1. Data we process
When you use the Veslo website or request access, we may process:
- your work email, name if you provide it, company, role, and message content;
- waitlist and lead details such as the form used, language, referrer, source, and UTM campaign values;
- technical data such as IP address, browser data, device data, request logs, security events, and approximate time of access;
- communication data, including emails sent to or from us and your responses;
- business data that you choose to provide during a demo, pilot, support request, or early-access use.
2. Why we process it
We process personal data as controller for these purposes and legal bases:
- Responding to requests, demos, and early access: steps before a contract or performance of a contract under Article 6(1)(b) GDPR.
- Operating and securing the website and Veslo: our legitimate interest under Article 6(1)(f) GDPR.
- Business communication about Veslo: our legitimate interest in contacting business users who asked about Veslo or whose company may use it. You can opt out at any time.
- Legal, accounting, and compliance duties: legal obligation under Article 6(1)(c) GDPR.
- Optional marketing or non-essential cookies if added later: consent under Article 6(1)(a) GDPR and Czech electronic communications rules.
We do not use website waitlist data for automated decision-making that produces legal or similarly significant effects.
3. Cookies, language preference, and Google Fonts
The Veslo website uses a language cookie to remember the selected site language. This is a functional cookie used to provide the language preference you chose.
The site loads Google Fonts from Google servers. When fonts load, Google may receive technical request data such as your IP address and browser information. We do not use Google Analytics or marketing pixels on the public site at this time.
If we add analytics, advertising, or other non-essential cookies later, we will request consent where Czech or EU law requires it.
4. Who receives data
We may share personal data only where useful or necessary with:
- hosting, infrastructure, security, email, CRM, support, and communication providers;
- AI, automation, and integration providers used to operate or test Veslo, if relevant to the requested demo or service;
- professional advisers, auditors, authorities, courts, or other parties where required by law or to protect our rights;
- a successor or buyer if Veslo or Neatech s.r.o. is reorganized, sold, or transferred.
If data is transferred outside the EU or EEA, we use an available lawful transfer mechanism such as an adequacy decision, standard contractual clauses, or another safeguard required by GDPR.
5. Retention
We keep personal data only as long as it is useful for the purpose above or required by law. In practice:
- waitlist and business contact data may be kept while Veslo access, demos, or commercial discussions are relevant, and normally up to three years after the last meaningful business contact;
- contract, accounting, tax, and legal records are kept for the periods required by Czech law;
- security logs are normally kept for a short operational period unless needed to investigate abuse, incidents, or legal claims;
- demo or pilot data is handled under the applicable customer arrangement where one exists.
6. Your rights
Under GDPR, you may have the rights of access, rectification, erasure, restriction, portability, and objection. If processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.
To exercise your rights, contact us at sales@neatech.cz. We may need to verify your identity before responding. You also have the right to lodge a complaint with the Czech supervisory authority, Úřad pro ochranu osobních údajů, uoou.gov.cz.
7. Security and customer deployments
We use reasonable technical and organizational measures to protect personal data. Veslo can be discussed or deployed in different security models, including customer-controlled environments, where the exact data handling should be defined in a separate signed agreement.
No internet service is perfectly secure. You should not submit confidential production data through a public website form unless we have agreed a suitable channel and arrangement.
Short version: the public site collects business contact details, language preference, technical security data, and the information you choose to send us. We use it to respond, operate Veslo, protect the service, and meet legal duties.