Privacy Policy

Y4E ENERGY INDUSTRY s.r.o.
IČO: 25564609
Registered office: Pávovská 3104/15A, 586 01, Jihlava, Czech Republic
E-mail: info@y4e-energyindustry.cz

If we have a Data Protection Officer (DPO), you can find the contact on this page.
Currently: not appointed.

• Identification and contact (name, company, ID number, email, phone, address) – usually provided via inquiry form or contract.
• Service/project data (specifications, technical parameters, communications, contracts, invoices).
• Operational and technical (server logs, security events) – for operation and security purposes.
• Marketing/analytics – only if you give consent (see Cookies page).

• Inquiries, contracts, and obligations – offer, project implementation, invoicing, service.
  legal basis: performance of a contract (art. 6/1/b)
• Communication and relationship management – answering questions, scheduling meetings, business case tracking.
  legal basis: legitimate interest (art. 6/1/f)
• Accounting and legal obligations – tax documents, statutory archiving, fulfilling duties.
  legal basis: legal obligation (art. 6/1/c)
• IT security and operations – logging, abuse prevention, network and service protection.
  legal basis: legitimate interest (art. 6/1/f)
• Analytics and marketing – website performance measurement, newsletter, personalization (if active).
  legal basis: consent (art. 6/1/a)

We keep data only as long as necessary for the purpose and legal archiving requirements. Typical intervals are below; specific periods may vary depending on the contractual relationship and legal requirements.

Data is shared only if necessary (e.g., accounting, legal, and IT providers, hosting, delivery services), or if required by law. We have contracts in place with processors.

When transferring outside the EEA, we use appropriate safeguards (e.g., EU Standard Contractual Clauses). A list of main recipient categories is available upon request.

• Access to data and a copy of processed data
• Correction of inaccurate or incomplete data
• Deletion (‘right to be forgotten’) if the purpose no longer exists or there is no legal basis
• Restriction and objection to processing (e.g., legitimate interest)
• Data portability (for data processed based on consent/contract)
• Withdrawal of consent at any time (without affecting the lawfulness of past processing)
• Lodge a complaint with the supervisory authority (ÚOOÚ)

We do not perform automated decision-making with legal effects under art. 22 GDPR. Any segmentation for analytics/marketing is done only with consent and without legal effects.

• Transmission encryption (HTTPS/TLS), access segmentation, and permission management
• Backups and monitoring, software updates and vulnerability fixes
• Contractual obligations with processors and emphasis on confidentiality

Our services are not aimed at children under 16. If you believe we have received a child’s data by mistake, contact us for correction.

Details including categories, legal bases, and consent management can be found on the Cookies page.