Privacy Policy

1. Who We Are

Zepili operates the educational platform accessible at zepili.info. The platform provides informational and educational content on circular economy principles for small manufacturers. We are the data controller for personal data collected through this website.

Contact details for data protection enquiries:

• Address: Pod Resslem 1990/10, Most, Czech Republic
• Email: [email protected]
• Phone: +420 704 135 297

2. What Personal Data We Collect and How

We collect personal data only in the following circumstances:

2.1 Contact form

When you use the contact form on our website, we collect your name, email address, and the content of your message. This data is transmitted via your email client (mailto protocol) and is not stored on our web server. The legal basis for this processing is legitimate interest (Article 6(1)(f) GDPR) — specifically, the interest in being able to respond to enquiries submitted voluntarily by users.

2.2 Cookies and similar technologies

We use cookies on this website. The types of cookies used and the legal basis for each are described in our Cookie Policy. Where processing relies on consent, that consent is obtained through our cookie consent mechanism before any non-essential cookies are set.

2.3 Server logs

Our web hosting provider may collect standard server log data, including IP addresses and browser information, for security and operational purposes. This data is processed under our hosting provider's own privacy policy.

3. Purposes of Processing

We process personal data for the following purposes only:

• Responding to enquiries submitted via the contact form
• Maintaining website security and functionality
• Complying with legal obligations under Czech and EU law
• Where consent is given: placing non-essential cookies for analytics purposes

We do not use personal data for automated decision-making or profiling as defined in Article 22 GDPR.

4. Data Retention

Contact form messages received by email are retained for as long as necessary to address the enquiry, and for a reasonable period thereafter in case of follow-up. Server log data is retained by our hosting provider according to their standard retention policy, typically no longer than 90 days. Cookie data is retained for periods specified in the Cookie Policy.

Where no specific retention period applies, we apply the principle of data minimisation — retaining data only for as long as there is a clear and documented purpose for doing so.

5. Your Rights as a Data Subject

Under the GDPR and Act No. 110/2019 Coll., you have the following rights in relation to your personal data:

• Right of access (Article 15 GDPR) — you may request a copy of the personal data we hold about you.
• Right to rectification (Article 16 GDPR) — you may request correction of inaccurate data.
• Right to erasure (Article 17 GDPR) — you may request deletion of your data where there is no longer a lawful basis for processing.
• Right to restriction of processing (Article 18 GDPR) — you may request that processing be restricted in certain circumstances.
• Right to data portability (Article 20 GDPR) — where processing is based on consent or contract, you may receive your data in a structured, machine-readable format.
• Right to object (Article 21 GDPR) — you may object to processing based on legitimate interest.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by Article 12 GDPR.

6. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, UOOU), located at Pplk. Sochora 27, 170 00 Prague 7. Website: uoou.cz.

7. Third-Party Services

Our website may embed a Google Maps iframe for location display purposes. Google Maps is operated by Google LLC and is subject to Google's own Privacy Policy. By viewing the embedded map, you may interact with Google's services. We recommend reviewing Google's Privacy Policy at policies.google.com if you have concerns about this.

We do not share personal data with third parties for marketing or advertising purposes.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after changes are published constitutes acknowledgement of the updated policy. For significant changes, we will make reasonable efforts to notify users through the website.