Privacy Policy

1. Data controller

Nay-Tech s.r.o., Company ID (IČO) 06390331, Úzká 205/11, 500 03 Hradec Králové (FIXERS). Data protection contact: servis@fixers.cz, phone 731 555 556.

2. What data we collect and why

• Processing repairs and warranty claims (performance of a contract): name, e-mail, phone number, pickup address, company name and Company ID (IČO), device details (model, IMEI/serial number, fault description), repair order history.
• Proof of consent (legitimate interest, legal obligation): the wording of your consent to the price, a price increase, extended diagnostics or a change of details, the time and method of giving consent, your IP address and browser identification.
• Invoicing and accounting (legal obligation): billing details and payments.
• Customer account (performance of a contract): login e-mail, saved devices and notification settings.
• Chat and messages (performance of a contract and legitimate interest – replying to your enquiry): when you write to us via the chat on our website, Messenger (the FIXERS.cz and Fixers MSP Facebook pages), Instagram (fixers.cz, fixersmsp) or WhatsApp (731 555 556), we store the content of the messages and attachments (photos, videos, voice messages), the time, the name from your profile in the app concerned, your phone number in the case of WhatsApp, and technical conversation identifiers from Meta. Messages can only be seen in our administration system by the staff who reply to you; we may link the conversation to your account and repair orders.
• Marketing communications (consent): tips and offers by e-mail only if you have agreed to receive them. You can withdraw your consent at any time.

3. How long we keep it

• Data on repair orders and consents for the duration of the warranty and limitation periods, for no longer than 4 years from completion of the repair order.
• Accounting records: 10 years, as required by law.
• Conversations from the chat, Messenger, Instagram and WhatsApp are kept in the same way as repair order data, for no longer than 4 years from the last message; we will delete them sooner on request (see Deleting your account and data).
• Data for marketing communications until you withdraw your consent.

4. Who we share data with

Only with processors who help us provide the service, and only to the extent necessary:

• the iDoklad accounting system (invoicing),
• website and database hosting (Vercel, Supabase – servers in the EU), e-mail and internal communication (Microsoft 365),
• carriers (PPL, Zásilkovna) for pickup and delivery,
• Meta Platforms Ireland Limited (Messenger, Instagram) and WhatsApp Ireland Limited – only if you write to us via their app; they transmit and process messages in accordance with their own policies (Meta may transfer data to the USA under the EU–US Data Privacy Framework),
• website analytics and ad performance measurement (Microsoft Clarity – Microsoft Ireland Operations Ltd.; Google Analytics and Google Ads – Google Ireland Limited; Sklik – Seznam.cz, a.s.; Meta Pixel – Meta Platforms Ireland Limited), see section 6.

We do not sell your data or pass it on to third parties for marketing purposes.

5. Your rights

You have the right to access your data and to have it corrected or erased (unless we are required by law to keep it), as well as the right to restrict processing, the right to data portability and the right to object. Just write to servis@fixers.cz. You can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).

6. Cookies and website analytics

We always use strictly necessary cookies (signing in to your account, discount codes, saving your cookie choice). We only use other cookies with your consent: either by clicking “I agree” in the banner (all cookies), or separately for analytics and marketing cookies in the “Settings” window. We can only show our ads on Facebook and Instagram (Meta) to website visitors if you consent to marketing cookies (see below). We do not use any other personalised advertising or remarketing.

To help us improve the website, we use Microsoft Clarity to measure how visitors move around it (clicks, scrolling, pages viewed, device and browser type). Without your consent, we measure only in a limited mode: without cookies and without linking individual pages and visits. If you allow analytics cookies, Clarity will use analytics cookies (valid for up to 1 year) and link visits together. Form content and information on the account, order and order status pages are hidden in the recordings. The data is processed by Microsoft (which may transfer it to the USA under the EU–US Data Privacy Framework). Visit recordings are kept for 30 days and aggregate data (heatmaps) for a maximum of 9 months.

We also measure website traffic (number of visits, pages viewed, where visits came from, device and browser type, approximate city-level location derived from the IP address, which Google Analytics does not store) using Google Analytics. Without your consent, Google Analytics stores no cookies and receives only anonymous signals that cannot be used to link individual visits. If you allow analytics cookies, it will use them (valid for up to 2 years). The data is processed by Google Ireland Limited (which may transfer it to the USA under the EU–US Data Privacy Framework) and is kept for 14 months. We do not use it to personalise ads.

If you come to the website from an ad in Google Search, we use Google Ads to measure whether the ad led to an order being submitted (a conversion). Google receives the ad click identifier, the order number (to remove duplicates) and the time – not your name, e-mail or phone number. If you allow marketing cookies, Google will use advertising cookies for this measurement (valid for up to 90 days). Without your consent, it receives only an anonymous, cookieless signal from which it estimates the number of conversions statistically. The data is processed by Google Ireland Limited (which may transfer it to the USA under the EU–US Data Privacy Framework). The measurement is used only to evaluate and manage our advertising – we do not use it to build advertising audiences or to target ads at you.

Google ads may lead to our landing page fxrs.cz, from which you continue to fixers.cz. So that the measurement is not interrupted, the ad click identifier (and the campaign label) is passed on in the link address when you move between the sites. It also remains in the address as you browse this website – without cookie consent, it is kept only in the address and nothing is stored in your browser. The landing page has the same consent bar and the same rules as this website.

Similarly, for ads in Seznam.cz search, we use Sklik (Seznam.cz, a.s., Radlická 3294/10, Praha 5) to measure whether an ad led to an order being submitted. Seznam's measurement code is loaded on the website pages so that a conversion can be matched to an ad click; Seznam receives the click identifier, the page address and the time – not your name, e-mail or phone number. Seznam uses browser identifiers (cookies) only if you consent to marketing cookies; without consent, we inform it that consent has not been given. The data is processed by Seznam.cz within the EU. We do not use it to create retargeting lists or any other targeted advertising.

For ads on Facebook and Instagram, we use Meta Pixel and the Conversions API (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland) – only if you allow marketing cookies; without your consent, Meta's code is not loaded at all and Meta receives nothing from us. With your consent, Meta receives information about the website pages you view (including the device model on the repair price list), browser identifiers (the _fbp and _fbc cookies, valid for up to 90 days), your IP address and browser type and, after you submit an order, its number and your e-mail and phone number in irreversibly encrypted form (a SHA-256 hash), so that the order can be matched to an ad. This is used to evaluate our advertising and to allow us to show FIXERS ads on Facebook and Instagram to people who have visited our website. We are responsible for this processing jointly with Meta (joint controllers); Meta may transfer the data to the USA under the EU–US Data Privacy Framework. Meta processes the data in accordance with its policy at facebook.com/privacy/policy. You can withdraw your consent at any time in “Cookie settings” (by turning off marketing cookies).

Where you came to our website from. So that we know which ads and links actually bring us repair orders, when you arrive on the website we record where you came from: the campaign tag in the link address (UTM), the referring website (its domain only, e.g. google.com), the landing page and the ad click identifier (Google Ads, Sklik, Meta, Microsoft). During your visit, this data is stored only in your browser (session storage, which is cleared when you close the tab). If you consent to analytics cookies, we also store it in our own cookie fx_attr for 90 days, so that the source is still counted even if you complete your order on a later visit; if you withdraw your consent, we delete the cookie. The data is not passed on to anyone. When you submit an order, we save it with the order together with your answer to the question “How did you hear about us?” and use it only for aggregate evaluation of our advertising.

You can change your choice at any time via the “Cookie settings” link in the website footer.