Privacy Policy
Last updated: July 4, 2026
1. Data Controller
The data controller is:
Mariia Khvyts
Vrchlického 1316/88, 150 00 Prague, Czech Republic
Company ID (IČ): 19954425 — Not a VAT payer
Email: info@esy.agency
This Privacy Policy explains what personal data we process through the website esy.agency, for what purposes, on what legal basis, and what rights you have as a data subject. Processing is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Czech law.
2. What Personal Data We Collect
2.1 Contact/Inquiry Form Data
When you contact us via the website form, we process:
- first and last name,
- email address,
- phone number,
- the content of your message/inquiry,
- optionally, your company name and details.
2.2 Analytics Data
Our website uses Google Analytics (Google Ireland Limited), which collects anonymized/pseudonymized data such as: truncated IP address, device and browser type, time spent on the site, pages visited, and traffic source.
2.3 Advertising / Pixel Data
Our website uses Meta Pixel (Meta Platforms Ireland Ltd.) and Google Ads / Google Pixel (Google Ireland Limited) to measure advertising campaign performance and deliver targeted ads. These tools may process: IP address, device identifiers, cookies, and on-site behavior (pages viewed, clicks, conversions).
3. Purpose and Legal Basis of Processing
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries, communicating with clients, preparing proposals | Performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR) |
| Website traffic analysis (Google Analytics) | Consent (Art. 6(1)(a) GDPR) |
| Targeted advertising and remarketing (Meta Pixel, Google Ads) | Consent (Art. 6(1)(a) GDPR) |
| Compliance with legal obligations (e.g., accounting) | Legal obligation (Art. 6(1)(c) GDPR) |
| Protection of legitimate interests (e.g., debt recovery) | Legitimate interest (Art. 6(1)(f) GDPR) |
Consent to analytics and advertising cookies is collected via the cookie banner on your first visit and can be withdrawn at any time (see Section 6).
4. Data Retention
- Inquiry form data is retained for the duration of negotiations and, if applicable, the contractual relationship, but no longer than 3 years from the last contact if no contract is concluded.
- Accounting and tax records are retained for the period required by law (typically 10 years).
- Data collected via Google Analytics and advertising pixels is retained according to that service's settings (typically 14–26 months) or until consent is withdrawn.
5. Recipients of Personal Data
Personal data may be shared with the following processors/recipients:
- Google Ireland Limited (Google Analytics, Google Ads) — data transfers outside the EU/EEA, if any, rely on the European Commission's Standard Contractual Clauses,
- Meta Platforms Ireland Ltd. (Meta Pixel/advertising) — similarly relying on Standard Contractual Clauses,
- website hosting provider Netlify, Inc. (USA) — data transfers outside the EU/EEA rely on the European Commission's Standard Contractual Clauses,
- accountant/tax advisor, where necessary to comply with legal obligations.
We do not sell your personal data to third parties.
6. Cookies
Our website uses cookies to ensure proper functioning, measure traffic, and display relevant advertising.
6.1 Types of Cookies
| Type | Purpose | Example |
|---|---|---|
| Necessary (technical) | Basic website functionality | cookie banner, language settings |
| Analytics | Measuring traffic and on-site behavior | Google Analytics |
| Advertising/marketing | Ad targeting and remarketing | Meta Pixel, Google Ads |
6.2 Consent and Cookie Management
On your first visit, you will be informed about our use of cookies via a cookie banner, where you can:
- accept all cookies,
- reject non-essential (analytics and advertising) cookies,
- change your preferences at any time via the cookie settings on the website.
Necessary cookies cannot be rejected as they are required for the website to function. You can also manage or block cookies directly in your browser settings.
7. Your Rights
As a data subject, you have the right to:
- access the personal data we hold about you,
- rectify inaccurate data,
- request erasure ("right to be forgotten"),
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal,
- lodge a complaint with the supervisory authority: Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic — www.uoou.cz
To exercise your rights, please contact us at: info@esy.agency.
8. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or leakage.
9. Changes to This Policy
We may update this Privacy Policy from time to time, for example due to changes in legislation or the tools we use. The current version is always available on this page.