Privacy policy

1. Data Controller

The data controller of your personal data is omni loop s.r.o., ID No.: 23907151, registered office Skupova 2663/12, Jižní Předměstí, 301 00 Plzeň, registered with the Regional Court in Plzeň, Section C, File No. 47499 (“Omniloop”, “we”, or “us”).
You can contact us regarding any privacy matters at: info@omniloop.cz

2. Scope, Purpose and Legal Basis of Processing

2.1 Scope

We process personal data that you provide to us (such as name, surname, company, position, e-mail address, telephone number) as well as technical data collected when you use our website (e.g. IP address, browser type, and usage data).

2.2 Purpose of Processing

We process personal data for the following purposes:

• to perform a contract or take steps prior to entering into one (e.g. UX/CRO or marketing services, project proposals);

• to comply with legal obligations (e.g. accounting, tax, record-keeping);

• to ensure website functionality, security, analytics, and service improvement;

• to send commercial or marketing communications (such as newsletters or service offers), if you have given consent or where we rely on our legitimate interest.

2.3 Legal Basis

The processing of personal data is based on:

• Article 6(1)(b) of GDPR – performance of a contract or pre-contractual measures;

• Article 6(1)(c) of GDPR – compliance with legal obligations;

• Article 6(1)(f) of GDPR – legitimate interest of the controller (marketing, analytics, website optimization) provided that such interest does not override your rights and freedoms;

• Article 6(1)(a) of GDPR – consent, in cases where we send newsletters or marketing messages based on your explicit consent.

3. Cookies and Analytics

Our website uses cookies and similar technologies to ensure its functionality, analyze traffic, and improve marketing performance.

We use:

• Essential (technical) cookies – required for website operation;

• Analytical cookies (e.g. Google Analytics) – to measure website traffic and user behavior in an anonymized form;

• Marketing and remarketing cookies – to personalize ads and improve campaign targeting.

You can withdraw or change your cookie consent at any time in your browser settings or via the cookie banner on our website.

3.1 Tools and Data Processed

We use several analytics and marketing tools to better understand user behavior, measure campaign performance, and improve our website and services. These tools may process personal data as described below:

Google Analytics

Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics processes statistics about website traffic. The following personal data are collected and processed:

• IP address to determine the approximate location of a visitor. Before being transmitted to Google’s servers, the IP address is anonymized by replacing the last part of the address with zeros. This allows us to analyze aggregated location data (city, region, country) without identifying individuals.

• Cookie identifier (cid) to determine whether a visitor is new or returning and to improve attribution of traffic sources and ad spend efficiency.

• Integration with other Google services such as Search Console, enabling access to aggregated search analytics.

Google Analytics collects data on how users arrive at our website, which pages they visit, how long they stay, and what technologies they use (device type, operating system, browser version). These data are used solely to improve functionality and user experience and cannot be linked to specific individuals.

Amplitude

Provider: Amplitude, Inc., 201 Third Street, Suite 200, San Francisco, CA 94103, USA.
Amplitude is an analytics platform that helps us understand how users interact with our services (e.g., websites, onboarding flows, or marketing modules).
It processes anonymized identifiers, event data, session data, and device information (e.g., device type, OS, browser language) to improve our user experience and product functionality.

Meta (Facebook) Pixel

Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Meta Pixel is an analytics and advertising tool that helps us measure and optimize the effectiveness of our marketing campaigns on Meta platforms (Facebook and Instagram).
It collects behavioral data (e.g., page views, clicks, form submissions) and allows us to display more relevant ads to users who have previously visited our website.
Data are processed in accordance with Meta’s privacy policy and under our legitimate interest in improving advertising performance.

All data processing complies with GDPR. If data are transferred outside the EU or EEA (primarily to the USA), such transfers are carried out in compliance with Standard Contractual Clauses or other appropriate safeguards under Article 46 GDPR.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected or as required by law (e.g. accounting and contractual obligations).
After this period, the data will be securely deleted or anonymized.

5. Recipients and Data Processors

Your personal data may be shared with:

• our data processors (e.g. IT, analytics, cloud, or marketing service providers) based on contractual agreements ensuring adequate protection;

• public authorities or other entities when required by law or necessary to protect our legal rights.

We ensure that all third parties handle your data in compliance with GDPR and provide an adequate level of protection.

6. Transfers Outside the EU/EEA

We generally do not transfer personal data outside the European Economic Area (EEA).
If such transfer becomes necessary, it will be carried out in compliance with GDPR requirements using appropriate safeguards (such as Standard Contractual Clauses).

7. Your Rights

As a data subject, you have the following rights:

• Right of access – to obtain confirmation of whether we process your personal data (Art. 15 GDPR);

• Right to rectification – to correct inaccurate or incomplete personal data (Art. 16 GDPR);

• Right to erasure (“right to be forgotten”) – to request deletion of your data where conditions are met (Art. 17 GDPR);

• Right to restriction of processing (Art. 18 GDPR);

• Right to data portability – to receive your data in a structured, machine-readable format and transmit it to another controller (Art. 20 GDPR);

• Right to object – to processing based on legitimate interest, including direct marketing (Art. 21 GDPR);

• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time (Art. 7 (3) GDPR);

• Right to lodge a complaint – with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.

8. Data Security

We are committed to protecting your personal data through appropriate technical and organizational measures to ensure its confidentiality, integrity, and availability.
Access to data is limited to authorized personnel who require it for legitimate business purposes.

9. Changes to This Policy

This Privacy Policy may be updated from time to time (e.g. due to legal or technological changes). Any updates will be published on our website or communicated by e-mail where appropriate.
The new version becomes effective upon publication.

10. Effective Date

These Privacy Policy terms are valid and effective as of [publication date].