PRIVACY POLICY
Last updated: August 2025
Who we are
- • Controller: BASAD Studios
- • Location: Prague, Czech Republic
- • Contact: info@basadstudios.com
- • This policy applies only to our marketing website (company info, blog, contact form, email subscriptions). It does not cover our products or services, which have separate terms and privacy documentation.
What data we collect
- • Contact form: name, email, company, message
- • Email subscriptions: email address (and your consent)
- • Website analytics: non-identifying usage data (e.g., page views, referrers, general device/OS info)
- • Server logs and security data: IP address, timestamps, error logs (for security and diagnostics)
Why we process your data (lawful bases)
- • Responding to your inquiries via the contact form: legitimate interests (to reply and communicate) or steps prior to a contract if applicable
- • Email subscriptions and updates: consent (you can withdraw at any time via unsubscribe link or by emailing us)
- • Basic analytics and site security: legitimate interests (to understand site performance, detect abuse, and improve content)
- • Legal compliance: where needed to meet legal obligations
Cookies and analytics
We aim to use cookieless or privacy-friendly analytics when possible. If we introduce non-essential cookies (e.g., marketing or cookie-based analytics), we will ask for your consent via a cookie banner and provide choices. Essential cookies (if any) that are strictly necessary for the site to function do not require consent.
Data storage and transfers
- • Primary storage: EU (Supabase in EU region)
- • Service providers: hosting, analytics, email service providers, and security/logging tools may process data on our behalf under data processing agreements
- • International transfers (if any) are protected by appropriate safeguards, such as Standard Contractual Clauses and transfer risk assessments
Retention
- • Contact form messages: up to 12 months after our last interaction, unless needed longer for legitimate business or legal reasons
- • Email subscriptions: until you unsubscribe or your email bounces/inactive for a prolonged period
- • Analytics and logs: typically 90 days for operational security and diagnostics
- • Backups: typically retained for up to 30 days
Your rights (GDPR)
Access, rectification, erasure, restriction, portability, and objection. Withdraw consent at any time (for email marketing). Lodge a complaint with a supervisory authority. In the Czech Republic: Úřad pro ochranu osobních údajů (www.uoou.cz/en). To exercise rights, contact: info@basadstudios.com. We may need to verify your identity.
Children and age limitation
This website is intended for individuals aged 15+ (Czech digital consent age). We do not knowingly collect personal data from children under 15. If you believe a child under 15 has provided data, contact us to delete it.
Security
We use reasonable technical and organizational measures (encryption in transit, access controls, least-privilege) to protect personal data. No method is 100% secure, but we work to minimize risk.
Changes
We may update this policy to reflect changes to our website or legal requirements. We will post the updated version with a new effective date.