Legal
Privacy Policy
Effective date: 27 June 2026
1. Controller
The controller responsible for the processing of personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR is:
Todor Social, Böttcherstraße 28c, 87687 Oberhausen, Germany. Phone: +49 157 78530941. Represented by Pavel Horacek.
2. Personal data we process
- Identification & contact data: name, email, company, phone number.
- Content of messages you send via the contact form.
- Billing data and transaction records for clients.
- Technical data automatically collected when you visit the site: IP address, browser and device information, pages viewed, referrer, timestamps.
3. Purposes & legal bases
- Responding to enquiries — Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) (legitimate interest in handling business communication).
- Performing service contracts — Art. 6(1)(b) GDPR.
- Accounting & tax obligations — Art. 6(1)(c) GDPR.
- Site security & basic analytics — Art. 6(1)(f) GDPR.
- Optional analytics / marketing cookies — Art. 6(1)(a) GDPR (your consent, withdrawable at any time).
4. Recipients & processors
We share personal data only with carefully selected processors bound by data-processing agreements (Art. 28 GDPR), for example hosting, email and analytics providers. Data may be processed by advertising platforms (Google, Meta, TikTok, LinkedIn, X) where you engage us to manage campaigns on your behalf.
5. International transfers
Some processors are located outside the EEA/UK (e.g. in the USA). Transfers take place under the EU Standard Contractual Clauses, the UK International Data Transfer Addendum and — where applicable — the EU–US and UK–US Data Privacy Framework.
6. Retention
Contact-form messages are kept for up to 24 months. Client and billing records are retained for up to 10 years to comply with German commercial and tax law (§ 147 AO, § 257 HGB). Server logs are deleted after 30 days.
7. Your rights
Under the GDPR / UK GDPR you have the right to:
- Access your data (Art. 15) and obtain a copy.
- Rectify inaccurate data (Art. 16).
- Erase your data (Art. 17) where conditions are met.
- Restrict or object to processing (Art. 18, 21).
- Data portability (Art. 20).
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with a supervisory authority — in Germany, the Bavarian Data Protection Authority (BayLDA); in the UK, the Information Commissioner's Office (ICO).
8. Cookies
Details on cookies and similar technologies are described in our separate Cookie Policy. You can manage your consent at any time via the cookie banner.
9. Contact
For any privacy enquiry or to exercise your rights, contact us at: Todor Social, Böttcherstraße 28c, 87687 Oberhausen, Germany. Phone: +49 157 78530941.
Company details
- Todor Social
- Böttcherstraße 28c, 87687 Oberhausen, Germany
- Phone: +49 157 78530941
- Email: contact@todor.social
- Website: PavelHoracek.pro
- Representative: Pavel Horacek
