GDPR

Privacy Policy

The legal entity WhichWay s.r.o., with its registered office at Kaprova 42/14, Staré Město, 110 00 Prague, registered under file number C 368005/MSPH at the Municipal Court in Prague (hereinafter “WhichWay”), which operates this website, considers the protection and confidentiality of personal data to be of the utmost importance, and as the data controller, ensures that personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).

Identity and Contact Information of the Data Controller

The data controller is WhichWay s.r.o., ID No.: 17190355, with its registered office at:
Kaprova 42/14, Staré Město, 110 00 Prague. The company provides moving and related services.

WhichWay acts as the data controller primarily with respect to the personal data of authorized representatives or contact persons of customers and potential customers. This personal data is processed and stored in the customer database. Furthermore, WhichWay also acts as the data controller with respect to the personal data of its employees and business partners.

If you have any questions regarding the processing of personal data, you can contact us by email at info@stehovani-ww.cz or in writing at the company’s registered office address.

(d) Data included in communications, which include, in particular, any personal data provided by employees, statutory bodies, authorized or contact persons of business partners, customers, and potential customers in the course of their dealings with us, including any contact that has taken place between us—whether in person, by telephone, by email, or online, as well as the actual content of the communication with the relevant person (the content of email correspondence) and the scope and manner of the service provided;

(e) Data necessary to improve the quality of services, including the customer’s IP address and cookies when using the website.

We process the majority of personal data for the purpose of providing moving and related services and ensuring customer service for our clients. The provision of personal data is necessary for processing an inquiry, entering into a contract, and providing services. Without the provision of this data, it may not be possible to process the inquiry or enter into a contract. Personal data and other information within the scope described above may be processed for the purpose of communicating with the data subject via email, telephone, postal mail, or text message regarding matters related to the processing of the data subject’s order, complaint, or inquiry.

In order to ensure the safe and proper performance of the contract—for example, to verify instructions from an authorized representative of the customer—we may process identification data, contact information, and transaction data. Providing this personal data is a contractual obligation, and failure to do so would prevent us from effectively and securely fulfilling the contract with the client.

In order to offer our related services, establish, maintain, and deepen business relationships and contacts with our business partners and customers—for example, to send commercial and other non-commercial offers—we may process identification data and contact information of statutory representatives, authorized persons, or contact persons of customers. In this case, the provision of personal data is not a legal or contractual obligation, and failure to provide such data does not result in any negative consequences for the data subject.

Czech laws and regulations also require us to process personal data in certain cases. This typically involves retaining data in accordance with legal requirements (tax regulations).

We process our employees’ personal data for the purpose of fulfilling our legal obligations as an employer and managing human resources and payroll. In the case of a successful job applicant, we process the applicant’s personal data for our own purposes during the hiring process so that we can sign an employment contract with the applicant.

Legal Bases for the Processing of Personal Data

We process personal data primarily on the following legal grounds:

• performance of a contract and the implementation of measures taken prior to entering into a contract at the request of the data subject pursuant to Article 6(1)(b) of the GDPR,
• compliance with the controller’s legal obligations pursuant to Article 6(1)(c) of the GDPR,
• the controller’s legitimate interests pursuant to Article 6(1)(f) of the GDPR,
• the data subject’s consent pursuant to Article 6(1)(a) of the GDPR, if required for a specific purpose.

Ensuring the Protection of Customers’ Personal Data

We implement technical, organizational, and other necessary measures to prevent unauthorized or accidental access to personal data, as well as its alteration, destruction, or loss; unauthorized transfers; other unauthorized processing; and any other misuse of personal data.

We provide our services exclusively through individuals whose personal and professional qualities offer sufficient assurance that the conditions for the handling of personal data will be properly observed.

We have trained our employees on their obligation to maintain confidentiality regarding information obtained in the course of their work and on their obligation to protect the personal data of customers and third parties from misuse, loss, or unauthorized disclosure.

We maintain confidentiality regarding personal data and security measures, the disclosure of which would jeopardize the security of personal data, even after the contract has expired.

Transfer of Personal Data

We use personal data exclusively to provide our services; we protect it from misuse and do not disclose it to third parties without prior notice or consent. Exceptions include external entities that provide support services to us and public authorities. We may or must provide your personal data to them to the minimum extent necessary, for example:

• to comply with applicable laws or enforceable requests from government authorities,
• to enforce applicable contractual terms, including investigating potential breaches thereof,
  procedures aimed at addressing criminal offenses, technical complications, or security incidents; protecting against harm to rights, property, or the safety of employees, customers, or the public, as required or permitted by law; ensuring services and managing applications; and providing technical and IT services, as well as advisory and consulting activities.

We provide personal data to authorized processors based on our instructions. We contractually require all such service providers (excluding public authorities) to process your personal data in accordance with the terms of personal data protection as set forth in the concluded contracts and applicable legislation. We always ensure that we do not provide more data than is necessary to achieve the specific purpose of the processing.

As a general rule, we do not transfer personal data to third countries outside the European Union. If such a transfer were to occur through certain technology providers, it would take place only after ensuring an adequate level of personal data protection in accordance with the GDPR.

Retention Period and Method for Personal Data

We process and retain the personal data of customers, prospective customers, and third parties only for as long as necessary to fulfill the purpose for which it was collected, or for the period specified by law.

Specific retention periods include, in particular:

• Data from contact and inquiry forms – for 12 months from the date of submission, unless a contractual relationship is established.
• Customer data related to the performance of a contract – for the duration of the contractual relationship and subsequently for 10 years after its termination for the purpose of protecting the rights and legitimate interests of the data controller.
• Accounting and tax documents – for the period specified by applicable laws, typically 10 years.
• Communication with customers (via email, phone, or in writing) – for the time necessary to resolve the request and subsequently for a maximum of 3 years from the end of the communication.
• Job applicants’ data – for the duration of the selection process, or for 12 months following its conclusion, subject to the applicant’s consent.

Upon expiration of the applicable retention period, personal data is securely deleted, anonymized, or destroyed in accordance with the controller’s internal procedures.

Changes to These Rules

We review this document regularly and reserve the right to change it. If any changes to the rules affect your rights, we will notify you in an appropriate manner.

Last updated: June 11, 2026