01Who is responsible for your data
The controller of personal data in connection with operating the website and handling enquiries about Insido services is:
Vespr Advisory s.r.o.Company ID (IČO): 29616336
Nýdecká 444, Letňany, 199 00 Praha 9
Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 449252.
Email: kontakt@vespr.cz
This information concerns visitors to the Insido website, people interested in an analysis, clients and their contact persons. It also applies to Insido enquiry forms on Facebook and Instagram that link to this page. Send questions and requests concerning personal data to the controller’s email address provided above.
02What data we collect
- From the website form: name, work email, company name, intended use of the analysis, the competitors listed and any additional note.
- From Facebook and Instagram forms: the data you review and submit in the particular form, typically your name, email, company website and, where applicable, phone number and brief. We may also receive the form identifier, advertisement identifier and submission time.
- From subsequent communication and cooperation: company name, job title, contact details, the content of communications, contractual and billing details, and materials needed for the agreed service.
- When operating the website: technical data necessary to deliver the page, ensure security and resolve errors, such as an IP address, request time and browser details.
We obtain data primarily from you; your employer or colleague may also provide your work contact details when commissioning an assignment. Do not submit passwords, access keys, payment details or sensitive personal information in the forms.
03Why we use the data
| Purpose | Legal basis |
|---|---|
| Handling your enquiry, clarifying the brief and preparing an offer. | Taking steps towards a contract at your request, if you will be a party to it (Article 6(1)(b) GDPR). For company contact persons, a legitimate interest in business communications (point (f)). |
| Providing the agreed service and communicating about the assignment. | Performance of a contract (point (b)); for the client’s representatives, a legitimate interest in enabling cooperation (point (f)). |
| Accounting and compliance with statutory obligations. | Legal obligation (point (c)). |
| Documenting the course of cooperation, handling complaints and protecting legal claims. | Legitimate interest in protecting the rights of the controller and clients (point (f)). |
| Website operation, protection against misuse and resolving technical problems. | Legitimate interest in secure and reliable operation (point (f)). |
Submitting an enquiry does not subscribe you to a newsletter or give consent to unrelated advertising messages. We will contact you about your brief, an offer and any subsequent cooperation. Any separate marketing consent would be voluntary and distinct.
04Which data is required
Required fields are marked in the form. We need them to know who is contacting us, to respond and to understand the basic brief. Failure to provide them may prevent the enquiry from being submitted or handled. Optional fields may be left blank.
Providing data for a non-binding enquiry is not a statutory obligation. If we later enter into a contract, certain data will be needed to perform it and meet accounting obligations. Processing to protect rights and ensure security may also take place without your consent, on the legal bases stated above.
05How long we retain data
- Enquiries that do not lead to a contract: while they are being handled and subsequently for no more than 3 years from the last substantive communication, where there remains a need to document negotiations or protect legal claims. We delete unnecessary data sooner.
- Assignment data and ordinary correspondence: for the duration of the cooperation and generally for 3 years after it ends. In the event of an ongoing dispute or another specific legal reason, only to the extent necessary and for as long as that reason applies.
- Accounting and tax documents: for the period required by the applicable law for the relevant type of document, usually 5 or 10 years. These periods do not automatically apply to the entire contents of an enquiry.
- Technical logs: for the time necessary for operation, security checks and resolving a specific incident; visiting the website alone does not justify the long-term retention of a visitor profile.
Once the relevant period ends, we delete or anonymise the data unless further retention is required by law or necessary to protect a specific claim.
06Who may have access to the data
The controller’s authorised personnel have access to the data, as do suppliers providing hosting, data storage, email communications, systems administration and, where applicable, enquiry form integrations, to the extent necessary. The Insido website uses the OpenAI Sites platform and Cloudflare infrastructure. Data is stored in a database intended for handling enquiries.
Other recipients may include accounting, legal and tax advisers and public authorities where we are required to provide data to them. Suppliers processing data on our behalf may use it only for the agreed purpose and under appropriate contractual arrangements.
We do not sell enquiry contact details. You may request from the controller a list of recipients relevant to your specific enquiry and further information about their involvement.
07Forms on Facebook and Instagram
If you submit an enquiry directly on Facebook or Instagram, Meta Platforms Ireland Limited also initially processes the data in connection with operating those services. Meta forwards the data from the submitted form to us. From the moment we receive it, we use it for the purposes described on this page.
For its own purposes, Meta acts as a separate controller under its privacy policy. This Insido policy does not govern all processing carried out by Meta when you use your account. Always check the data pre-filled by Meta before submitting the form.
You may also send an enquiry using the form directly on the Insido website.
08Processing outside the European Economic Area
When international cloud and communication services are used, data may, depending on the particular supplier, also be processed or accessed outside the European Economic Area, especially in the USA.
Such a transfer must be covered by an appropriate mechanism under the GDPR, such as a European Commission adequacy decision applicable to the relevant recipient, or standard contractual clauses and any supplementary measures. You may request information about the specific mechanism and a copy of the safeguards used at the controller’s contact email address.
10Your rights
Subject to the conditions of the GDPR, you may request access to your data and a copy of it, correction of inaccuracies, erasure, restriction of processing or data portability. Where processing is based on a legitimate interest, you may object on grounds relating to your situation. If processing were based on consent, you could withdraw it at any time without affecting the lawfulness of prior processing.
Send your request to kontakt@vespr.cz. We may request reasonable identity verification to avoid disclosing data to an unauthorised person. We generally respond within one month; we will notify you of any statutory extension and the reason for it.
You have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7. Exercising your rights does not require you to complain to us first.
11Data in analysis materials and changes
This page primarily describes the website, enquiries and client relationships. If a specific assignment requires the processing of personal data on a client’s behalf, we will agree the necessary terms separately before the data is transferred. Describing an assignment as a competitor analysis does not, by itself, authorise access to third parties’ non-public personal data.
When forms, tools used or processing purposes change, we also update this information. New wording cannot retrospectively expand the purposes for which your data is used without an appropriate legal basis. The current version is always available on this page of the Insido website.
Need something clarified?
Contact the operator