Privacy Policy

YOUNG4ENERGY s.r.o.
IČO: 04083351
Registered office: Korunní 595/76, 709 00 Ostrava, Czech Republic
E-mail: info@y-e.cz

If we appoint a Data Protection Officer (DPO), their contact will be listed on this page.
Currently: not appointed.

• Identification & contact (name, company, reg. no., e-mail, phone, address) – typically provided in an enquiry form or when concluding a contract.
• Service / project data (specification, technical parameters, communications, contracts, invoices).
• Operational & technical (server logs, security events) – for operation and security.
• Marketing / analytics – only aggregated data without identifying individuals (Umami).

• Enquiries, contracts and performance – quotes, project delivery, invoicing, service.
  legal basis: contract performance (Art. 6(1)(b))
• Communication & relationship management – replying to queries, meeting scheduling, sales pipeline records.
  legal basis: legitimate interests (Art. 6(1)(f))
• Accounting & legal obligations – tax documents, statutory archiving, compliance.
  legal basis: legal obligation (Art. 6(1)(c))
• Security & IT operations – logging, abuse prevention, network and service protection.
  legal basis: legitimate interests (Art. 6(1)(f))
• Analytics & marketing – anonymous website measurement for improvement (Umami).
  legal basis: legitimate interests (Art. 6(1)(f))

We keep data only as long as necessary considering the purpose and statutory archiving periods. Typical intervals are below; actual retention may differ depending on the contract and legal requirements.

We share data only when necessary (e.g., accounting, legal and IT providers, hosting, delivery services) or where required by law. We have data processing agreements in place with processors.

Traffic data (Umami) is processed on servers in the EU.

• Access to data and a copy of processed data
• Rectification of inaccurate and completion of incomplete data
• Erasure (“right to be forgotten”) where the purpose no longer applies or no legal ground exists
• Restriction of processing and the right to object (especially where based on legitimate interests)
• Data portability (for data processed on the basis of consent/contract)
• Withdrawal of consent at any time (without affecting prior lawful processing)
• Complaint to the supervisory authority (Czech DPA – ÚOOÚ)

We do not carry out automated decision-making with legal effects within the meaning of Art. 22 GDPR.

• Encrypted transport (HTTPS/TLS), access segmentation and permission management
• Backups & monitoring, software updates and vulnerability remediation
• Contractual commitments with processors and strong confidentiality

Our services are not aimed at children under 16. If you believe we inadvertently received a child’s data, please contact us for rectification.

This website does not use cookies for tracking users. More info on the page Cookies & Privacy.