Your personal data
This notice under Regulation (EU) 2016/679 (GDPR) explains how Wage services EU s.r.o. handles the personal data of visitors to its company website and people who contact it with business enquiries. The website presents the company and has no customer account, financing application form or payroll-document upload.
Processing carried out when providing payroll, financing or other customer services is outside the scope of this notice. The relevant information must be provided separately for each service.
1. Who is responsible
The controller is Wage services EU s.r.o., company ID 23118059, with its registered office at Varšavská 715/36, Vinohrady, 120 00 Praha 2, Czech Republic. The company is registered with the Municipal Court in Prague, Section C, File 421681.
For questions or requests about your personal data, write to Wage services EU s.r.o., Varšavská 715/36, Vinohrady, 120 00 Praha 2, Czech Republic.
2. The data we use and why
Delivering and protecting the website
When you load a page, the server receives technical data, including your IP address, request time, requested page address and browser information sent by your device. This processing delivers the content, helps resolve errors and protects the website against misuse. The legal basis is our legitimate interest in a working, secure website under Article 6(1)(f) GDPR.
Answering enquiries and business correspondence
If you write to us by post, we process your name, contact details, any job title and company name, and the message and attachments you provide. We use this information to reply and follow up on your request.
Please do not send payslips, health information or other sensitive documents with a general business enquiry. An appropriate way to provide documents for a specific service must first be agreed.
For general enquiries and correspondence with people acting on behalf of a legal entity, the legal basis is our legitimate interest in handling enquiries and business communications under Article 6(1)(f) GDPR. If you are an individual, including a sole trader, acting in your own name and asking us to take steps towards a contract directly with you, Article 6(1)(b) GDPR applies. It does not apply to your data merely because you act on behalf of a legal entity.
For general enquiries, providing information is voluntary; without contact details or necessary information, we may be unable to reply. If you ask to enter a contract in your own name, the relevant identification and contact details may be required for the pre-contractual steps you request; without them, we cannot proceed. Technical information needed to deliver a page is transmitted when your device connects.
Handling rights requests and legal claims
We process information in a request to exercise your data rights to meet our GDPR obligations, under Article 6(1)(c). We may also retain necessary records to establish, exercise or defend legal claims, based on our legitimate interest under Article 6(1)(f).
3. How long information is kept
We keep postal correspondence while an enquiry and its follow-up remain open. Once it is resolved, we assess whether the correspondence is still needed for an agreed next step, a legal obligation or a specific legal claim; otherwise it is removed. Records retained for a claim are limited to what is necessary for its resolution and the applicable limitation period. Records of data-rights requests are kept as necessary to demonstrate compliance, taking account of applicable statutory and limitation periods.
The hosting providers determine retention of technical service and security data according to its purpose, security needs and legal obligations, as described in the policies linked below. We do not operate a separate visitor analytics database or promise a fixed deletion period for provider-held logs.
If correspondence leads to a contractual relationship, information about the relevant service processing and retention will be provided separately.
4. Providers, recipients and international processing
Authorised people handling correspondence may access it. Postal operators deliver letters; professional advisers and public authorities may receive information where necessary for advice, legal claims or a legal obligation.
The website is hosted on OpenAI’s ChatGPT Sites, using Cloudflare infrastructure for delivery and protection. Technical requests therefore pass through these providers. Under the ChatGPT Sites terms, we are the controller of personal data collected through our site and OpenAI processes hosted data on our behalf under its Data Processing Addendum. Cloudflare processes content in transit and customer logs as a processor; it is a controller for separate network and security data described in its privacy policy.
Processing can take place outside the European Economic Area, including in the United States. OpenAI describes adequacy decisions and standard contractual clauses as its transfer mechanisms. Cloudflare describes participation in the EU–US Data Privacy Framework and standard contractual clauses where applicable. Details, provider contact routes and information about safeguards are available in OpenAI’s EU privacy policy and Cloudflare’s privacy policy. You can also write to us at the registered address for information about processing connected with this website.
5. Cookies and visitor measurement
Our website code does not use cookies, browser local storage, analytics, advertising tools, tracking pixels or embedded social-media services. It contains no online enquiry form. Hosting and security providers process technical requests as explained above and may use strictly necessary mechanisms to deliver or protect the site. Links to other websites are governed by those websites’ own notices when you follow them.
Cloudflare’s protection can set __cf_bm to distinguish automated traffic (it expires after 30 minutes of inactivity), and cf_clearance to remember a completed security check. These serve security, not advertising. Details are in Cloudflare’s cookie documentation.
6. Your rights
Subject to the GDPR's conditions, you may request access to your personal data and a copy, correction of inaccurate data, erasure or restriction of processing. Portability applies to data you provided where automated processing is based on a contract or consent.
Your right to object: you may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests. We will stop that processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or grounds for establishing, exercising or defending legal claims.
We will respond without undue delay and within one month of receiving your request. Complex or numerous requests may require a further two months; we will explain the extension and its reasons within the first month. If we have reasonable doubts about your identity, we will request only additional information necessary to verify it.
You may complain to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7, or the competent supervisory authority in the Member State of your habitual residence, workplace or the place of the alleged infringement.
7. Automated decisions and changes
This informational website itself does not use profiling or decisions based solely on automated processing that produce legal or similarly significant effects for you. If processing changes, we will update this notice and provide information needed for new processing before it begins.