Privacy policy
This is an English translation for information. The legally binding version is the German Datenschutzerklärung.
1. Privacy at a glance
Protecting your personal data matters to us. This website is deliberately lean:
- No cookies and no tracking – we use no analytics or advertising services.
- Fonts are served from our own server; there is no connection to Google.
- No embedded third-party content (no maps, videos or social media plug-ins). Links to WhatsApp only become active when you click them.
- We only process personal data when you contact us yourself – by phone, email, WhatsApp or via the enquiry form.
2. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
SoBa Group s.r.o.Jamartice 87
795 01 Rýmařov
Czech Republic
Phone: +49 171 817 45 91
Email: info@sobagroup.eu
Represented by: Lukáš Sobkuliak. We have not appointed a data protection officer as we are not legally required to do so. For any privacy questions please contact us at the email address above.
3. Hosting and server log files
This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit the site, technically necessary data sent automatically by your browser is processed: IP address, date and time of access, page requested, referrer URL, browser type and operating system. This data is needed to deliver the website and keep it secure (e.g. to fend off attacks) and is not combined with other data.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing a secure and stable website). A data processing agreement with Cloudflare is in place (Art. 28 GDPR). Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework (EU Commission adequacy decision, Art. 45 GDPR).
4. Contacting us
Phone and email
If you call or email us, we process your details (e.g. name, phone number, email address, project location, content of your enquiry) to answer your enquiry and, where applicable, to prepare a quote. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Our emails are processed via Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin, Ireland).
Enquiry form
The enquiry form does not store or send any data via our server. Your entries are simply put together into a message in your browser and – depending on your choice – opened in your WhatsApp app or email program. We only receive them once you send the message there yourself. Only your name and one way to reach you (phone or email) are required.
You can contact us via WhatsApp. The links on this website are plain links to wa.me – simply visiting the site sends no data to WhatsApp. If you message us via WhatsApp, the privacy policy of WhatsApp Ireland Limited (Merrion Road, Dublin 4, Ireland) also applies; WhatsApp receives, among other things, your phone number and metadata, and data may be transferred to the USA. We use the messages solely to handle your enquiry (Art. 6(1)(b) and (f) GDPR). If you prefer not to use WhatsApp, please call or email us.
Retention
We delete enquiries once they have been dealt with, unless statutory retention obligations (e.g. under commercial or tax law if a contract is concluded) apply.
5. Your rights
Within the statutory framework you have the right at any time to
- access the data stored about you (Art. 15 GDPR),
- rectification (Art. 16) and erasure (Art. 17),
- restriction of processing (Art. 18),
- data portability (Art. 20),
- withdraw any consent given, with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
Right to lodge a complaint: you may complain to a data protection supervisory authority, in particular in the member state of your residence – in North Rhine-Westphalia the State Commissioner for Data Protection and Freedom of Information NRW (ldi.nrw.de). As our company is based in the Czech Republic, the lead authority is the Úřad pro ochranu osobních údajů (uoou.gov.cz).
6. SSL/TLS encryption
For security reasons this site uses SSL/TLS encryption, recognisable by “https://” in your browser’s address bar.
7. No automated decision-making
No automated decision-making, including profiling (Art. 22 GDPR), takes place.
Last updated: October 2026

