Privacy and cookie policy
Effective from 2 October 2026.
This policy explains what happens to your personal data when you visit www.decoled.com, send us a message through a form or subscribe to our news. It describes only what the website actually does.
1. Who processes your data
The controller of your personal data is DECOLED s.r.o., company ID (IČO) 25683853, VAT ID CZ25683853, registered office Fráni Šrámka 18, 150 00 Prague 5, Czech Republic, registered with the Municipal Court in Prague, section C, file 60918. It operates www.decoled.com in all language versions, even where the footer shows a local branch.
For anything concerning your personal data, write to info@decoled.com or to our office at Kladenská 37, 252 61 Dobrovíz, Czech Republic.
2. What we process, why and for how long
| When | What data | Why and on what legal basis | How long |
|---|---|---|---|
| You send us a message through a form (enquiry, contact, careers) | name, company or town, e-mail, phone, your message, the language and address of the page you sent it from | to handle your message and negotiate an order or cooperation; steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) | as long as needed to handle your message and the negotiation; if an order follows, for its duration and 3 years after |
| You subscribe to news or the catalogue | e-mail, language | sending marketing communications; your consent (Art. 6(1)(a) GDPR, Section 7 of Czech Act No. 480/2004 Coll.) | until you withdraw consent |
| You start filling in a form | IP address and technical browser data | protecting forms against bots and spam: Cloudflare Turnstile loads when you first click into a form and checks on submission that a person filled it in; legitimate interest (Art. 6(1)(f) GDPR) | for the duration of the check, under Cloudflare's terms |
| You browse the website | IP address, time, requested page, browser data | operating and securing the website on Cloudflare's infrastructure; legitimate interest | under Cloudflare's terms |
| We defend our rights | the data above, as far as necessary | establishing and defending legal claims; legitimate interest | for the limitation period, at most 15 years |
Providing data in a form is voluntary. Without a way to contact you, however, we cannot handle your message.
3. Who we share data with
The following processors handle data on our behalf:
- Cloudflare (Cloudflare, Inc., USA) – website hosting and form protection (Turnstile)
- Odoo – business system that receives messages from our forms
- Ecomail – sending our news
A message from another country may be handled by our sister company there: decoLED SK s.r.o., decoLED DE GmbH, DECOLED HU Kft., DECOLED d.o.o. or DECOLED FR SAS.
Cloudflare may also process data in the United States. For transfers to the US there is a European Commission adequacy decision (EU-US Data Privacy Framework). On request at info@decoled.com we will tell you which safeguards a transfer relies on.
We do not sell your data. We do not use it for automated decision-making or profiling.
4. Cookies and similar technologies
We speak of cookies and similar technologies because some data is stored not in cookies but in your browser's storage. Legally this is the same thing.
The website stores only what it strictly needs: your choice in the consent banner.
| Name | Set by | Purpose | Category | Duration |
|---|---|---|---|---|
| dc_consent (cookie and browser storage) | us | records your choice in the banner and when you made it | necessary | 182 days, then we ask again |
The website does not measure traffic and does not use advertising tools. Neither before nor after your choice does it load content from other servers, apart from the form protection and videos described in sections 2 and 5. The consent banner is prepared for analytics and marketing cookies as well, but the website has no such tool today, so that choice switches nothing on. Before we switch on any such tool, we will describe it in this policy.
How to change your choice: use the “Cookie settings” link in the footer of every page. You can also delete cookies in your browser.
5. YouTube videos
Videos do not load automatically. The player from youtube-nocookie.com is inserted only after you click. Google then receives your IP address and browser data and may process them in the United States as well. Until you click, the website does not contact Google.
6. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing and to data portability. You have the right to object to processing based on legitimate interest. You can withdraw your consent at any time; for news, use the link in every e-mail. Withdrawing consent does not affect processing that took place before.
Send your request to info@decoled.com. We will handle it without undue delay and within one month at the latest.
You also have the right to lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Prague 7, www.uoou.gov.cz, or with the supervisory authority in your country of residence.
7. Changes to this policy
We update this policy when what the website does with data changes. The current version is always on this page, with its effective date at the top.