Privacy policy

Last updated: 5 October 2026

1. Who we are

The controller of your personal data is Brandmotion s.r.o., which operates the Happenmade brand, Company ID (IČO) 13986287, Varšavská 715/36, Vinohrady, 120 00 Prague 2, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, file C 358384. For any privacy matter, write to [email protected].

2. What data we process and why

• When you contact us (e-mail, phone, messaging apps): your name, business contact details, company, role and the content of your message. We use them to answer your enquiry and to prepare or perform a contract with your company. Legal basis: steps prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in business communication (Art. 6(1)(f) GDPR).
• Business contacts from public sources: to identify companies that may need our services, we may process business contact details of company representatives from public sources such as company websites, commercial registers, press releases and professional networks. We use them only for individual business communication relevant to your role. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). You can object at any time and we will stop.
• Clients and partners: contact and contractual data needed to deliver projects, invoice and meet our legal obligations, including accounting, tax and sanctions checks. Legal basis: contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c) GDPR).

We do not use your data for automated decision-making or profiling, and we do not sell it.

3. This website

This website uses no cookies and shows no advertising.

• Visitor statistics: we use Plausible Analytics, provided by Plausible Insights OÜ (Estonia), to measure visits in aggregate – for example which pages are read, which website or campaign a visit comes from, the country, the type of device, and actions such as switching language or sending the contact form. Plausible sets no cookies, does not store IP addresses and does not build profiles of individual visitors; the data is processed on servers in the EU. The measuring script is delivered from our own domain. Legal basis: our legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR).
• Contact form: what you enter (name, company, e-mail, phone or WeChat, message and the project steps you selected) is passed through our website (Cloudflare) and Microsoft 365 to our mailbox [email protected] and used to reply to you, as described in section 2 (“When you contact us”).
• Hosting: the website runs on Cloudflare Pages (Cloudflare, Inc.). When you visit, Cloudflare processes technical data such as your IP address and browser details to deliver the pages and protect the website against attacks. Legal basis: our legitimate interest in a secure and available website (Art. 6(1)(f) GDPR).
• Settings in your browser: the website stores three technical settings in your browser (your chosen language, light or dark mode, and the project steps you selected) so the page shows them again on your next visit. They stay on your device and are not sent to us.
• Contact form draft: if you start filling in the contact form, your draft is kept only in your browser until you close the tab or send the message. It is not sent to us before you press Send.

Fonts are hosted on our own domain; the website loads no content from Google or other third-party services.

4. Who receives your data

Our service providers that process data on our behalf, in particular Microsoft (e-mail and document storage), Cloudflare (website hosting and security), Plausible Insights (visitor statistics), our accountant and IT support; and, where a project requires it and only to the necessary extent, specialists we engage for your project (e.g. lawyers, tax advisers), who are bound by confidentiality. Some providers may process data outside the EU/EEA; in that case we rely on an adequacy decision (including the EU–US Data Privacy Framework) or on standard contractual clauses.

5. How long we keep it

Enquiries that do not lead to cooperation: up to 3 years from the last contact. Client and contract data: for the duration of the cooperation and then as required by law (accounting and tax records typically 10 years). Business contacts from public sources: until you object or until the data is no longer relevant, at most 3 years from the last contact.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interest, including business communication. To exercise your rights, write to [email protected]. You may also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz) or the supervisory authority in your country.