Who controls your data
The controller responsible for personal data processed through this website is:
- Company
- ngnlab.io s.r.o.
- IČO
- 30036755
- VAT ID
- CZ30036755
- Registered office
- Palackého 111, 277 46 Veltrusy
- Register
- Municipal Court in Prague, section C, file 456275
- petr@ngnlab.io
The company has not appointed a data protection officer.
What we process and why
Contact form and enquiries
When you contact us, we process your name, email address, subject, and message so we can assess and respond to your enquiry. For individuals acting on their own behalf, the legal basis is taking steps before entering a contract. For business contacts, we also rely on our legitimate interest in B2B communication and business development.
Site operation and security
When the site loads, hosting and security systems may process your IP address, request time, requested URL, browser type, and technical information needed to deliver and protect the site. We rely on our legitimate interest in secure and reliable operation.
Vercel Web Analytics
We use aggregated analytics to understand traffic and improve the site. A data point may include the visited path, referrer, approximate country or region, device type, browser, and time. Vercel states that data is not tied to a specific person or IP address and that the session identifier derived from a request is discarded after 24 hours. We do not use analytics for advertising or profiling. We rely on our legitimate interest in measuring and improving the site.
Recipients and transfers
The following providers may process data to the extent needed to deliver their services:
- Vercel — hosting, content delivery, security, and aggregated analytics.
- EmailJS Pte. Ltd. — delivery of contact-form messages to our mailbox.
- Email infrastructure providers needed to receive and manage communications.
EmailJS operates its primary infrastructure in the United States. Where personal data is transferred outside the European Economic Area without an adequacy decision, the transfer relies on the European Commission’s Standard Contractual Clauses and other applicable safeguards. The same approach applies to other providers where their infrastructure requires a transfer outside the EEA.
How long we keep data
- An enquiry that does not lead to a contract is kept for no more than 12 months after the last meaningful communication.
- If an enquiry leads to a contract, relevant correspondence becomes part of the customer record and is retained for the relationship and then for applicable legal, tax, and limitation periods.
- EmailJS request history is limited to no more than 30 days; activity storage is disabled where the service setting allows it.
- Vercel discards the visitor session after 24 hours. The account may retain only aggregated statistics that Vercel states cannot identify a visitor.
Cookies and local storage
The site does not use advertising or marketing cookies. After a successful form submission, it stores only a timestamp in sessionStorage to prevent an immediate repeat submission during the current browser session. This is technical storage needed to protect the form and ends with the browser session. The site therefore does not currently display a cookie-consent banner.
Your rights
To the extent provided by the GDPR, you may request access, correction, deletion, restriction, or portability of your data. You may object to processing based on legitimate interests.
To exercise these rights, email petr@ngnlab.io. You also have the right to complain to the Czech Office for Personal Data Protection.
Choice and automated decisions
Providing details through the contact form is voluntary. Without a name, email address, subject, and message, however, we cannot meaningfully handle an enquiry sent through the form. We do not use the data for automated individual decision-making or profiling.
We will update this notice if our processing or the services we use change materially.