Privacy notice
Last updated: 27 October 2026
This notice explains how we process personal data when you visit techoneops.com or contact us about TechOneOps services.
Who is responsible
The controller is TechOne CZ s.r.o., Company ID (IČO) 06010555, VAT ID CZ06010555, with its registered office at Dělnická 213/12, 170 00 Praha 7, Czech Republic.
For questions about personal data or to exercise your rights, contact compliance@techone.cz or write to our registered office.
This notice covers the website and service enquiries. Processing within customer infrastructure is addressed separately in the relevant service agreement and, where applicable, a data processing agreement.
Website visits and security
When you open the website, our servers receive technical information needed to deliver the page. Logs may contain your IP address, date and time, the requested URL including parameters, the referring page when supplied by your browser, browser information, response status and size, and diagnostic information about errors.
We use these records to operate the website, investigate faults and protect it against abuse and attacks. The legal basis is our legitimate interest in maintaining an available and secure website under Article 6(1)(f) GDPR.
For the enquiry form, we also process a temporary session identifier, pseudonymous abuse-prevention identifiers derived from IP addresses, and submission references and status records. These help prevent forged requests, excessive submissions and duplicate delivery. The application-side protection records do not contain a full copy of your enquiry.
CrowdSec SAS (France) describes itself and participating operators as joint controllers for shared IP-reputation data. When a security incident is detected, our server shares the associated IP address, time and incident type. Reputation checks can automatically block requests; you can contact us to request review of a block.
When you contact us
When you submit the enquiry form, we process your name, work email address, company, selected service interest and message, and your telephone number if you choose to provide it. If you email or telephone us separately, we process the contact details and enquiry information you provide. We use these details to respond and discuss the service you are interested in.
The form sends your enquiry internally to sales@techone.cz through our existing email delivery system. The application does not store the enquiry in a database or a separate application outbox. The message can be held temporarily in the mailserver delivery queue before it reaches our mailbox. We do not send an automatic enquiry confirmation to the email address entered in the form.
For contact with a company representative, the legal basis is our legitimate interest in handling business enquiries under Article 6(1)(f) GDPR. If you are personally a prospective contracting party and request steps before entering into a contract, Article 6(1)(b) GDPR applies to those steps.
Submitting an enquiry is voluntary. The form identifies the fields needed to understand and respond to your request; the telephone number is optional. Without the required details, we may be unable to handle the enquiry. Please do not submit passwords, access credentials or other sensitive information.
Cookies and browser storage
The enquiry form uses the strictly necessary ops_lead_session cookie to maintain a short-lived session and protect submissions against forged requests. The cookie is valid for 30 minutes. It is not used for analytics, advertising or tracking across websites.
Google Analytics 4 runs only if you allow it. On your first visit we ask for your choice; until you decide, and if you decline, Google Analytics does not load and sets no cookies. If you allow it, Google sets analytics cookies (such as _ga) and receives data about your visit, such as the pages viewed, device and browser information and approximate location. The legal basis is your consent under Art. 6(1)(a) GDPR and the applicable rules on storing information on your device. You can withdraw your consent at any time through "Analytics settings" in the footer; we then stop analytics and remove the analytics cookies available to this website.
Your analytics choice is stored in your browser's localStorage under the key techoneops-analytics, not in a cookie. It stays until you change it or clear your browser data.
When you submit the enquiry form, the page loads Google reCAPTCHA Enterprise to distinguish people from automated scripts. It runs only at that moment, not while you read the website. Google receives technical data about the request, such as IP address, browser information and interaction with the page, and may set or read its own cookies for this purpose. We use the result to protect the form against spam and abuse, which is our legitimate interest under Art. 6(1)(f) GDPR. If Google rejects the check, the enquiry is not sent. If the check cannot run, for example because the script is blocked, we receive the enquiry marked for manual review. You can always call us instead.
We do not use advertising pixels. Fonts and other page assets are served from this website. Server logs and the form-protection and security checks described above still take place.
How long data is kept
Access and error logs at the website gateway (reverse proxy) are rotated daily when they contain records. We retain the current file and up to 14 archived files; the oldest archive is removed on the next rotation. This is a limit of 14 rotations, rather than a fixed 14-day period: days without new records do not trigger a rotation.
The application server's access and diagnostic logs are held in a rolling buffer of up to three files of approximately 10 MB each. Older records are overwritten as new records reach that limit; their lifetime therefore depends on the volume of events. Local CrowdSec security events are limited to seven days and 5,000 entries.
The browser session cookie is valid for 30 minutes. Server-side session records become eligible for removal 30 minutes after the session file was last changed. Pseudonymous rate-limit records become eligible 24 hours after the last recorded submission attempt; submission-reference and status records become eligible 14 days after their last update. These protection records do not contain the full enquiry payload.
Eligible form-protection records are removed in limited batches during valid submissions when the form is active. Actual removal can therefore occur later than these intervals, particularly when no further submissions take place. Expiry of the browser cookie does not itself delete server-side records.
Enquiry messages awaiting delivery and undeliverable-message reports can be held in the mailserver queue, configured with a maximum lifetime of five days per queued message. This delivery setting does not determine how long enquiry correspondence is kept in the mailbox.
Enquiry correspondence is kept for 12 months after our last communication with you. If the enquiry leads to a contract, the correspondence is kept for the term of the contract and for the periods required by law, in particular accounting and tax rules.
Security indicators shared with CrowdSec follow its separate retention rules, described in its privacy notice. The local seven-day setting does not apply to those shared indicators.
Recipients and international processing
Relevant data can be accessed by authorised TechOne staff and providers involved in hosting, email delivery and security. The website is hosted using Hetzner Online GmbH (Germany). Google Ireland Limited provides Google Analytics (only with your consent) and reCAPTCHA Enterprise (when you submit the form); Google may process this data in the United States. Microsoft services are involved in the delivery and protection of email addressed to techone.cz. Security indicators are shared through CrowdSec as described above. Data may also be disclosed to a competent authority where the law requires it.
Provider processing may involve countries outside the European Economic Area. CrowdSec states that it uses European Commission standard contractual clauses for transfers to countries without an adequate level of protection. Microsoft describes its transfer safeguards in its published privacy information and data protection terms. Google LLC is certified under the EU-U.S. Data Privacy Framework and also relies on standard contractual clauses. Contact compliance@techone.cz for information about the safeguards applicable to your data or to request a copy.
Your rights
Subject to the conditions in the GDPR, you can request access to your personal data, correction, erasure or restriction of processing. You can object to processing based on legitimate interests. Data portability applies where processing is automated and based on consent or a contract.
Send your request to compliance@techone.cz. We normally respond within one month; if the GDPR permits an extension, we will inform you within that month. We may ask for information needed to verify your identity.
You may complain to the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, email posta@uoou.gov.cz. You may also contact the supervisory authority in the EU country where you habitually live or work, or where the alleged infringement occurred.
Changes to this notice
We will update this notice when the website or the way we process personal data changes. The date at the top identifies the current version. Other websites linked from TechOneOps describe their processing in their own privacy notices.