Privacy Policy
1. Introduction
YeYe Agency s.r.o. ("YeYe Agency," "we," "us," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard information when you visit our website at yeyeagency.com (the "Website"), contact us, or use our services.
This Policy applies to personal data of:
- Visitors to the Website
- Prospective clients who contact us
- Active clients we work with
- Recipients of our marketing communications
If you do not agree with this Policy, please do not use the Website or provide us with personal information.
2. Who We Are (Data Controller)
The data controller responsible for your personal data is:
YeYe Agency s.r.o.
Rumunská 26, 120 00 Praha 2
Czech Republic
Company Registration Number (IČO): 03877558
VAT Number: CZ03877558
Contact for privacy matters: info@yeyeagency.com
Given our size and the nature of our processing, we are not legally required to appoint a Data Protection Officer (DPO). All privacy-related inquiries should be directed to the contact above.
3. Information We Collect
3.1 Information You Provide Directly
When you interact with us, you may provide:
- Identity data: full name, job title, company name, passport, National IDs, Driving Licence, criminal records
- Contact data: email address, telephone number, business address, personal or company Databox (Datová Schránka)
- Financial & Accounting Data: Company TAX IDs, Bank Account & IBANs, Bank statements, invoices, receipts, client & supplier agreements, your Debit card for online payments
- Inquiry content: messages, questions, and business requirements you describe to us
- Service data: information you share during the course of an engagement, including documents, business plans, and any third-party data necessary to deliver services to you
- Marketing preferences: subscriptions, preferences, and consent status
3.2 Information Collected Automatically
When you visit the Website, we automatically collect:
- Technical data: IP address, browser type and version, operating system, device identifiers
- Usage data: pages visited, time spent, referring URL, navigation paths, clicks
- Cookie and tracking data: see Section 8
3.3 Information from Third Parties
We may receive information about you from:
- Public business sources: company registries, chambers of commerce, professional networks (e.g., LinkedIn)
- Referrals: partners, chambers (such as the Czech-Turkish Joint Chamber of Commerce), existing clients
- Service providers: analytics and advertising platforms reporting on Website performance
4. How We Use Your Information
We process your personal data only when we have a lawful basis under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
| Purpose | Data Used | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Respond to your inquiries and provide the requested information | Identity, contact, inquiry content | Legitimate interest (Art. 6(1)(f)) — to respond to those who contact us |
| Deliver contracted services | All categories under engagement | Contract performance (Art. 6(1)(b)) |
| Send marketing communications | Identity, contact, marketing preferences | Consent (Art. 6(1)(a)) |
| Analyse Website performance and improve our offerings | Technical, usage, cookie data | Legitimate interest (Art. 6(1)(f)) and/or consent for non-essential cookies |
| Comply with legal obligations (tax, accounting, regulatory) | Identity, contact, service data | Legal obligation (Art. 6(1)(c)) |
| Protect against fraud, abuse, and security threats | Technical, usage data | Legitimate interest (Art. 6(1)(f)) |
| Process payments for one-off services | Identity, contact, payment data | Contract performance (Art. 6(1)(b)) |
You may withdraw consent for marketing or non-essential processing at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Sharing Your Information
We do not sell your personal data. We share it only as described below.
5.1 Service Providers (Processors)
We rely on selected third parties to operate our business. Each processor is bound by a Data Processing Agreement and may only process your data on our instructions.
| Processor | Function | Location |
|---|---|---|
| HighLevel Inc. | Website hosting, CRM, marketing automation | United States |
| Make.com (Celonis SE) | Workflow automation | European Union |
| Stripe Inc. | Payment processing for one-off services | United States, Ireland |
| Google LLC | Analytics (Google Analytics 4), tag management (Google Tag Manager) | United States |
| Meta Platforms Inc. | Advertising performance measurement (Meta Pixel) | United States, Ireland |
| LinkedIn Corporation | Advertising performance measurement (LinkedIn Insight Tag) | United States, Ireland |
5.2 Legal Disclosures
We may disclose personal data when required to comply with a legal obligation, court order, regulatory request, or to protect our rights, property, or safety, or those of third parties.
5.3 Business Transfers
If YeYe Agency is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. You will be notified before your information becomes subject to a different privacy policy.
6. International Data Transfers
Some of our processors are located outside the European Economic Area ("EEA"), primarily in the United States. Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:
- EU Standard Contractual Clauses approved by the European Commission
- Adequacy decisions issued by the European Commission (where applicable)
- EU-U.S. Data Privacy Framework certification of recipients (where applicable)
You may request a copy of the safeguards applicable to a specific transfer by contacting us at info@yeyeagency.com.
7. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements.
| Data Category | Retention Period |
|---|---|
| Contact inquiries (no engagement followed) | 24 months from last contact |
| Active client engagement data | Duration of engagement plus 10 years (Czech tax and accounting law) |
| Marketing communication data | Until consent is withdrawn, plus 30 days for record-keeping |
| Website analytics data | 26 months (Google Analytics 4 standard retention) |
| Payment records (one-off services via Stripe) | 10 years (Czech accounting requirements) |
| Cookies | See Section 8 |
When the retention period ends, we securely delete or anonymise the data.
8. Cookies and Tracking Technologies
The Website uses cookies and similar technologies to function correctly, analyse usage, and (with your consent) deliver advertising.
We categorise cookies as:
- Strictly necessary cookies: required for the Website to function; you cannot opt out
- Analytics cookies: help us understand how the Website is used (Google Analytics 4)
- Marketing cookies: used to measure advertising effectiveness (Meta Pixel, LinkedIn Insight Tag)
On your first visit, you will see a cookie consent banner allowing you to accept or reject non-essential cookies. You may change your preferences at any time through the cookie settings link in the Website footer.
Further detail on the specific cookies we use, their purposes, and durations is available in our Cookie Policy (separate document — to be published).
9. Your Rights Under GDPR
Subject to the conditions set out in the GDPR, you have the following rights regarding your personal data:
- Right of access — obtain a copy of your personal data and information about how we process it
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten") — request deletion under certain conditions
- Right to restriction of processing — limit how we use your data in specific situations
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent — withdraw consent for processing based on consent, at any time
- Right not to be subject to automated decision-making — including profiling that produces legal effects
To exercise any of these rights, email us at info@yeyeagency.com. We will respond within one month of receiving your request, with possible extension of two further months for complex requests.
If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Czech supervisory authority:
Úřad pro ochranu osobních údajů (UOOÚ)
Pplk. Sochora 27, 170 00 Praha 7, Czech Republic
www.uoou.cz
10. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or destruction. These include encryption in transit (HTTPS), access controls, secure cloud infrastructure with our processors, and staff confidentiality obligations.
No security measure is perfect. If you believe your data has been compromised, please notify us immediately at info@yeyeagency.com.
11. Children's Privacy
Our Website and services are directed exclusively at businesses and professionals. We do not knowingly collect personal data from individuals under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this Policy indicates when the most recent revision took effect. Material changes will be communicated through the Website and, where appropriate, by email.
We encourage you to review this Policy periodically.
13. Contact Us
For questions, requests, or concerns about this Privacy Policy or our handling of your personal data:
YeYe Agency s.r.o.
Rumunská 26, 120 00 Praha 2, Czech Republic
Email: info@yeyeagency.com
This Privacy Policy is governed by the laws of the Czech Republic and the European Union.