Privacy Policy
We value your trust. Below we explain in plain language what personal data we process about you, why we need it, how long we keep it, and what rights you have.
Effective from 23 August 20261. Who is the controller of your personal data
The controller of your personal data is Walltron s.r.o., company ID 191 80 705, VAT ID CZ19180705, registered office at Roháčova 1666/94, 130 00 Prague 3 – Žižkov, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague under file number C 382625.
For anything concerning the protection of your personal data, contact us at info@walltron.cz or call +420 601 388 589.
Given the nature and scale of our activities we are not legally required to appoint a Data Protection Officer, and we have not appointed one. Your requests are handled directly through the contacts above.
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, “GDPR”) and Czech Act No. 110/2019 Coll., on personal data processing.
2. What data we process
Data you give us yourself
If you fill in the enquiry form on our website, we process the data you enter:
- Full name — so we can address you properly.
- Email address — to send you a quote and to communicate with you.
- Phone number — so we can quickly clarify the details.
- Property type (house, apartment building, commercial premises, etc.) — to design a suitable system.
- Town or postcode — to assess the location, access and solar exposure.
- Message — an optional addition to your enquiry.
We process the same data when you contact us directly by email or phone. Please do not enter special categories of personal data (such as health data) into the form — we do not need them to handle your enquiry.
Data recorded automatically
Together with a submitted form we also store your IP address, the date and time of submission and the language version of the form. This data serves solely to protect the form against misuse and automated spam, and to record when you sent us your enquiry.
Our web host also keeps standard server logs (IP address, request time, browser type) that are necessary to operate and secure the website.
3. Why we process data and on what legal basis
Every processing operation has a specific purpose and a corresponding legal basis under Article 6 of the GDPR:
| Purpose | Legal basis | Data involved |
|---|---|---|
| Handling your enquiry, preparing a quote and related communication | Your consent — Art. 6(1)(a) GDPR (the checkbox in the form) | Name, email, phone, property type, town/postcode, message |
| Negotiating and performing a contract if you decide to go ahead | Contract performance and pre-contractual steps — Art. 6(1)(b) GDPR | Contact and identification data, installation address |
| Protecting the form against spam and misuse, securing the website | Our legitimate interest — Art. 6(1)(f) GDPR | IP address, date and time of submission |
| Meeting legal obligations (accounting, tax, archiving) | Legal obligation — Art. 6(1)(c) GDPR | Billing and contract data |
| Measuring advertising performance and website traffic | Your consent — Art. 6(1)(a) GDPR, see section 6 | Data from cookies and similar technologies |
We do not sell your data. We do not pass it to third parties for their own marketing, and we do not use it for automated decision-making or profiling that would produce legal effects concerning you.
4. How long we keep your data
We keep personal data only for as long as we genuinely need it:
- An enquiry that does not lead to an order — no longer than 24 months from the last contact, after which we delete the record.
- An enquiry that leads to a contract — for the duration of the contractual relationship and then for the limitation periods, typically 4 years after the cooperation ends.
- Accounting and tax documents — for the period required by law, typically 10 years from the end of the tax period.
- Anti-spam records (IP address, submission time) — no longer than 12 months.
- Cookies — no longer than 90 days; see the overview in section 6.
If you withdraw your consent earlier, we will delete the data processed on that basis without undue delay — except for data we are required by law to retain.
5. Who we share your data with
Your data is accessible only to our employees and contractors who need it to handle your enquiry, and to the following categories of processors with whom we have data processing agreements in place:
- Web hosting and email provider — operates the server the website runs on and delivers the emails containing your enquiry.
- Google Ireland Limited — advertising measurement tools (Google Ads) and web fonts (Google Fonts). Details in section 6.
- Suppliers and installation partners — only to the extent necessary and only if you order an installation from us (for example, to deliver components to the site).
- Accounting, tax and legal advisors — to the extent needed to meet our legal obligations.
- Public authorities — where required by law (for example the tax office, the electricity distributor when arranging a grid connection, or a subsidy provider if you apply through us).
7. Transfers outside the European Union
Your enquiry and its backup copy are processed on servers within the European Union.
When Google services are used (Google Ads, Google Fonts), data may be transferred to the United States. Such transfers are covered by appropriate safeguards under Chapter V of the GDPR — in particular the European Commission's adequacy decision under the EU–US Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission.
8. How we secure your data
We have put in place technical and organisational measures appropriate to the nature of the data we process:
- The website and the form run exclusively over an encrypted HTTPS connection.
- The backup of submitted enquiries is stored in a folder that is not accessible from the internet.
- Only people who need the data for their work can access it, and they are bound by confidentiality.
- The form is protected against automated submissions by bots.
Should a personal data breach nevertheless occur and pose a high risk to your rights, we will inform you without undue delay.
9. Your rights
In relation to your personal data, the GDPR gives you the following rights:
- Right of access — you may ask whether and what data we process about you and request a copy.
- Right to rectification — if data is inaccurate or incomplete, we will correct it.
- Right to erasure (“right to be forgotten”) — we will delete data once the reason for processing has ceased and no legal obligation prevents it.
- Right to restriction of processing — you may ask us to pause processing, for example while the accuracy of data is verified.
- Right to data portability — we will provide the data you gave us in a machine-readable format.
- Right to object — to processing based on our legitimate interest.
- Right to withdraw consent — at any time and without giving a reason. Withdrawal does not affect the lawfulness of processing before it.
The easiest way to exercise a right is by email to info@walltron.cz. We will respond within one month of receiving your request. To make sure we do not disclose data to the wrong person, we may ask you to verify your identity.
Complaint to the supervisory authority. If you believe we are not handling your data properly, you may contact the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice, Czech Republic, www.uoou.gov.cz.
We would appreciate the chance to resolve the matter with you directly first — it is usually faster.
10. Changes to this policy
We may update this policy from time to time — for example when we adopt a new tool or when the law changes. The current version is always available at this address and carries its effective date. We recommend checking back occasionally.
This policy is effective from 23 August 2026.
In the event of any discrepancy between this English translation and the Czech version, the Czech version prevails.