1. IDENTITY OF THE DATA CONTROLLER
The Data Controller responsible for personal data processing pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – "GDPR") and Act No. 110/2019 Coll., on Personal Data Processing, is:
Belvela s.r.o.
Registered Seat: Petříkov 101, 251 69 Petříkov, Czech Republic (European Union)
ID No. (IČO): 042 93 002 | VAT ID (DIČ): CZ04293002
Commercial Register: File C 245468, Municipal Court in Prague
Contact Email for Data Protection: info@belvela.com
Website: www.belvela.com
The Controller has not appointed a Data Protection Officer (DPO), as it is not a public authority and its core activities do not involve large-scale regular and systematic monitoring of data subjects or the processing of special categories of data under Article 9 of the GDPR.
2. CATEGORIES OF PERSONAL DATA PROCESSED
We process solely the standard personal data that you voluntarily provide to us when submitting an inquiry via our contact form on belvela.com or via subsequent direct email communication:
- Identification Data: First name and surname,
- Contact Details: Email address, and telephone number (if provided in your message),
- Communication Data: Division of interest and content of your message,
- Transmission Metadata: Submission timestamp.
We do not process any special categories of personal data (sensitive data concerning health, biometric data, political opinions, etc.).
3. PURPOSES AND LEGAL BASES FOR PROCESSING (ARTICLE 6 GDPR)
Your personal data is processed solely for the following lawful purposes:
-
Handling Inquiries & Pre-contractual Measures:
Legal basis under Article 6(1)(b) GDPR: Processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract (answering inquiries regarding software development, Belvenila artisanal design, or wholesale brand distribution). -
Legitimate Interests of the Controller:
Legal basis under Article 6(1)(f) GDPR: Our legitimate interest in maintaining standard business communication archives, defending against legal claims, and securing our website infrastructure against automated spam and unauthorized interference.
4. DATA RETENTION PERIOD
Personal data from contact messages is retained only for as long as necessary to address your request and conduct follow-up business communication, up to a maximum of 1 year from the last communication, unless a contractual or statutory archiving obligation arises (such as accounting or tax record retention). Upon expiry of the retention period, data is securely erased.
5. DATA RECIPIENTS & TRANSFERS OUTSIDE THE EUROPEAN UNION
The Controller does not sell, rent, or disclose your personal data to any third parties for marketing purposes.
Recipients are strictly limited to verified technical infrastructure providers bound by confidentiality obligations:
- Web hosting and server infrastructure providers located within the EU,
- Secure corporate email service providers.
Personal data is never transferred to third countries outside the European Economic Area (EEA) or to international organizations.
6. YOUR RIGHTS UNDER ARTICLES 15 TO 22 OF THE GDPR
As a data subject, you hold the following statutory rights under the GDPR:
- Right of Access (Article 15 GDPR): Right to obtain confirmation as to whether your data is processed and to request a copy thereof.
- Right to Rectification (Article 16 GDPR): Right to have inaccurate or incomplete data corrected without undue delay.
- Right to Erasure / "To be Forgotten" (Article 17 GDPR): Right to have your data erased when it is no longer required for the original purpose.
- Right to Restriction of Processing (Article 18 GDPR): Right to restrict processing under circumstances defined by law.
- Right to Data Portability (Article 20 GDPR): Right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object (Article 21 GDPR): Right to object at any time to processing based on legitimate interests.
- Right not to be Subject to Automated Decision-making (Article 22 GDPR): The Controller does not employ automated individual decision-making or profiling.
To exercise any of these rights, please contact us by email at info@belvela.com. We will process your request within one month.
Right to Lodge a Complaint with a Supervisory Authority:
If you believe your personal data is processed in violation of applicable law, you have the right to lodge a complaint with the national supervisory authority in the Czech Republic:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů – ÚOOÚ)
Address: Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
Website: www.uoou.cz
7. COOKIE POLICY UNDER SECTION 89 OF ACT NO. 127/2005 COLL.
Belvela s.r.o. designed this website following the Privacy by Design principle:
- No Tracking or Advertising Cookies: We do not deploy advertising pixels, remarketing trackers (such as Meta Pixel or Google Ads), or third-party profiling scripts on this website.
- No User Profiling: Your visit is not profiled, recorded for behavioural analytics, or shared with advertising networks.
- No Annoying Cookie Banners: Because this site does not place non-essential cookies requiring prior affirmative consent (opt-in consent under Section 89 of the Czech Electronic Communications Act), no intrusive cookie banner is required, allowing you to browse cleanly and uninterrupted.