Privacy and cookies

targetlab.cz has no contact form, user accounts, customer portal or visitor database. It embeds no maps, videos or social media widgets. Selecting an email or phone link passes the action to an app on your device. The website does not record what is said during a call.

The selected production configuration uses Vercel for hosting, while Cloudflare manages DNS for the domain. The controller verifies the active provider settings before the public launch and updates this policy if the configuration changes.

A provider serving the live website may handle an IP address, request time, requested URL, browser or device information, and security events. The controller relies on a legitimate interest in delivering and protecting the site. Where analytics is configured, the same basis applies to remembering the visitor's cookie choice.

Retention of technical records follows the active production settings and the providers' current terms. The controller checks those settings before the public launch. A record isolated for a specific security investigation or statutory obligation is retained only until the investigation is closed or the obligation has been fulfilled.

An email or call may provide the controller with your name, organisation, email address or phone number, the contents of the communication and any attachments. Calls are not recorded by the website.

The controller uses information from an enquiry to take the steps you request before a contract. Routine B2B correspondence and administration of a business relationship are handled on the basis of the controller's legitimate interest. Accounting, tax and other mandatory records are kept to meet legal duties.

The controller retains the communication until the enquiry and related business matter are resolved. After that point, only records needed for legal or accounting duties, or to make or defend a legal claim, are kept.

Google Analytics 4 is an optional part of the site and remains inactive until the controller configures it. Once configured, no Google script loads and no request goes to Google's network until the visitor has chosen to allow analytics cookies. This prior consent is required by Czech rules on privacy in electronic communications.

With consent, GA4 provides aggregate information about page use and records clicks on email and phone links. A click shows only that the link was selected. The controller does not label it as an enquiry, a phone conversation or a sale.

Google is not allowed to store or use data for advertising, and advertising personalisation stays off. The controller does not use remarketing, User-ID, data supplied by visitors for measurement, enhanced conversions, cross-domain measurement or a link between GA4 and Google Ads.

Before GA4 is activated, the controller sets account-level retention for user and event data to 2 months.

Cookie controls appear only while analytics is configured. In that state, the footer contains a link for changing the choice later. When analytics is not configured, there is no consent banner, consent-choice cookie, Google analytics code or cookie-settings link.

The Google Analytics cookies are created only after consent. The first-party cookie used by targetlab.cz to remember the choice contains no random visitor ID.

• —Consent-choice cookie — purpose: stores the policy version, the allow or decline decision and the time it was made; provider: targetlab.cz, strictly necessary first-party cookie; duration: 12 calendar months after analytics is allowed or 6 calendar months after it is declined. A footer change or earlier browser deletion ends the saved choice sooner.
• —Cookies _ga and _ga_* — purpose: aggregate website measurement after consent; provider: Google Analytics; duration: up to 12 months, without renewal on a return visit.

The controller and the provider needed for a particular function may process the relevant data. The selected production configuration uses Vercel for hosting and Cloudflare for the domain's DNS. Google receives analytics data only after GA4 has been configured and the visitor has consented. Email and phone communications pass through the providers of those services.

Where a provider processes data outside the European Economic Area, the transfer may rely on an EU adequacy decision or standard contractual clauses. The controller reviews the provider's current terms before enabling the service. Processing is not represented as EU-only.

Send a data rights request to the controller at info@targetlab.cz or call +420 776 598 301. Depending on the processing, you may ask for access, correction, erasure, restriction or a portable copy of your data.

You may object where the controller relies on a legitimate interest. Analytics consent can be withdrawn without changing the lawfulness of processing that took place beforehand.

Complaints can be made to the Czech Office for Personal Data Protection (ÚOOÚ) at uoou.gov.cz. The controller does not use automated decision-making with legal or similarly significant effects.

• —access and correction
• —erasure or restriction
• —data portability where it applies
• —objection to processing based on legitimate interests
• —withdrawal of consent for future processing

Version 1.0 takes effect on 10 August 2026. A material revision will carry a new effective date and version number on this page.

If the purpose of analytics or the categories of data involved change materially, the controller will ask for a fresh analytics choice. While analytics is configured, the existing choice can also be changed through the footer.