Privacy Policy
This policy explains which personal data we process when you use the takebox.eu website, why, for how long, to whom we disclose it and what rights you have. We follow Regulation (EU) 2016/679 (GDPR) and the related Czech legislation.
01Data controller
The controller is TAKECARS s.r.o., company ID 08077703, VAT CZ08077703, registered office Jankovcova 1566/2b, 170 00 Prague 7, Czech Republic (brand TAKEBOX). Contact for personal-data questions: info@takebox.eu, phone +420 777 559 558.
02What data we process, for what purpose and on what legal basis
- Enquiry form and 3D configurator design: name, e-mail, phone, description of the job, dimensions, quantity, note and website language. Purpose: handling your enquiry and preparing a quote. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- Further communication by e-mail or phone: the data you provide to us. Purpose: answering your question and carrying out the order. Legal basis: contract, or our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR).
- Visitor measurement (Google Analytics 4): data about the visit, device and browser and identifiers stored in cookies. Purpose: evaluating traffic and enquiries. Legal basis: your consent (Art. 6(1)(a) GDPR).
- Advertising (Google Ads, remarketing): identifiers stored in cookies and ad-click information. Purpose: measuring ad conversions and showing ads to people who visited the website. Legal basis: your consent (Art. 6(1)(a) GDPR).
- Signals without consent (Google Consent Mode): if you do not consent, only cookieless data (consent status, time, browser type, page address, ad-click information) is sent to Google for aggregated conversion modelling. Legal basis: our legitimate interest in measuring advertising effectiveness (Art. 6(1)(f) GDPR).
- Website operation and security: IP address and technical data in server logs. Purpose: keeping the website running and secure and protecting the form against abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Website administration: e-mail, role and password hash of authorised content editors and records of their logins and changes. Purpose: content management and security. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
03To whom we disclose data
We do not disclose data to third parties for their own purposes. We use the following processors:
- the web-hosting and outgoing e-mail provider (Active24 / Websupport, servers in the EU),
- Microsoft Ireland Operations Ltd. — the mailbox that receives enquiries (Microsoft 365),
- Google Ireland Ltd. — Google Analytics 4 and Google Ads, only to the extent of your consent,
- Cloudflare, Inc. — DNS management for the domain.
We may also disclose data to public authorities where required by law.
04Transfers outside the European Union
Google, Microsoft and Cloudflare may transfer data to their parent companies in the USA. These companies are certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection.
05How long we keep data
- enquiries and related communication: 3 years from the last contact, unless a contract results from them,
- contract data and accounting records: for the period required by law (10 years for accounting records),
- visitor-measurement data: no longer than 14 months,
- cookies: for the period stated in the Cookie Policy,
- administration login records: 90 days; content backups: 30 days.
06Automated decision-making and profiling
We do not carry out automated decision-making with legal effects. Limited profiling takes place for advertising (remarketing), and only with your consent.
07Your rights
You have the right to access your data, to rectification, erasure, restriction of processing and data portability, the right to object to processing based on legitimate interest and the right to withdraw consent at any time (for cookies, via the cookie settings in the website footer). Send your request to info@takebox.eu; we will respond within one month at the latest.
You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
08Changes to this policy
We may update this policy, for example when the services we use change. The current version published on this page always applies.
Effective from 2 October 2026 · TAKECARS s.r.o., company ID 08077703.