PRIVACY POLICY

effective from September 2026

Diametral a.s. respects the privacy of visitors to the VirBuster.cz website and is committed to protecting their personal data.

This policy explains what personal data we may process when operating our website and communicating with its visitors, for what purpose, and what rights are held by the individuals whose personal data we process.

​

 

1. Data controller

The data controller is:

​

Diametral a.s., Václava Špačka 1759, 193 00 Prague 9 – Horní Počernice, Company Registration Number: 044 34 374, Tax Identification Number: CZ04434374, registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, File 20964

Email: info@diametral.cz Telephone: +420 222 360 423

(hereinafter referred to as ‘the controller’ or ‘we’)

​

 

2. What personal data may we process?

In connection with the operation of the VirBuster.cz website and our communications with its visitors, we may process, in particular:

• personal details, such as first name and surname,

• contact details, in particular an email address and a telephone number,

• details of the organisation or company that the contact person represents, and, where applicable, their job title,

• the content of a message, enquiry or other communication,

• information relating to the resolution of a specific enquiry or request,

• technical data relating to visits to the website, such as IP addresses, information about the device and web browser, and data on website usage,

• data collected via cookies and similar technologies, where these are used on the website.

We do not normally process special categories of personal data within the meaning of Article 9 of the GDPR, and we ask visitors not to provide us with such data without good reason.

​

 

3. Contact and handling enquiries

If you contact us by email, telephone or any other means, we process the data you provide to us in connection with that communication.

The purpose of the processing is, in particular:

• receipt and processing of your enquiry,

• the provision of the requested information,

• communications relating to VirBuster products and technologies,

• addressing technical or commercial requirements,

• keeping the necessary records of previous communications.

The legal basis may include, in particular:

• Article 6(1)(b) of the GDPR, where processing is necessary for the implementation of pre-contractual measures taken at the data subject’s request,

• Article 6(1)(f) of the GDPR, namely our legitimate interest in communicating with those interested in our products, business partners and other individuals, and in dealing with their enquiries appropriately.

If we are contacted by a person acting on behalf of a company or other organisation, the processing of their business contact details is generally based on our legitimate interest in commercial and professional communication.

We do not require consent to the processing of personal data for the routine handling of enquiries, provided there is another appropriate legal basis for such processing.

​

 

4. The VirBuster.cz website

The VirBuster.cz website is intended for information and promotional purposes.

No contract of sale is concluded via this website, and the VirBuster.cz website does not function as an online shop.

If a visitor follows a link to another person’s website or online shop, any further processing of personal data on those external sites is governed by the rules of the relevant operator.

​

 

5. Cookies and website visit data

This website may use cookies and similar technologies.

Cookies that are essential for the technical functioning of the website may be used without the visitor’s consent to the extent permitted by law.

Statistical, analytical, marketing or other non-technical cookies are used only under the conditions laid down by law and, where the visitor’s consent is required, only once such consent has been given.

If a visitor does not give their consent, cookies requiring consent must not be activated.

Details regarding the cookies used, their purpose, providers and retention periods are set out in the separate Cookie Policy and in the cookie settings available on the website.

Consent given to the use of optional cookies can be changed or withdrawn at any time via the cookie settings.

​

 

6. Recipients and processors of personal data

Personal data may be disclosed, to the extent necessary, to parties who provide us with services relating to the operation of our website and information technology, in particular:

• web hosting and IT service providers,

• providers of technical management and website security services,

• analytics service providers, where these are used on the website,

• other service providers, where their involvement is necessary for the operation of the website or to process a specific request.

Where these persons act as data processors, the processing is governed in accordance with the requirements of Article 28 of the GDPR.

Personal data may also be disclosed to public authorities where we are required to do so by law.

​

 

7. Transfer of personal data outside the European Economic Area

Some providers of technical, analytical or similar services may process personal data outside the European Economic Area.

Where such transfers take place, we ensure that they are carried out in accordance with the GDPR, in particular on the basis of a decision by the European Commission on an adequate level of protection or by applying other appropriate safeguards set out in the GDPR.

Specific information regarding the technologies used on the website is also set out in the Cookie Policy.

​

 

8. Retention period for personal data

We retain personal data only for as long as is necessary for the purpose for which it was collected.

We retain data relating to routine enquiries or communications for as long as is necessary to deal with them.

If the communication does not lead to a further business or contractual relationship, data relating to the enquiry or request may generally be retained for a maximum of 3 years from the date of the last relevant communication, in particular to ensure continuity of communication and to protect our legitimate interests.

If another legal basis for the continued retention of data arises, the relevant data may be retained for a period commensurate with that purpose and in accordance with the relevant legislation.

Once the reason for processing personal data no longer applies, we will delete or anonymise it, unless its continued retention is required by law.

​

 

9. Protection of personal data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or unauthorised disclosure.

Access to personal data is restricted to those persons who require it in order to fulfil their work or contractual obligations.

​

 

10. Your rights

In relation to the processing of personal data, you have the following rights in particular, subject to the conditions set out in the GDPR:

• to obtain information about the processing of your personal data,

• to request access to your personal data,

• to request the correction of inaccurate or incomplete data,

• to request the erasure of personal data,

• to request a restriction on processing,

• to receive personal data in a portable format, provided that the conditions for portability are met,

• to object to processing based on a legitimate interest,

• to withdraw consent at any time, where processing is based on consent,

• to lodge a complaint with the supervisory authority.

The withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

You can exercise your rights by emailing info@diametral.cz or in writing to the company’s registered office.

If we have reasonable grounds to doubt the identity of the person making the request, we may ask for further information necessary to verify their identity.

We respond to requests concerning the rights of data subjects without undue delay, usually within one month of receiving them at the latest. In the cases specified by the GDPR, this time limit may be extended.

​

 

11. Complaint to the supervisory authority

If you believe that the processing of your personal data is in breach of the law, you have the right to lodge a complaint with:

Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic

​

 

12. Automated decision-making

When processing personal data in connection with the VirBuster.cz website, we do not carry out any decision-making based solely on automated processing, including profiling, which would produce legal effects on a visitor or otherwise significantly affect them.

​

 

13. Changes to this policy

We may update this policy from time to time, particularly in the event of changes to the technologies we use, the way in which we process personal data, or the relevant legislation.

The latest version is always published on the VirBuster.cz website.

​

Last updated: September 2026