PRIVACY POLICY

Effective Date: July 13, 2026
This Privacy Policy explains how we collect, use, and protect your personal data when you visit and use the website www.inflow.dental (hereinafter referred to as the "Website").

We process your personal data in compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable Czech data protection laws.

1. DATA CONTROLLER

The administrator of your personal data is:
Name: Yevhen Kondratenko (Independent Entrepreneur / OSVČ)
Registered Office (Sídlo): České Vrbné 2415, České Budějovice, Czech Republic
IČO: 21827761
DIČ: CZ687461375
Registry Note: Podnikatel je zapsán v živnostenském rejstříku (Registered in the Czech Trade Licensing Register).
Contact Email: office@inflow.dental



2. WHAT DATA WE COLLECT AND WHY

When you use the contact or evaluation form on our Website, we collect the following information:
Name: To address you properly in our communication.
Email Address: To send you the results of the website evaluation, respond to your inquiries, and manage our business communication.
Website URL: To perform the requested audit, analysis, or evaluation of your dental platform.

Automatically Collected Data (Analytics and Cookies):
When you browse the Website, we collect standard usage data via Google Analytics and manage tracking scripts via Google Tag Manager. This includes anonymized IP addresses, browser types, device information, and pages visited. We also use Google Search Console to monitor our website performance in search results. This data helps us understand how users interact with our Website and improve user experience.



3. LEGAL BASIS FOR PROCESSING

We process your personal data based on:
Performance of a Contract / Steps prior to entering into a contract (Art. 6(1)(b) GDPR): Processing is necessary to fulfill your request (to evaluate your website and deliver the results).
Legitimate Interest (Art. 6(1)(f) GDPR): For professional business communication and ensuring the technical stability of our Website.
Consent (Art. 6(1)(a) GDPR): Specifically for the use of analytics cookies (Google Analytics) to track and analyze website traffic, provided you have accepted them via our cookie banner.



4. DATA RETENTION PERIOD

We store your personal data only for as long as necessary to fulfill the purpose for which it was collected:
Data collected for website evaluation and communication is stored for a period of 3 years from the date of submission, unless legal obligations or potential legal claims require a longer retention period.
Analytics data gathered by Google Analytics is retained according to Google's default retention settings (typically 2 or 14 months) before being automatically deleted.

5. DATA RECIPIENTS AND THIRD PARTIES

Your data is kept strictly confidential and is never sold to third parties. To operate this Website and analyze its performance, we use the following reliable service providers:
Webflow, Inc. (Website hosting and form management platform).
Google LLC (Google Analytics, Google Tag Manager, Google Search Console) for website traffic analysis and tag management.These providers may transfer data outside the EU (e.g., to the USA). Such transfers are protected under the EU-US Data Privacy Framework or the Standard Contractual Clauses (SCCs) approved by the European Commission.

Please note: No payment processing or payment infrastructure scripts (such as Stripe) are active on this Website. If you subsequently enter into a business contract with us, your billing and payment data will be processed separately via Stripe, Inc. during the invoicing stage.

6. YOUR RIGHTS UNDER GDPR

As a data subject, you have the following rights regarding your personal data:Right of access: You can request a copy of the data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete data.
Right to erasure ("Right to be forgotten"): You can request that we delete your data.
Right to restriction of processing: You can ask us to limit how we use your data.
Right to data portability: You can request to receive your data in a structured, machine-readable format.
Right to object: You can object to data processing based on legitimate interests or withdraw your consent for analytics cookies at any time.

To exercise any of these rights, please contact us at: office@inflow.dental.

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů - www.uoou.cz).