Privacy Policy

What data we process

• Product launch waitlist: e-mail, language, date and the technical context of consent (IP and time as proof of consent).
• B2B access request: name, company, company number, e-mail, phone, enquiry note.
• Partner account: sign-in e-mail, name, company and billing details, history of enquiries and price list access.
• Enquiries and orders: enquiry content, prices, correspondence and, once sales start, billing and delivery address and payment details.
• Dosing calculator and public catalogue: used without signing in and without storing personal data.
• Operational records: error and security logs, records of price list unlock attempts (abuse protection).

Purposes and legal bases

We never rely on legitimate interest for analytics or marketing cookies — in the Czech Republic these require explicit consent, which we ask for before any such script loads.

• Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR): partner account, enquiries, price lists, orders and documents.
• Consent (Art. 6(1)(a) GDPR): product launch waitlist and non-essential cookies. Consent can be withdrawn at any time.
• Legitimate interest (Art. 6(1)(f) GDPR): site security, price list abuse protection, error logs.
• Legal obligation (Art. 6(1)(c) GDPR): accounting and tax documents.

Who receives the data

Every processor is bound by a data processing agreement. We do not sell personal data and do not share it for third-party marketing.

• Hosting and application infrastructure provider.
• Database, authentication and e-mail delivery provider (transactional e-mail from the appera.pro domain).
• Google Ireland Ltd. — Google Analytics and Google Tag Manager, only with analytics consent.
• Meta Platforms Ireland Ltd. — Meta pixel, only with marketing consent.
• Once sales start: payment provider, carriers (PPL, Toptrans) and our accountants.

Transfers outside the European Union

Data is processed primarily within the European Union. Where a transfer to a third country occurs, typically with tools from US-based groups, it relies on the European Commission's Standard Contractual Clauses or an adequacy decision, together with additional technical safeguards.

Retention

These are our defaults; tell us if your practice needs different periods.

• Waitlist: until consent is withdrawn, at most 3 years after the last interaction.
• B2B access requests and enquiries: 3 years after the last correspondence.
• Partner account: for the life of the account; enquiries are anonymised after closure.
• Accounting and tax documents: 10 years under Czech Act No. 563/1991 Coll.
• Operational and security logs: 12 months.
• Cookie consent record: stored in your browser for 12 months, then we ask again.

Your rights

Send your request to hejhou@overdoze.pro. We reply within one month; in complex cases we may extend this by two months and will tell you.

You may lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, https://uoou.gov.cz.

• Access to your data and a copy of it.
• Rectification of inaccurate data and completion of incomplete data.
• Erasure where no other ground for processing applies.
• Restriction of processing and objection to processing based on legitimate interest.
• Portability in a machine-readable format.
• Withdrawal of consent — via the unsubscribe link in every waitlist message, or the Cookie settings link in the footer.

Automated decision-making and AI

We do not carry out automated decision-making or profiling with legal effects for you. AI is used internally to help process supplier documents, and a human always reviews the result. Should this change, we will describe it here in advance and offer human review.

Cookies

The full list of cookies, their purpose and duration is in the separate Cookie Policy. You can change your choice at any time via the Cookie settings link in the footer.

Security

Traffic runs over encrypted connections (TLS). Access is limited by roles and permissions, the database uses row-level access rules, and passwords are stored as cryptographic hashes. Protected price list unlock attempts are rate limited.

Changes to this policy

We may update this policy when our processing or the law changes. The last update date is shown at the top; we announce material changes on the site or by e-mail.