Privacy &
Cookie Policy

1. Scope of this policy

This policy explains how we collect, use, and protect the personal data of our customers, newsletter subscribers, and website visitors. It applies to all personal data processed by Krutart s.r.o. in connection with our services, communication, and website.

2. Who we are

Krutart s.r.o., a limited liability company registered in the Czech Republic, with its registered office at Karlovo náměstí 30, 120 00 Prague 2, Czech Republic (“Krutart”, “we”, “us”), is the controller of your personal data.
Contact for privacy inquiries: privacy@krutart.cz

3. What data we collect

We may process the following categories of personal data:

Newsletter subscribers:

• Email address (and optionally name).

Quote / screener requests:

• Name, email, institution, job title, number of seats, license preferences, and any information you voluntarily provide in the form.

Customers (purchases via Stripe):

• Contact details of institutions (name, email, phone, address, billing information, VAT number),

• Film title and licensing details,

• Payment data processed securely by Stripe, Inc., our payment service provider.

Cold outreach contacts (via Lemlist):

• Name, email address, and professional role or institutional affiliation publicly available online (e.g. on institutional websites, LinkedIn, or directories).

Website visitors:

Technical data such as IP address, browser type, and cookies (via Google Analytics 4).

4. Why we collect and use your data

We process your data for the following purposes:

To send you newsletters and updates, if you have given consent.

• To respond to quote/screener requests and prepare offers (pre-contractual necessity).

• To fulfill our contractual obligations with customers, including invoicing, licensing, and film delivery.

• To process online payments securely through Stripe Checkout.

• To conduct targeted B2B outreach campaigns via Lemlist, in line with legitimate interest (see Section 11).

• To improve our website and services through analytics (legitimate interest, with cookie consent where required).

5. Legal bases for processing

• Consent: for newsletters and marketing communication.

• Contract: for responding to quote/screener requests, processing online purchases via Stripe, and fulfilling license agreements.

• Legitimate interest: for basic analytics, ensuring website functionality, and professional outreach (including Lemlist campaigns).

6. How long we keep your data

• Newsletter subscribers: until you withdraw your consent (unsubscribe).

• Quote / screener requests: for as long as necessary to process the request, and up to 12 months for follow-up.

• Customers: for the duration of the contract and as required by accounting and tax regulations.

• Stripe payment records: for the period required by accounting and anti-fraud regulations (usually 10 years).

• Cold outreach (Lemlist): contact details are stored only for the duration of the campaign and deleted when no longer relevant or upon objection.

• Analytics data: as defined by Google Analytics settings (currently up to 26 months).

7. Who we share your data with

We only share data with trusted service providers that help us operate our services:

• Stripe, Inc. – payment processor for online transactions (credit cards, Revolut Pay, Apple Pay, etc.).
  Stripe acts as an independent data controller for payment data and complies with GDPR and PCI-DSS standards.
  For more details, see Stripe Privacy Policy.

• Lemlist SAS – email automation platform used for targeted B2B outreach campaigns.
  Lemlist processes professional contact data under Krutart’s control in accordance with GDPR.
  For more details, see Lemlist Privacy Policy.

• MailerLite / Brevo – email newsletter platform.

• Pipedrive – CRM system.

• Make.com – automation platform.

• Google (Workspace, Analytics, Forms, Drive) – email, storage, and analytics.

• Vedos – web hosting provider.

• Accounting service providers – for invoicing and compliance with legal obligations.

Some of these providers (e.g. Stripe, Lemlist, Google) are based outside the European Union.
Where this is the case, data transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards ensuring GDPR-level protection.

8. Your rights

You have the right to:

• Access your personal data.
• Correct or erase your data.
• Restrict processing.
• Object to processing based on legitimate interest.
• Withdraw your consent at any time (unsubscribe link in every newsletter, or by emailing privacy@krutart.cz). Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
• File a complaint with the supervisory authority (Office for Personal Data Protection, Czech Republic).

9. Cookies

We use cookies and similar technologies to ensure the proper functioning of our website and to analyze traffic through Google Analytics 4.

• Necessary cookies: required for the website and Stripe Checkout to function properly (e.g. session, payment verification).

• Analytics cookies: help us understand how visitors use our website.

When you first visit our website, you will see a cookie banner allowing you to accept or reject non-essential cookies.
You can also adjust cookie settings in your browser at any time.

10. Contact

If you have any questions about this Privacy & Cookie Policy or wish to exercise your rights, please contact us at:
privacy@krutart.cz

11. Outreach communication (legitimate interest)

We may occasionally contact institutions (such as planetariums, science centers, museums, or similar organizations) using publicly available professional contact details (e.g. published on their websites) to introduce our films and related services.

Such outreach may be conducted manually or via automated tools such as Lemlist, based on our legitimate interest in developing relevant business relationships.
We ensure that:

• outreach emails are targeted and relevant to the professional activities of the recipient institution,

• we use only publicly available or voluntarily provided professional contact details,

• every message clearly identifies us as the sender and contains an option to object or opt out of further communication.

If you do not wish to receive such outreach communication, you may simply reply to the message or contact us at privacy@krutart.cz, and we will immediately stop contacting you.