Data Protection
Effective from 17 August 2026
This document explains what personal data we process about you when operating the CraftBolt platform, why we do so, to whom we pass it on, and how long we keep it. It is written in a way that is easy to understand without the need for a lawyer.
- Data Controller
- CraftBolt s.r.o.
- Registered office
- Nové sady 988/2, Staré Brno, 602 00 Brno, Česká republika
- Company Registration Number
- 29789699
- Contact
- info@craftbolt.cz
We have not appointed a Data Protection Officer — we are not required to do so by law. Please contact us at the email address provided if you have any queries.
1. What data do we process
When you submit an enquiry or register as a supplier
- your email address and name, or company name, company registration number, registered office address and website;
- the text of your enquiry or a description of the services offered, the sector and the country you have selected;
- geographical coordinates derived from the location or address provided, so that the entry can be displayed on a map;
- for suppliers, also any files you upload — your logo, a photo of yourself, proof of authorisation or certification, and reference photographs. Uploading a photo of yourself is entirely voluntary.
Automatically upon submission of the form
- IP address and browser type. This is used to detect bulk abuse of the forms.
When you log in and use the chat feature
- a record of your login and session (when it was created, when it was last used, which browser);
- the content of messages you write in the conversation and their machine translations;
- information about when you read a message and when we last sent you a notification.
When you subscribe to the service
- customer and subscription identifiers from the payment gateway and payment status details. We do not receive your credit card number; you enter this directly with the payment gateway provider.
Record of sent emails
- for every email sent, we store the recipient’s address, message type, language, time and any delivery errors. Without this, we cannot respond to a complaint that an email has not been received.
2. Why we process this data and on what basis
| Purpose | Legal basis |
|---|---|
| Account management, publication of enquiries or profiles, logging in via a link, conversations between users, notifying suppliers of new enquiries, machine translation of content | Performance of a contract with you |
| Receipt of payment and management of subscriptions | Performance of a contract with you |
| Accounting and compliance with tax obligations | fulfilling a legal obligation |
| Service security, prevention of fraud and misuse, backup operations, and the assertion or defence of legal claims | our legitimate interest |
We do not use your data for marketing purposes and do not sell it to anyone. We do not send commercial communications about other services. Notifications of new enquiries received by suppliers are part of the subscription service — however, you can unsubscribe from them at any time via the link at the end of each such email.
3. Who we share your data with
We do not share your data with anyone other than technical service providers, without whom we would not be able to operate the platform. They process your data exclusively on our behalf and in accordance with our instructions.
| To whom | Why | Where |
|---|---|---|
| WEDOS Internet, a.s. | Operation of the server on which the platform runs and where the data is stored | Czech Republic |
| Resend | sending emails | USA |
| Stripe | payment processing and subscription management | Ireland, USA |
| DeepL SE | machine translation of texts and messages | Germany |
| OpenStreetMap Foundation | conversion of addresses to coordinates for display on a map | United Kingdom |
In addition, when a map page is displayed, the map background is loaded from CARTO; this provider will therefore be able to see your IP address. The font used on the website is hosted on our own server, so your IP address will not be passed on to its original provider. For further details, please see the information on cookies and third-party content.
Transfer outside the European Union
Some of the providers listed are based outside the EU. In such cases, the transfer is based on standard contractual clauses approved by the European Commission or, where applicable, on a decision on adequate protection. We will send you a copy of the relevant safeguards on request.
What other users will see
Published enquiries and supplier profiles are publicly accessible — they can be viewed by anyone on the internet, including search engines. The name or company name, sector, location, text and uploaded files are published. For private enquiries we publish only the municipality, not the street and house number — even if you enter the full address; you give the exact address to the supplier you choose yourself. We never publish your email address, and the other party in the conversation cannot see it either. Therefore, do not publish anything in the text or in photographs that you do not want to be publicly available.
4. How long we retain your data
| What | How long |
|---|---|
| Account and its contents | for the duration of the account; thereafter, for 3 years from the last login, unless you request deletion sooner |
| Completed enquiry or supplier profile | 12 months from closure, then deletion |
| Uploaded files | together with the record to which they belong |
| Messages in a conversation | as long as at least one party’s account exists; upon account deletion, the link to the person is removed from their messages |
| IP address and browser identifier | 12 months |
| Record of sent emails | 12 months |
| Accounting documents | for the period specified by law, usually 5 years |
| Backup copies | 30 days; any deleted data will be removed from them by this deadline at the latest |
5. Your rights
In relation to your personal data, you have the right:
- to access — to find out what data we process about you and to receive a copy;
- to rectification — to have incorrect data corrected or incomplete data supplemented;
- to erasure — to have your data erased if we no longer have a reason to process it;
- to restriction of processing — for example, whilst we are investigating your objection;
- to data portability — to receive the data you have provided to us in a machine-readable format;
- to object to processing based on our legitimate interest.
Simply email us at info@craftbolt.cz from the email address you used to register with us. We will reply within one month at the latest. We do not charge for processing your request, unless it is manifestly unfounded or repetitive.
If you think we are handling your data incorrectly, please let us know first — most issues can be resolved by email. However, you also have the right to contact the supervisory authority directly: the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
6. Automated decision-making
A new enquiry is automatically sent to suppliers whose sector and country match the criteria. This is simply a comparison of what both parties have selected — it has no legal effect on anyone and does not assess anyone. We do not carry out any other automated decision-making or profiling.
7. Children
The service is not intended for persons under the age of 18, and we do not knowingly collect data from them.
8. Changes to this document
We may amend this document if the way in which we operate the service changes. We will notify registered users of any significant changes by email. The effective date of the current version is stated at the top.
This document is drawn up in Czech and translated into other languages. In the event of any discrepancy between the language versions, the Czech version shall prevail.
Other language: Čeština · Polski · Slovenčina · Deutsch · English · Français · Español · Українська