Privacy Policy

Last updated: 13 August 2026

This Privacy Policy explains how PSP Technologies s.r.o., Company ID: 38825242, with its registered office at Krakovska 1256/24, 110 00 Prague 1, Czechia ("we", "us"), processes your personal data when you use the website psp-tech.com (the "Website"). We act as the data controller within the meaning of the EU General Data Protection Regulation (GDPR).

What data we collect and why

Contact form. When you submit our contact form, we collect your name, company name, e-mail address, phone number, and the contents of your message (including the industry and area of interest you select). We use this data solely to respond to your inquiry and to communicate with you about it.

One-pager request. If you tick the "Send me the PSP one-pager" checkbox, we use your e-mail address to send you the requested PDF document.

Technical data. Our contact form is protected by Cloudflare Turnstile, which processes technical data such as your IP address to distinguish humans from automated bots. We do not use this data for any other purpose. The Website does not use analytics or marketing tools and does not track your behaviour — see our Cookie Policy for details.

Legal basis for processing

We process your personal data on the following grounds:

• Responding to your inquiry and sending requested materials — the processing is necessary to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR);
• Protecting the Website against spam and abuse — our legitimate interest in keeping the Website secure (Article 6(1)(f) GDPR).

Providing your data is voluntary; however, without it we cannot respond to your inquiry. We do not use your data for automated decision-making or profiling, and we do not send unsolicited marketing communications.

Who we share data with

We do not sell your personal data or share it with third parties for their own purposes. We use the following service providers (data processors), who process data only on our instructions:

• Webflow, Inc. (USA) — website hosting and processing of form submissions;
• Cloudflare, Inc. (USA) — spam protection of the contact form (Turnstile).

International data transfers

Both providers listed above are based in the United States. Transfers of personal data to them are safeguarded by their certification under the EU–U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of data protection.

How long we keep your data

We keep inquiries submitted through the contact form, including related correspondence, for 3 years from our last communication with you, unless a longer retention period is required by law or needed to establish, exercise, or defend legal claims. After that, the data is deleted.

Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict processing in certain circumstances;
• data portability — receive your data in a structured, machine-readable format;
• object to processing based on our legitimate interests.

To exercise any of these rights, contact us at hello@plasmapeening.com. We will respond within one month.

You also have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czechia, www.uoou.gov.cz.

Changes to this policy

We may update this Privacy Policy from time to time — for example, if we introduce new features or services on the Website. The current version will always be published on this page, with the date of the last update shown above.

Contact

If you have any questions about this Privacy Policy or how we handle your data, contact us at hello@plasmapeening.com.

‍