Privacy

Controller

The controller of your personal data is Twistcafe Group s.r.o., company ID (IČO) 077 38 374, registered office Boudníkova 2514/7, Libeň, 180 00 Prague 8, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 306179.

For anything concerning personal data, write to info@wearetwist.com or send a letter to our registered office.

We have not appointed a data protection officer, as the law does not require us to.

What we process and why

When you write to us

Data

Your e-mail address, name, the content of your message and anything else you include in it, such as a phone number or company in your signature.

Purpose

To reply to you and continue the conversation, for example about cooperation, franchising or supplies.

Legal basis

Our legitimate interest in answering messages and communicating with business partners (Art. 6(1)(f) GDPR). If we are negotiating a contract with you, steps taken at your request before entering into it (Art. 6(1)(b) GDPR).

Retention

For as long as the matter and the follow-up conversation last, then no longer than 3 years after the last message, in case legal claims need to be established or defended. If the conversation leads to a contract, we keep the data for its duration and for as long as the law requires, for example accounting and tax rules.

When you view the website

Data

IP address, date and time, the page requested and information about your browser and device.

Purpose

To deliver the website to you, protect it from attacks and misuse, and fix technical errors.

Legal basis

Our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

Retention

The hosting provider keeps these logs only briefly, for as long as running and securing the service requires. We do not use them to find out who you are or combine them with other data.

Visitor statistics

Data

The page visited, where you came from, device type, browser, operating system and country derived from your IP address. To tell visits apart, a one-way fingerprint (hash) is created from your IP address and browser details and changes every day. The IP address itself is not stored.

Purpose

To learn how many people visit the website and where they come from, so we can improve it.

Legal basis

Our legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR). The measurement uses no cookies, stores nothing on your device, does not track you across websites and is not used for advertising.

Retention

The visit fingerprint is valid for 24 hours only. We can see aggregated statistics for the past 12 months.

Cookies and browser storage

The website uses no cookies and no advertising tools. It stores only two small things in your browser and never sends them anywhere:

• your chosen language (localStorage), so the site opens in the same language next time. It stays until you clear the site's data in your browser.
• where you left off on the home page (sessionStorage). It disappears when you close the tab.

Both serve only features you use yourself, so they do not require consent (Section 89(3) of Czech Act No. 127/2005 Coll., on Electronic Communications). Fonts and images load directly from this website, not from third parties.

Who can access the data

We do not sell personal data. These processors help us run the website and e-mail and may handle the data only on our instructions:

Vercel Inc., USA

website hosting and visitor statistics (Vercel Web Analytics)

WEDOS Internet, a.s., Czech Republic

domain management (DNS) and e-mail forwarding

Google Ireland Limited, Ireland

e-mail mailbox (Google Workspace)

We may also disclose data to public authorities where the law requires it, and to our advisers, such as a lawyer or accountant, who are bound by confidentiality.

Transfers outside the EU

Vercel and Google may also process data in the United States. Vercel Inc. and Google LLC are both certified under the EU-US Data Privacy Framework, which the European Commission found to ensure an adequate level of protection in its decision of 10 July 2023. Both providers also use the standard contractual clauses approved by the European Commission.

Your rights

You have the right:

• to access the data we process about you and get a copy of it,
• to have inaccurate data corrected and incomplete data completed,
• to erasure, if we no longer need the data or process it unlawfully,
• to restriction of processing, for example while we verify the accuracy of the data or your objection,
• to data portability for data you gave us in connection with a contract,
• to object to processing based on our legitimate interest. We will then stop, unless we demonstrate compelling legitimate grounds or need the data to establish or defend legal claims.

To exercise your rights, e-mail info@wearetwist.com or send a letter to our registered office. We will reply without undue delay and within one month at the latest. In complex cases we may extend this by up to two further months and will tell you in advance. It is free of charge. If it is unclear who sent the request, we may ask you to confirm your identity.

If you believe we handle your data in breach of the law, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Prague 7, uoou.gov.cz, or with the supervisory authority in your EU country. We would be glad to sort it out with you directly first.

More information

• Providing data is voluntary. Without your e-mail address, however, we cannot reply.
• There is no automated decision-making or profiling.
• This policy covers the website wearetwist.com. Our shops and the websites of individual brands may have their own rules.
• Processing is governed by Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on the Processing of Personal Data.
• This is a translation of the Czech version. If they differ, the Czech version prevails.
• If the processing changes, we will update this text and its effective date. The current version is always on this page.