Privacy Policy

1. Data controller

The data controller is Miroslavo s.r.o., operator of Miros Digital (https://miros.digital).

Registered office

Masarykovo náměstí 156, 256 01 Benešov, Czech Republic

Company ID (IČO)

03068536

VAT ID (DIČ)

CZ03068536

Commercial register

Municipal Court in Prague, Section C, Insert 227170

Contact: ciao@miros.digital

2. What data we process

Depending on how you use the site, we may process:

• Contact form: name, email, message (and company if provided).
• Free website report: email, website URL, and optional company name, goals, or context — stored so we can generate and email your report and follow up.
• Booking: name, email, company, and website shared with Calendly to schedule a call.
• Technical data: IP address for rate-limiting abuse on public forms; server logs as needed for security.

3. Purpose and legal basis

We process personal data to respond to enquiries and deliver requested services (e.g. a free report or a booked call) under Article 6(1)(b) GDPR (steps prior to a contract) and, where appropriate, Article 6(1)(f) (legitimate interest in handling B2B requests and securing the site). Analytics cookies are used only with your consent under Article 6(1)(a).

4. Retention period

Enquiry and lead data are kept as long as needed to handle your request and any follow-up collaboration, typically up to 3 years from the last communication, unless a longer period is required by law. Analytics data follows Google Analytics retention settings. You may ask us to delete your data sooner where applicable.

5. Processors and recipients

We use specialised providers as processors: Resend (transactional email), Supabase (database hosting for report leads and business tools), OpenAI (AI-assisted report analysis of public website content), Google (Analytics, if you consent; Meet for booked calls), and Calendly (scheduling). Hosting may involve our web host. We do not sell your personal data.

6. Cookies and analytics

Necessary storage (e.g. theme preference) keeps the site usable. Optional Google Analytics 4 (GA4) cookies measure visits and traffic sources only after you click Accept in the cookie banner. Until then, analytics storage stays denied (Google Consent Mode). You can Reject analytics or reopen Cookie settings in the footer. GA4 is not fully anonymous; it may use identifiers and approximate location. You can also use browser controls or Google’s opt-out tools.

7. International transfers

Some providers (for example Google, OpenAI, Resend, Calendly, Supabase) may process data outside the EEA. Where required, transfers rely on appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

8. Your rights

Under the GDPR you may:

• request access to your data,
• request correction or deletion,
• request data portability,
• restrict processing or object to processing based on legitimate interests,
• withdraw consent for analytics cookies at any time (Cookie settings) without affecting prior lawful processing,
• lodge a complaint with a supervisory authority.

To exercise your rights, contact us at ciao@miros.digital.

9. Supervisory authority

In the Czech Republic you may contact the Office for Personal Data Protection (ÚOOÚ) at uoou.gov.cz.