Privacy notice

Who controls your data

The controller is Jan Lanna, Czech business ID 09585133, trading as LANNA PROTECT. Registered office: Galandova 1243/23, 163 00 Praha 6 – Řepy. Questions and rights requests: info@lannaprotect.cz, +420 776 022 304.

Enquiries and arranging a service

We process your name, phone or email, description and optionally an address and submitted photographs to respond, assess the scope and arrange a service. For a person requesting a service this is pre-contractual action and subsequent contract performance (GDPR Art. 6(1)(b)). For a company or property manager’s contact person it is our legitimate interest in business communication (point (f)). We need at least one contact to respond. You can contact us without an optional photograph or analytics consent.

Photographs and pest-control records

Photos help assess findings and document a visit. Photograph the pest and affected place, not faces, personal documents or unrelated third-party property. Do not send body photographs, medical reports or other health data; we are not a health service. A signature documents handover or acknowledgement, not biometric identification. Reports, service addresses and interior photos are not public testimonials and are not sent to analytics or advertising systems.

Visits, reports and invoicing

Customer and location data, visit findings, products, instructions, related photographs and signatures support service performance, documentation and complaints. Billing and required professional records support legal obligations (GDPR Art. 6(1)(c)); defending legal claims is a legitimate interest (point (f)). Five-year report protection does not mean retaining every unsuccessful enquiry or optional photograph for five years.

Security and website operation

We use controlled private-document access and operational logs. Spam and abuse prevention is a legitimate interest (GDPR Art. 6(1)(f)). Forms may use Cloudflare Turnstile, which processes network and device information during verification. Address suggestions send the typed address fragment to RÚIAN/ČÚZK, not the whole form. You may type an address manually. Security features do not replace provider and contract review.

Analytics and advertising

Google Analytics 4 is prepared to measure public pages and successfully received enquiries. Sklik/Seznam SEM is prepared for advertising measurement and separately optional personalisation. They start only after provider setup is reviewed and you consent (GDPR Art. 6(1)(a) and device-storage rules). We do not use contacts for advertising matching or automatic marketing messages. Reject or change consent in cookie settings; withdrawal does not affect earlier lawful processing. We do not use automated decisions with legal or similarly significant effects.

Recipients and international transfers

Operation may require contracted hosting, database, private-storage and email providers, an accountant, and competent authorities where legally required. Operational providers have not yet been selected; their identities, locations and roles will be added before launch. Prepared external services are Cloudflare Turnstile, RÚIAN/ČÚZK, Google Analytics and Seznam SEM. The WhatsApp link takes you to WhatsApp/Meta under its terms; it is not an embedded widget. Before connecting services with transfers outside the EEA we must verify an applicable transfer mechanism, such as an adequacy decision or standard contractual clauses with necessary supplementary measures. We do not claim that no international transfers occur.

Retention

We keep an enquiry while handling it and related communication; if a service follows, necessary data enters customer and job records. Further retention depends on complaints, specific legal claims and applicable statutory periods. Reports have at least five-year protection in the system from the visit. Unnecessary photos and unsuccessful enquiries should not be archived without a continuing reason. Cookie choices last at most 180 days and renew when purposes or providers change. Exact operational periods, deletion, backup rotation and external retention settings will be verified before public intake; this notice does not claim that automatic deletion already operates.

Your rights

You can request access, correction, erasure or restriction, and portability where GDPR provides it. You may object to legitimate-interest processing and withdraw consent at any time. Erasure is not absolute: mandatory professional or tax records may need to remain until the legal period ends. We normally respond within one month; where GDPR allows an extension we explain why. Identity verification uses only necessary information. You may complain to the Czech Office for Personal Data Protection, www.uoou.gov.cz.

Cookie settings