Effective and last updated: 31 August 2026
1. Who we are and how to contact us
Digital Company s.r.o., Pohoří 137, 518 01 Dobruška, Czech Republic, phone +420 499 599 283. You may use the website contact form, phone or post to ask questions or exercise rights. State that the request concerns personal data; do not send identity documents by ordinary email unless we explicitly request secure verification.
2. Controller and processor roles in Printexus
Digital Company is generally the controller for website visitors, business contacts, contractual and billing data, platform security and administration of its own services. Where a customer organisation enters data about staff, technicians, location contacts or other persons, the customer determines the purposes and means and acts as controller; Digital Company acts as processor under contract and customer instructions. Requests concerning customer data may therefore be referred to the relevant customer or handled with our assistance.
3. Data we process
Depending on use, we may process identification and contact data, company and job role, login and authorisation data, account settings, communications, contractual and billing information, device and browser information, IP address, login time and result, audit and security events and data related to service workflows. Passwords are not stored in readable form. Sensitive application fields are protected by encryption and access controls.
4. Purposes and legal bases
We process data to answer enquiries and take pre-contractual steps, enter into and perform contracts, provide support, administer accounts, secure the service, prevent abuse, maintain audits, defend legal claims, comply with accounting and other laws and, after consent, provide optional analytics or marketing measurement. The legal basis is, as applicable, contract or pre-contractual steps, legal obligation, legitimate interests in secure and reliable operation and protection of rights, or consent.
5. Contact form and business communication
When you submit the form, we process your name, email, phone, company and message to respond and conduct the requested discussion. Required fields are necessary to handle the message; without them we may be unable to reply. Acknowledging this policy confirms that you have read the information; it is not consent to unrelated or unlimited use.
6. Cookies, analytics and marketing
Necessary technologies support security, sessions, language and consent preferences. Google Analytics, Microsoft Clarity and Meta Platforms tools may run only according to your cookie choice. You may change consent at any time in Cookie settings in the footer; withdrawal does not affect prior lawful processing. Category details are provided on the Cookies page.
7. Recipients and service providers
Data may be accessed as necessary by authorised Digital Company personnel, the relevant customer organisation and vetted providers of hosting, infrastructure, security, communications, accounting and, after consent, analytics or marketing tools. Access is limited by role, purpose and contractual duties. Data may be disclosed to authorities where legally required. We do not sell personal data.
8. Transfers outside the EEA
Some analytics, marketing or infrastructure providers may process data outside the EEA. Such transfers take place only under GDPR safeguards, for example an adequacy decision, European Commission standard contractual clauses and supplementary measures where needed. Optional analytics and marketing tools do not run without the relevant consent.
9. Retention periods
We retain data only as long as needed for its purpose. Unsuccessful business enquiries are normally kept for no more than 12 months; contractual and billing records for the contract term and applicable statutory and limitation periods; customer accounts during service and secure termination; security and audit records under the configured retention policy and as needed to protect the system and legal claims; consent-based data until withdrawal or configured expiry. A record may be retained longer where required for law, disputes, security incidents or protection of rights.
10. Data security
We use layered safeguards including encrypted transport, role and tenant access controls, multi-factor authentication and passkeys, audit trails, session protection, login throttling, encryption of selected sensitive fields, backups and operational monitoring. No measure removes all risk, so controls are reviewed and adapted to the nature and scale of processing.
11. Your rights
Subject to GDPR conditions, you may obtain information and access, correct inaccurate or complete incomplete data, request erasure, request restriction, exercise data portability and receive data you provided under consent or contract in a structured machine-readable format and transmit it to another controller, object to processing based on legitimate interests and object at any time to direct marketing. You may withdraw consent and have rights regarding solely automated decisions producing legal or similarly significant effects. Rights are not absolute and statutory conditions and exceptions apply.
12. How to exercise rights and how we respond
Submit a request through the contact form, by phone or post. Describe the person, right and relevant organisation or account. We may request proportionate information to verify identity and prevent unauthorised disclosure or change. We respond without undue delay, normally within one month. For complex or numerous requests, this may be extended by two months; we will notify you and explain why within the initial month. Manifestly unfounded or excessive repetitive requests may be charged or refused under GDPR conditions.
13. Automated decision-making
The website and ordinary platform account administration do not use solely automated decision-making producing legal or similarly significant effects on you. Printexus may generate operational alerts, priority suggestions or service automation proposals; these are not decisions about an individual with legal effects, and the customer organisation can configure rules and human approval.
14. Complaints and policy changes
You may complain to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz, or another competent EU supervisory authority. We welcome the opportunity to explain or remedy the matter first. We may update this policy when services, providers or legal requirements change; the current text and effective date will be published here.