Controller
Brown Rock Investments s.r.o., Americká 362/11, 120 00 Praha 2 – Vinohrady, Czech Republic. IČO 22269045. Email: hello@brownrock.com. Brownrock is the controller for personal data collected through this website.
Data you provide
- Contact enquiries: name, email address and message content.
- Newsletter subscriptions: email address.
- B2B enquiries: company and contact details, telephone and country.
Data collected automatically
- Server logs such as IP address, browser, operating system, pages visited and access time.
- Cookie choices described in the Cookie Policy.
- Website analytics only where configured and subject to consent.
Legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Contact and enquiries | Name, email, message | Legitimate interest / contractual necessity |
| Newsletter | Consent | |
| B2B partner management | Business contact data | Legitimate interest / contract |
| Analytics | Usage data | Consent |
| Security | IP address and logs | Legitimate interest |
Service providers
Brownrock uses the following providers to run this website and handle enquiries: Netlify (website hosting), Cloudflare (domain and network security), Google Workspace (email), Resend (transactional email), and Airtable (business records). Where these providers process data outside the European Economic Area (EEA), transfers are covered by the European Commission's Standard Contractual Clauses (SCCs) or an adequacy decision.
Retention
- Contact enquiries: two years from the last contact.
- Newsletter: until unsubscribed.
- B2B partner records: business relationship plus applicable legal retention.
- Server logs: 30 days.
- Analytics data: up to 13 months where analytics is enabled with consent.
Your GDPR rights
To exercise these rights, contact hello@brownrock.com. You may also complain to the Czech supervisory authority, Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7 — www.uoou.cz.
- Access, rectification and erasure.
- Restriction and portability.
- Objection to processing based on legitimate interests.
- Withdrawal of consent at any time where consent is the legal basis.
Security and changes
Brownrock applies appropriate technical and organisational measures to protect personal data. This policy may be updated; significant changes will be published here with a revised date.