Personal data processing notice
1. Controller and contact
Nextgen Digital s.r.o., Company ID 21348944, registered office at Čechova 3426/24, 430 01 Chomutov, Czech Republic, operates the symfon.io brand. For privacy requests, contact zaneta@symfon.io.
2. Enquiries and appointments
We keep enquiries in email only and do not use a CRM. When you email us or book a call, we process the identity and contact information you provide, your correspondence and appointment details. These are used to respond, arrange the consultation and discuss potential services.
For individuals contracting in their own name, the basis is taking pre-contractual steps at their request or performing a contract. For company contact persons, the basis is our legitimate interest in handling business communications. Records required by law are processed to meet the relevant legal obligation.
Providing contact details is voluntary, but without them we may be unable to reply or arrange an appointment. Please do not include sensitive information or internal business documents that are unnecessary for an introductory discussion.
3. Service providers and transfers
Email for symfon.io is provided by Webglobe. The website is hosted on Railway, with domain services provided by Cloudflare. Booking opens in Google Calendar. Providers may process the data required to deliver messages, arrange appointments or operate their service.
Google and Railway operate internationally and their services may involve processing outside the European Economic Area. See the Google Privacy Policy and Railway Data Processing Addendum for their terms and safeguards. Contact us for information about the arrangements and relevant safeguards applicable to specific processing.
4. How retention is determined
For email correspondence, the necessary period depends on resolving your enquiry, any resulting services and the need to establish related rights or obligations. The period can differ by the purpose and type of correspondence. Records subject to statutory retention follow the applicable legal periods. Contact us for the purpose and retention of specific correspondence, or request deletion where no legal reason requires continued retention.
5. Website, cookies and technical data
The website does not use analytics or advertising tracking. Its own code does not set cookies or use browser storage. Fonts and images are served with the website. Google Calendar only opens after you click the booking link and is subject to that service's rules.
To deliver a page, the hosting service processes request data such as the IP address, time and requested address. The purpose is operation and protection of the website, based on the legitimate interest in its availability and security. The application does not maintain a visitor database. Any hosting provider operational logs follow its service retention rules, separately from enquiry emails.
AI Integration Check evaluates answers within the open page without sending or storing them. Reloading clears the answers.
6. Your rights
Subject to GDPR conditions, you may request access, correction, deletion, restriction and, where applicable, portability. You may object to processing based on legitimate interests. Send requests to the controller's contact email. You can also complain to the Czech Office for Personal Data Protection.
The orientation result in AI Integration Check has no legal effect and is not an automated decision about your rights.
Updated 6 October 2026. Information scope follows GDPR Article 13.