Privacy policy

Effective from 26 August 2026

This policy explains what personal data we process when you visit www.iquest.cz or contact us, why we process it, how long we keep it and what rights you have. We follow Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on personal data processing.

Data controller

The controller of your personal data is:

iQuest s.r.o.
Sněmovní 9, 118 00 Praha 1
Company ID: 27096483, VAT ID: CZ27096483
E-mail: vyvojari@iquest.cz
Phone: +420 777 314 768

We have not appointed a data protection officer. Please send all questions and requests to exercise your rights directly to the e-mail address above.

Data from the contact form

When you send us an inquiry through the form on our website, we process your first and last name, e-mail address, phone number, optionally your company name and the text of the message you write to us.

The purpose is to answer your inquiry and negotiate possible cooperation. The legal basis is taking steps at your request prior to entering into a contract under Article 6(1)(b) GDPR; if no contract is concluded, we keep the inquiry on record based on our legitimate interest under Article 6(1)(f) GDPR.

Name, e-mail and phone number are mandatory — without them we cannot get back to you and the form cannot be submitted. All other fields are optional.

The message is delivered to our company mailbox through the SendGrid service and we send a confirmation of receipt to the address you provided. We keep your IP address in the server's memory for 10 minutes to protect the form against automated abuse; it is deleted automatically afterwards.

Job applicants' data

If you send us your CV or a response to an advertised position, we process the data you provide us with — typically your name, contact details and information about your education and work experience.

The purpose is to assess your application and run the selection procedure; the legal basis is taking steps prior to entering into a contract under Article 6(1)(b) GDPR. If we want to keep your data for future openings, we will ask you for separate consent.

Cookies and traffic measurement

We use strictly necessary technical cookies and browser storage (localStorage) so that the website works — we store, for example, your cookie consent choice there. These are set based on our legitimate interest in operating the website and cannot be refused.

Analytics and marketing tools are only loaded after you give us your consent in the cookie bar (Article 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll.). Until consent is given, the website runs in Google Consent Mode v2 with all analytics and marketing consent signals set to “denied”. With your consent we use:

  • Google Tag Manager, Google Analytics 4 and Google Ads (Google Ireland Limited) — traffic measurement, advertising campaign evaluation and remarketing.
  • Leady (IMPER CZ, s.r.o.) — identification of companies that visited our website.

You can withdraw your consent at any time using the “Cookie settings” link in the website footer or by clearing the site data in your browser. Withdrawal does not affect the lawfulness of processing carried out before it.

Who we share data with

We do not sell personal data. We only disclose it to processors who operate our website and communication tools for us, always under a data processing agreement:

  • Netlify, Inc. — website hosting and operation.
  • Twilio Inc. (SendGrid) — delivery of e-mails sent from the contact form.
  • Google Ireland Limited — traffic measurement and advertising (only with your consent).
  • IMPER CZ, s.r.o. (Leady) — company visit analytics (only with your consent).

We may also pass data on to our legal and accounting advisors or to public authorities where required by law.

Transfers outside the EU

Some of the processors listed above are based in the United States. In such cases the transfer relies on the European Commission's adequacy decision (the EU–US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.

How long we keep your data

We keep data only for as long as it is necessary for the given purpose:

  • contact form inquiries — 3 years from the last communication,
  • job applications — 6 months after the selection procedure ends, longer only with your consent,
  • contract and accounting records — for the period required by law, typically 10 years,
  • analytics and marketing identifiers — according to each tool's settings, no longer than 26 months.

Your rights

In relation to your personal data you have the right:

  • of access to your data and to a copy of the data processed,
  • to rectification of inaccurate data and completion of incomplete data,
  • to erasure (the “right to be forgotten”),
  • to restriction of processing,
  • to data portability,
  • to object to processing based on legitimate interest, including direct marketing,
  • to withdraw any consent you have given us at any time.

Simply write to the e-mail address listed above. We will handle your request within one month of receiving it at the latest.

If you believe that our processing of your data breaches the law, you can lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

Data security

Only authorised employees and contractors bound by confidentiality have access to personal data. The website runs exclusively over encrypted HTTPS connections and data is stored with vetted providers with appropriate technical and organisational safeguards.

We do not use personal data for automated decision-making or profiling that would produce legal effects concerning you.

Changes to this policy

We update this policy from time to time, for example when we deploy a new tool or change the way we process data. The current version is always available on this page and the effective date is shown in its header.