications

The applications we develop and operate for clients may contain personal data of which our client is the controller — for example data of their customers, users or employees. We access such data solely in the role of a processor: on the client’s instructions, only to the extent necessary for development, support and bug fixing, and under confidentiality. On request, we conclude a data processing agreement with clients under Article 28 GDPR.

If you are a user of one of our clients’ applications, please direct your questions and requests to the operator of that application — they are the controller of your data.

4. Who we share data with

We process your data ourselves and through vetted service providers (processors) who process it on our instructions:

• Vercel Inc. — hosting of the website and applications,
• Resend, Inc. — sending e-mails from the website (contact form),
• Google Ireland Ltd. / Google LLC — Google Analytics and Google Ads (only based on your cookie consent),
• Seznam.cz, a.s. — the Sklik advertising system (only based on your cookie consent),
• our invoicing software provider,
• collaborators involved in delivering projects — they have access to data only to the necessary extent and are bound by confidentiality,
• and, where required by law, accounting and legal advisors and public authorities.

We do not sell your personal data or pass it on to third parties for their own marketing.

5. Data transfers outside the EU

Some of our providers (in particular Vercel Inc., Resend, Inc. and Google LLC) are based in the USA. Data transfers to the USA take place on the basis of the European Commission’s adequacy decision (EU–U.S. Data Privacy Framework) or on the basis of standard contractual clauses approved by the European Commission.

6. Your rights

In connection with the processing of personal data you have the right to:

• access your data and information about the processing,
• rectification of inaccurate data or completion of incomplete data,
• erasure (“the right to be forgotten”), where there is no legal ground for further processing,
• restriction of processing,
• portability of the data you have provided to us,
• object to processing based on legitimate interest (including marketing),
• withdraw consent at any time — this does not affect the lawfulness of processing carried out before its withdrawal.

You can exercise your rights by e-mail at david.jurica@squell.cz. We will reply without undue delay, at the latest within 1 month.

If you believe we process your data unlawfully, you may lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

7. Security and other information

We protect data with appropriate technical and organisational measures — only a limited circle of persons bound by confidentiality has access to it, communication with the website is encrypted (HTTPS) and we secure access to our systems.

Providing your data is voluntary; however, without contact details we cannot reply to your enquiry, and without billing details we cannot conclude a contract. We do not carry out automated decision-making or profiling with legal effects.

We may update this policy from time to time — the current version is always available at www.squellapps.com. We notify clients of material changes by e-mail.