Controller and contact
The controller is Velora Systems s.r.o., company ID 24968838, Na lysinách 574/14a, Hodkovičky, 147 00 Praha 4, Czech Republic. Contact info@velora-systems.cz with any personal data questions or requests.
Information we process
Enquiries include your name, company, email, optional telephone number and message. Partner accounts also contain a sign-in email, securely stored password hash, account status, tickets, replies and timestamps. Session data and limited technical records support security. Do not include passwords, licence keys, health information or other particularly sensitive data in forms.
Purposes and legal bases
We handle pre-contractual enquiries and contracts with individuals under Article 6(1)(b) GDPR. Business representatives’ contact details and correspondence are processed under our legitimate interests in business communication and support delivery (Article 6(1)(f)). Accounts and tickets enable the contracted service; security, abuse prevention and legal claims are legitimate interests. Statutory duties use Article 6(1)(c). We do not use enquiry details for marketing campaigns without a separate legal basis.
Retention
Unconverted business enquiries are retained for no longer than 12 months after they are last handled. Closed tickets are retained for 3 years after closure for support continuity and legal claims. Accounts remain for the active relationship and afterwards only as necessary to establish or defend claims. Statutory obligations or a specific dispute may require longer retention. Application security records are limited to 30 days. Single-use links expire within 1 hour (reset) or 48 hours (invitation). Backups rotate according to the hosting cycle; deletion requirements are reapplied after a restore.
Recipients and processors
Authorised personnel and contracted providers receive access only where needed to handle the request. ACTIVE 24, s.r.o. provides hosting and email. Professional advisers and public authorities may receive data where required by law. With the customer’s knowledge, technical request details may be shared with the relevant support provider if the agreed service requires it. Any transfer of personal data outside the EEA must use the appropriate safeguards under Chapter V GDPR; details for a specific service are available on request.
Your rights
Subject to GDPR conditions, you may request access, correction, deletion, restriction and portability where applicable. You may object to processing based on legitimate interests. Consent, where used, may be withdrawn at any time. We normally respond within one month; extensions are possible in justified cases under GDPR. You may complain to the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic (uoou.gov.cz).
Voluntary provision and automation
You provide form data voluntarily. Without required contact details we cannot handle the request or provide an account. We do not use automated decision-making with legal or similarly significant effects, or advertising profiling.
Cookies and security
Only essential cookies support secure sessions, forms and acknowledgement of our cookie notice. See the Cookies page. HTTPS protects transmission, and ticket access is checked on the server.