Effective from: 19 February 2026 | Data controller: Alchemy s.r.o.
1. Who we are and who processes your personal data
The controller of your personal data is Alchemy s.r.o., Na baště sv. Tomáše 229/9, Prague 1 – Hradčany, 118 00, Czech Republic, Company ID: 23256281, registered at the Municipal Court in Prague under file C 423955. If you have any questions, you can contact us at g@geou.uk.
2. What personal data we process and why
| Category of data | Purpose of processing | Legal basis |
|---|---|---|
| Name, surname, e-mail, telephone | Responding to an enquiry / concluding a contract | Performance of a contract – Art. 6(1)(b) GDPR |
| Billing and company details | Accounting, tax obligations | Legal obligation – Art. 6(1)(c) GDPR |
| E-mail and telephone communication | Provision of the agreed service | Performance of a contract / legitimate interest |
| IP address, cookies, website behaviour | Website security, analytics | Legitimate interest / consent – Art. 6(1)(a) |
| Documents for Companies House / HMRC | Statutory obligations in the UK | Legal obligation – UK GDPR + DPA 2018 |
3. Who we share your data with
- Companies House (UK) – mandatory disclosure under the UK Companies Act 2006
- HMRC – tax obligations in the United Kingdom
- IAB – AML (anti-money laundering) supervision
- Accounting software and cloud storage – processors in the EU or with adequate safeguards (SCC)
- The Czech Office for Personal Data Protection (ÚOOÚ) – supervisory authority for the Czech Republic
We do not sell your personal data to third parties, nor do we pass it on for marketing purposes without your explicit consent.
4. How long we keep your data
- Contractual documentation and accounting records: 10 years (legal obligation and legitimate interest depending on the nature of the service)
- AML records (identity verification – ACSP): 5 years from the end of the relationship (UK Money Laundering Regulations 2017)
- E-mail correspondence: for the duration of the contractual relationship + 3 years
- Analytics cookies: max. 13 months
- Enquiries without a concluded contract: 1 year
5. Your rights (GDPR / UK GDPR)
- Access to your personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16)
- Erasure – the right to be forgotten (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing (Art. 21)
- Withdrawal of consent at any time
- Complaints to the ÚOOÚ or the ICO
Please send requests to g@geou.uk. We will respond within 30 days.
6. Cookies and tracking technologies
This website uses cookies in accordance with Czech Act No. 127/2005 Coll. and the UK PECR (Privacy and Electronic Communications Regulations).
| Type of cookie | Purpose | Consent |
|---|---|---|
| Essential (session, security) | Operation of the website | Not required |
| Analytics | Visitor statistics | Required |
| Preference | Saving your preferences | Required |
You can manage cookies in your browser settings or at aboutcookies.org.
7. Data security
We use transport encryption (HTTPS/TLS), access control and regular training. The website is operated in line with UK Cyber Essentials principles.
8. Cross-border transfers of personal data
Some personal data may be transferred to the United Kingdom in the course of providing our services, where this is necessary to meet obligations towards Companies House, HMRC or other related institutions. Any such transfer is carried out in accordance with the applicable data protection rules.
9. Supervisory authorities
If you have questions or wish to lodge a complaint, you can contact the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz, or the UK ICO.
10. Data protection contact
E-mail: g@geou.uk
Address: Alchemy s.r.o., Na baště sv. Tomáše 229/9, Prague 1, 118 00, Czech Republic
Updates: This policy may be updated from time to time. Date of last update: 19 February 2026.