[ LEGAL INFORMATION ]
Privacy policy.
Last updated: August 30, 2026
Who the controller is
The controller of personal data is UX MIND Research Lab s.r.o., Reg. No. 29714966, registered office in Hradec Králové, Czech Republic. Processing complies with the GDPR Regulation (EU) 2016/679 and Czech Act No. 110/2019 Coll. on personal data processing.
Questions about personal data and exercising your rights: spoluprace@uxmind.cz.
What we process and why
Enquiries & communication
Legitimate interest / pre-contractAnswering questions from email and phone, preparing quotes and arranging cooperation.
- Data:
- Name, email, phone, company, message content.
- Retention:
- For the duration of communication, then up to 3 years (defence of claims).
Research participants
Participant consentRunning user tests and eye-tracking sessions. Outputs are processed in aggregated and anonymised form.
- Data:
- Eye-tracking data, questionnaire answers, session recording (per protocol).
- Retention:
- Until the study purpose is met; then anonymisation or deletion.
Client contracts
Contract / legal obligationDelivering the engagement, invoicing and accounting.
- Data:
- Billing and identification details, contact persons.
- Retention:
- As required by law (accounting and tax records up to 10 years).
Traffic measurement
Consent (cookies)Anonymous website traffic statistics so we can improve it.
- Data:
- Cookies and device identifiers (Google Analytics).
- Retention:
- Up to 24 months, see the cookie policy.
Research participants
Testing and eye-tracking sessions always take place on the basis of informed consent, which can be withdrawn at any time. Before each session we clearly explain the purpose, the procedure and how the data is handled.
We present results to clients and the public in aggregated and anonymised form — individuals cannot be identified from published outputs. Raw data (eye-tracking, questionnaires, any recordings) is used only for as long as the study requires and is then anonymised or deleted.
Who we share data with
We do not sell personal data. We share it only with vetted processors to the extent needed to operate — our hosting and email provider, traffic-measurement tools (Google Analytics, Google Ads) and accounting services. We have data-processing agreements in place with these processors.
Some providers (Google) may process data outside the EU. Any such transfer is covered by the EU Standard Contractual Clauses. Google's terms are described in their Privacy Policy ↗.
Your rights
You have the following rights regarding your personal data. Exercise them by email — we handle requests without undue delay, within one month at the latest.
Access
Know what data we process about you and obtain a copy.
Rectification
Have inaccurate data corrected or incomplete data completed.
Erasure
Have your data deleted once the reason for processing no longer applies.
Restriction
Temporarily restrict processing, e.g. while accuracy is verified.
Portability
Receive your data in a machine-readable format or transfer it to another controller.
Objection
Object to processing based on legitimate interest.
Withdraw consent
Withdraw a given consent at any time — without affecting processing before withdrawal.
Cookies
The site uses cookies for operation, traffic measurement and marketing. Details and consent settings are in the separate cookie policy.
Supervisory authority
If you believe we process your data unlawfully, you have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.cz ↗.