Privacy Policy

This Privacy Policy explains how Colours of Data collects, uses, and protects personal data when you visit this website or otherwise interact with us. We are committed to processing your personal data in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Who we are

Depending on where you are and how you interact with us, the data controller is one of the following Colours of Data entities:

• Prague: Colours of Data s.r.o., River Garden Office, 7th floor, Rohanské nábřeží 17, 186 00 Praha 8, Czech Republic (IČO 06204163, DIČ CZ06204163).
• London: Colours of Data SE, 71 Shelton Street, London, WC2H 9JQ, United Kingdom.

For any privacy question you can reach us at info@coloursofdata.com. Recruitment enquiries: hr@coloursofdata.com.

2. What data we collect

We collect personal data in the following ways:

• Information you give us: when you contact us by email or through a form, or apply for a role, we process details such as your name, email address, message content, and any information contained in your CV or application.
• Information collected automatically: when you browse the site we may process technical data such as your IP address, device and browser type, pages viewed, and referring pages. This is collected through server logs and, where you consent, analytics cookies.

3. Cookies and similar technologies

Cookies are small files stored on your device. We use only a limited set of cookies, grouped by purpose:

• Strictly necessary: required for the site and our content management system to function. These include the administrator session cookie (payload-token), which is only set for signed-in administrators of the site. These cookies do not require consent.
• Analytics (optional): with your consent, we use Google Analytics 4 to understand how visitors use the site so we can improve it. These cookies are only set after you accept them.

When you first visit the site you are asked to accept or reject optional cookies. Nothing non-essential is loaded until you choose. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer. We apply Google Consent Mode, so analytics tags remain disabled until you consent.

4. How we use your data and legal bases

We process personal data for the following purposes and legal bases under GDPR:

• Responding to enquiries and providing our services — legitimate interest, or steps taken at your request prior to entering a contract.
• Recruitment — your consent. Where you are not selected, we may keep your details to contact you about future suitable roles for up to 2 years, unless you withdraw consent earlier.
• Measuring and improving the website — your consent (analytics cookies).
• Security and preventing misuse — legitimate interest in keeping the site and its data secure.

5. Sharing and processors

We do not sell your personal data. We share it only with service providers who process it on our behalf under appropriate agreements, including:

• Google (Firebase App Hosting and Google Cloud) — website hosting, database, and media storage.
• Google (Google Analytics) — website analytics, only where you have consented.

You can read more about how Google handles data in the Google Privacy Policy.

6. International transfers

Some of our providers may process data outside the European Economic Area or the United Kingdom. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses to protect your data.

7. Data retention

We keep personal data only for as long as necessary for the purposes described above or as required by law. Recruitment data held on the basis of consent is kept for up to 2 years after consent is given, or until you withdraw it. Analytics data is retained according to our Google Analytics configuration.

8. Your rights

Subject to applicable law, you have the right to:

• request information about, and access to, the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data, or restriction of its processing;
• object to processing based on our legitimate interests;
• obtain your data in a portable format (data portability);
• withdraw consent at any time, without affecting processing carried out before withdrawal;
• lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at info@coloursofdata.com. You may also complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) or, in the UK, the Information Commissioner’s Office (ICO).

9. How we protect your data

Personal data stored in electronic and paper form is protected by appropriate technical and organisational measures, including access controls and passwords, physical security, malware protection, and regular backups.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised “Last updated” date.