Privacy Policy
We keep data collection minimal and transparent. Below we explain what we collect, why we collect it and how you can control it.
Who we are
- Controller: Thirteen Six s.r.o.
- Company ID: IČO: 23742704
- Registered address: Praha 5 – Smíchov, Czech Republic
- Registered with: Obchodní rejstřík vedený u Městského soudu v Praze (Commercial Register, Municipal Court in Prague)
- Country: Czech Republic
- Contact: info@13m60.com
- If anything above is updated (address or legal details), we’ll reflect it here.
Quick summary
Minimal data
We only collect what is necessary to run the site and reply to you.
Essential cookies
No tracking by default. Only strictly necessary cookies.
Hosting & security
Modern hosting and TLS. Access to personal data is restricted.
EU rights
GDPR rights apply: access, erase, restrict, object, portability.
What data we collect
Website usage: standard technical logs (IP, user-agent, pages, timestamps) for security and reliability.
Contact form & email: your name, email, message, and time/technical metadata. Optional marketing consent if you choose it.
Careers: if you apply via email, we process CV details you provide for recruitment.
We do not profile visitors and do not sell personal data.
Legal basis (GDPR)
- Legitimate interests — running a secure site and responding to enquiries.
- Contract — pre-contractual communication and service provision.
- Consent — where required (e.g. optional marketing).
Retention
- Server logs: typically up to 90 days unless needed longer for security/incident review.
- Contact inquiries: up to 12 months after last interaction, or longer where legally required.
- Marketing data: until consent is withdrawn or 24 months of inactivity.
Your rights
- Access, rectification, erasure, restriction, portability, objection.
- Withdraw consent at any time (where processing is based on consent).
- Complain to the supervisory authority — in CZ: ÚOOÚ (Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz).
Processors & third-party services
We use reputable providers with appropriate safeguards. This may include:
- Website hosting & CDN (e.g. Vercel or equivalent, primarily EU/EEA infrastructure where available).
- Email & collaboration (Google Ireland Ltd. — processor for Google Workspace), including storage of contact requests in Google Sheets.
- Map or media embeds where used (e.g. Google Maps).
reCAPTCHA: This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Google may act as an independent controller for security/anti-abuse purposes.
We have Data Processing Agreements (DPAs) in place where required. A full list of processors is available upon request.
Security
We apply reasonable technical and organisational measures: TLS encryption, least-privilege access, monitoring and backups. No method is 100% secure, but we strive to protect your data.
International transfers
If data is processed outside the EEA, we rely on appropriate safeguards such as EU Standard Contractual Clauses (SCCs) and additional measures where applicable.
Changes to this policy
We may update this document to reflect changes in our practices. The latest version is always available on this page.
Last updated: 3 November 2025
Policy version: 1.0
Contact
For privacy requests, email us at info@13m60.com. We will respond as soon as reasonably possible.