Legal
Privacy policy
Last updated on 24 March 2026.
1. Controller and contact details
The controller of personal data is VISAEXPERT s.r.o., Company ID 23688122, registered office Příčná 1892/4, Nové Město, 110 00 Praha 1, Česká republika.
Contact for privacy questions: info@visaexpert.cz, +420 720 680 172.
No dedicated data protection officer has been appointed because the current scale of processing does not trigger that legal requirement.
2. Main purposes, legal bases, recipients, and retention
The table below summarises the main situations in which we process personal data. In a live client matter, the exact scope depends on the service and on the documents you decide to provide.
| Purpose | Data categories | Legal basis | Retention | Recipients / processors |
|---|---|---|---|---|
| Handling a website or e-mail enquiry | name, e-mail, phone number, case description, chosen service, company or residence-status details, technical source context of the form | Article 6(1)(b) GDPR – steps taken at your request before a contract | normally 12 months after the last meaningful contact if no engagement follows | hosting, e-mail delivery, and internal VISAEXPERT staff |
| Delivering an agreed service and related communication | client identification details, case documents, powers of attorney, billing details, authority communication | Article 6(1)(b) GDPR and, where relevant, Article 6(1)(c) GDPR for legal obligations | for the duration of the engagement and afterwards in line with accounting, tax, and limitation rules | authorised collaborators, accounting support, delivery services, and public authorities where the case requires it |
| Defending legal claims, security, and internal records | correspondence, timeline records, invoices, and internal case notes | Article 6(1)(f) GDPR – legitimate interest in claim defence and secure operations | for the life of the claim and the related statutory periods | hosting, e-mail, internal staff, and legal or accounting advisers where needed |
3. Mandatory vs optional data, recipients, and processors
Fields marked as required in the contact flow are needed so we can reply to the enquiry and identify a safe next step. Optional data should only be provided where it helps describe the situation more precisely.
VISAEXPERT uses a limited set of processors needed to run the website, e-mail delivery, invoicing, and communication handling. Additional parties are involved only where a specific service genuinely requires that step.
- website hosting and technical infrastructure
- e-mail and contact delivery services
- accounting / tax support
- public authorities and institutions where the case requires it
4. International transfers, automated decisions, and cookies
At the date of this version, the public website does not run any live third-party analytics or marketing vendor. The site operates in an essential-only mode and stores only the user’s cookie-preference / technical preference choice.
We do not use automated individual decision-making or profiling that would itself produce legal or similarly significant effects.
If any future processing requires a transfer outside the EU/EEA, this page will be updated with the mechanism used and the vendor involved.
5. Your rights and complaint path
You may request access to your personal data, rectification, erasure, restriction of processing, objection, and data portability where applicable under law.
If you believe your data is being processed unlawfully, you may complain to the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, [www.uoou.cz].