Legal
Privacy Policy
Version 1.0 · effective 4 August 2026 · applies to prosewealth.com
This document contains placeholders and has not yet been reviewed by a lawyer or data-protection specialist. It must be completed and reviewed before public launch.
1. Who is responsible for your data
The data controller for this website is ProseWealth [legal form, registration number and registered address to be completed]. For any privacy matter, contact us at kubicaradek@gmail.com.
2. What this notice covers
This notice covers the marketing website prosewealth.com, including the private-demo request form. It does not cover the ProseWealth platform itself, which is governed by the agreements concluded with each client.
3. What data we process
- Demo request data — first name, surname, email address, mobile number,
the page the request was sent from and, if you arrived through a campaign link, the campaign
tags of your visit (for example
utm_source). You provide these details yourself. - Technical and security data — our hosting provider processes standard connection data (such as IP address and browser information) to deliver the site securely. The demo endpoint uses the IP address transiently to limit abusive request floods.
- Analytics data — only if you consent, Google Analytics 4 processes pseudonymous usage data (pages viewed, interactions such as opening the demo form, device and approximate location derived from IP). We never send names, email addresses, phone numbers or form contents to analytics.
4. Why we process it, and on what legal basis
- Answering your demo request — Article 6(1)(b) GDPR (steps prior to entering into a contract, at your request).
- Campaign attribution of your request — Article 6(1)(f) GDPR (our legitimate interest in knowing which of our campaigns work). The tags are kept for your browser session only and attached solely to a request you choose to submit.
- Site security and abuse prevention — Article 6(1)(f) GDPR (legitimate interest in operating a secure website).
- Analytics — Article 6(1)(a) GDPR (your consent, given via the cookie banner). You can withdraw it at any time; see section 8.
5. Who receives the data
- Cloudflare, Inc. — hosts this website and delivers demo-request emails (Cloudflare Workers and Email Sending).
- Google — provides Google Tag Manager and Google Analytics 4, which operate only after you consent to analytics.
- [Any CRM, scheduling or marketing tool added later must be listed here before it is used.]
These providers act as processors or independent controllers under their own terms. [The specific Google and Cloudflare contractual terms and data-processing agreements used by the operator must be verified and referenced here.]
6. International transfers
Cloudflare and Google may process data outside the EU/EEA. Transfers rely on safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses. [Verify the actual transfer mechanism applicable to the operator's Google and Cloudflare accounts before launch.]
7. How long we keep data
- Demo request emails — until the request is handled and for [retention period to be defined] afterwards.
- Cookie-consent record — stored in your browser; we ask again after at most 12 months or when the consent categories change.
- Campaign tags — your browser session only.
- Google Analytics data — retained according to the property's retention setting ([2 or 14 months — operator's choice, set in GA4 admin]).
8. Your rights
Under the GDPR you can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw consent at any time — for analytics, use “Cookie settings” in the footer of any page. Withdrawal does not affect the lawfulness of processing before it.
You can also lodge a complaint with a supervisory authority — in the Czech Republic, the Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz), or the authority of your residence.
9. Is providing data mandatory?
No. Browsing the site requires no personal data from you. The demo form needs the listed contact details so we can actually arrange the demo — without them we cannot respond. Analytics consent is never required for anything, including submitting a demo request.
10. Automated decision-making
We make no automated decisions with legal or similarly significant effect about visitors to this site.
11. How the data is protected
The site is served over TLS, demo requests are delivered directly to a controlled mailbox, stored data is limited to what the purposes above require, and access is restricted to the people who handle demo requests.
12. Changes to this notice
We will update this notice when the site's data processing changes and adjust the version and effective date above. Material changes to consent-based processing will trigger a new consent request.