Privacy and cookie policy
Effective from 4 September 2026
1. Who processes your personal data
The controller of personal data processed through this website is VIA INTERNET a.s., Company ID No. 27966500, with its registered office at Lochotínská 1108/18, 301 00 Plzeň, Czech Republic (the “Controller”).
You can contact the Controller regarding privacy at info@prefcoo.com.
2. What data we process and why
Contact form and communication
When you contact us, we process your name, company name, email address, telephone number, subject and message, depending on what you provide. We use this data to respond to your enquiry, communicate with you and take steps at your request before entering into a contract. The legal basis is the performance of pre-contractual measures and our legitimate interest in handling and documenting business communication.
We retain enquiries for no longer than 12 months after the last communication. We may retain relevant data for longer where necessary for a contract, compliance with a legal obligation or the establishment, exercise or defence of legal claims.
Technical operation and security
When you visit the website, our systems may process technical information such as your IP address, date and time of access, requested address, response status and browser or device information. This processing is necessary to operate, secure and troubleshoot the website. The legal basis is our legitimate interest in providing a reliable and secure service. Security logs are retained for no longer than 30 days unless a security incident requires longer retention.
Google reCAPTCHA Enterprise
The contact form is protected by Google reCAPTCHA Enterprise to prevent spam and misuse. For risk assessment, the service processes a security token, IP address, User-Agent, requested action and technical and interaction signals. The legal basis is our legitimate interest in protecting the website and the contact form. reCAPTCHA is used only for security purposes and not by us for advertising.
Google Analytics 4
With your consent, we use Google Analytics 4 to understand website traffic and improve its content. The service may process an online identifier, visited pages and their titles, interaction events, session information, approximate location and browser or device information. The legal basis is your consent. Google Analytics does not load and analytics data is not sent until you grant consent.
You may withdraw or grant consent at any time through the Cookie settings link in the website footer. Withdrawal does not affect the lawfulness of processing carried out before it.
User-level and event-level Analytics data is retained for no longer than 14 months. Aggregated reports that no longer allow us to single out a visitor may be retained for longer.
3. Cookies and local storage
| Technology | Purpose | Duration | Category |
|---|---|---|---|
| .AspNetCore.Culture | Stores the selected website language. | Session | Essential |
| .AspNetCore.Antiforgery.* | Protects forms against forged requests. | Session | Essential |
| prefcoo.analyticsConsent.v1 (local storage) | Stores your analytics consent preference. | 12 months | Essential |
| reCAPTCHA security storage | Detects spam and abuse on the contact form. | According to Google's service settings | Essential |
| _ga | Distinguishes visitors for Google Analytics. | Up to 2 years | Analytics |
| _ga_<container-id> | Maintains the Google Analytics session state. | Up to 2 years | Analytics |
Google Tag Manager is used to manage website tags. It does not itself set analytics cookies. Analytics cookies are created only after you consent.
4. Recipients and international transfers
Personal data may be made available only to authorised Controller personnel and to suppliers providing hosting, email, website administration and security services, solely to the extent necessary to provide those services.
Google Analytics is provided by Google Ireland Limited, and reCAPTCHA Enterprise is provided to customers in the European Economic Area by Google Cloud EMEA Limited. Their contracted processors, including Google LLC, may participate in the processing. Data may therefore be processed outside the European Economic Area. Google uses applicable transfer safeguards, including adequacy decisions and standard contractual clauses. For more information, see Google's Privacy Policy and How Google uses information from sites that use its services.
5. Your rights
Subject to the conditions of applicable law, you may request access to your personal data, its rectification or erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and may withdraw consent at any time. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic.
To exercise your rights, contact us at info@prefcoo.com. We may need to verify your identity before fulfilling your request.
6. Obligation to provide data and automated decisions
Providing contact details is voluntary, but without the required information we cannot respond to your enquiry. We do not make decisions producing legal or similarly significant effects based solely on automated processing. reCAPTCHA performs an automated security assessment solely to protect the contact form.
7. Changes to this policy
We may update this policy when our processing or legal requirements change. The current version is always published on this page.