Privacy notice
Last updated 9 September 2026
This notice explains what personal data eutaxfin.eu collects, why, on what legal basis, who it reaches and what you can do about it. It covers this website only — data you give us later as a client is governed by our engagement terms.
Who is responsible
The controller of the data described here is:
- Controller
- EU TaxFin s.r.o.
- Registered address
- Pod Děkankou 1694/4, Nusle, 140 00 Praha 4, Czech Republic
- Company ID
- 06813933
- Contact for data protection
- info@eutaxfin.eu
We have not appointed a data protection officer; we are not required to. Write to the address above with any question or request about your data.
The contact form
When you submit the form on the homepage we process the name, email address and message you enter. All three are required — without them we cannot answer you.
- Purpose: reading your enquiry, answering it, and any correspondence that follows from it.
- Legal basis: Article 6(1)(b) GDPR — steps taken at your request before entering into a contract. Where your message turns out not to concern a possible engagement, we rely on Article 6(1)(f), our legitimate interest in responding to people who contact us.
- How it reaches us: the form posts to our own endpoint running on Cloudflare Workers, which sends the content by email to info@eutaxfin.eu. That mailbox is hosted on Google Workspace. Nothing is written to a database and there is no CRM.
- Retention: for as long as we need it to deal with the enquiry, and no longer than 24 months after the last message — unless it becomes part of a client file, which is then governed by our engagement terms.
You can skip the form entirely and email us directly. That involves the same mailbox and the same retention.
Bot protection
The form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a script. To do that Cloudflare processes your IP address and signals about your browser and its interaction with the page. The challenge is not used to profile you or to track you across sites, and it does not place advertising cookies.
- Legal basis: Article 6(1)(f) — our legitimate interest in keeping the form usable and free of automated abuse.
- Role: Cloudflare acts as our processor. See Cloudflare's privacy policy.
Hosting and server logs
The site is served by Cloudflare. Like any web server, the infrastructure logs technical request data — IP address, timestamp, requested URL, referrer, user agent and response status — to deliver pages, and to detect and stop attacks. We do not use these logs to identify individual visitors.
- Legal basis: Article 6(1)(f) — our legitimate interest in operating and securing the site.
- Retention: as applied by Cloudflare in its role as our processor; we do not retain a separate copy.
Analytics — only if you agree
We would like to understand how the site is used, in aggregate. Our measurement runs through Google Tag Manager (container GTM-TC2QPG2R), which loads Google Analytics 4 (property G-2HP79K2CMV). That is the only tag in the container.
Nothing loads and nothing is sent until you accept. Google's scripts are not requested at all when you arrive: no analytics cookie is written, and no data — including your IP address — reaches Google. If you press Accept in the banner, the container is loaded and measurement begins. If you press Decline, or simply ignore the banner, nothing happens at all and the site works exactly the same.
You can change your mind at any time through Cookie settings in the footer. Withdrawing is as easy as agreeing: measurement stops immediately, and the scripts are not loaded again on your next visit. Cookies already written stay in your browser until they expire or you clear them — you can delete them yourself in your browser settings at any time.
- Legal basis: your consent — Article 6(1)(a) GDPR, and Article 5(3) of the ePrivacy Directive for placing the cookies.
- We never ask for advertising storage. There is no advertising on this site, so the advertising signals are set to denied permanently and are not affected by your choice.
Cookies and similar storage
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| cookie-consent | This site | Remembers whether you accepted or declined analytics. Stored in your browser's local storage, not sent anywhere. Strictly necessary, so no consent is required for it. | Until you clear it |
| _ga, _ga_2HP79K2CMV | Google Analytics 4 | Distinguishes visitors and sessions for aggregate usage statistics. Written only after you accept. | Up to 2 years |
Cloudflare Turnstile may place a short-lived token in your browser while the challenge runs. It is strictly necessary for the form to work and carries no tracking function.
Who else sees your data
We do not sell personal data and we do not share it for anyone else's marketing. Data reaches only the providers we use to run the site, each under a data processing agreement:
- Cloudflare, Inc. — hosting, the form endpoint, Turnstile, and sending the notification email.
- Google Ireland Ltd / Google LLC — the info@eutaxfin.eu mailbox (Google Workspace) and, with your consent, Tag Manager and Analytics.
Beyond that, we disclose data only where the law requires it, or where it is necessary to establish or defend a legal claim.
Transfers outside the EU
Both providers are US-headquartered and may process data outside the European Economic Area. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for a copy of the relevant safeguards.
Automated decisions
We do not make decisions about you by automated means and we do not profile you. Turnstile decides whether a form submission looks automated; that decision affects the submission, not you, and you can always reach us by plain email instead.
Your rights
Under the GDPR you can ask us to:
- Access the personal data we hold about you, and get a copy.
- Correct anything inaccurate or incomplete.
- Erase it, where we have no overriding reason to keep it.
- Restrict or object to processing based on our legitimate interests.
- Receive it in a portable form, where processing rests on consent or a contract.
- Withdraw consent to analytics at any time — use Cookie settings in the footer. Withdrawing does not affect what was lawfully collected beforehand.
Write to info@eutaxfin.eu and we will answer within one month. Exercising these rights is free.
If you are not satisfied with how we handled your request, you can lodge a complaint with a supervisory authority — either our lead authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, Czech Republic), or the authority in the EU country where you live or work.
Changes to this notice
We update this page when what we do with data changes. The date at the top always reflects the current version.