Privacy Policy

Last updated: 28 July 2026

This Privacy Policy explains how personal data submitted through the website extol.eu is processed.

1. Data controller

The controller responsible for the processing of your personal data is:

Madal Bal a.s.
Company ID: 49433717
Bartošova 40
760 01 Zlín
Czech Republic

Email: info@madalbal.cz

2. Personal data we collect

When you contact us through the website form or by email, we may process:

• your name;
• your email address;
• the content of your message;
• technical and security information associated with the submission, such as your IP address, browser information, date and time of submission, and anti-spam verification data.

Please do not include sensitive personal data in your message unless it is strictly necessary.

3. Purpose and legal basis

We process your personal data in order to:

• respond to your enquiry;
• assess a potential distribution or wholesale partnership;
• take steps requested by you before entering into a contract, where applicable;
• protect the website and its forms against spam, fraud and misuse;
• keep necessary records of business communication.

The legal bases for this processing are steps taken at your request before entering into a contract under Article 6(1)(b) GDPR and our legitimate interests in responding to enquiries, developing business relationships and protecting our website under Article 6(1)(f) GDPR.

Providing your name, email address and message is necessary for us to process and respond to your enquiry. You are not legally required to provide this information, but without it we may be unable to respond.

4. Service providers and recipients

Your personal data may be accessed by authorised employees and contractors of Madal Bal a.s. who need it to handle your enquiry.

We also use the following service providers:

• The hosting provider operating the server for extol.eu – website hosting, delivery and security logging;
• Moonshot Ventures, Inc. (Basin) – processing, storage and delivery of form submissions;
• Cloudflare, Inc. – Turnstile anti-spam and security verification.

These providers may process data outside the European Economic Area, including in Canada and the United States. Where required, such transfers are protected by an applicable adequacy decision or other safeguards recognised under the GDPR.

We do not sell your personal data or use it for unrelated marketing purposes.

5. Data retention

Form submissions and related correspondence are retained only for as long as necessary to process your enquiry and assess possible cooperation, and normally for no longer than 12 months after our last communication.

If a business relationship is established, relevant information may be retained for the duration of that relationship and subsequently for the period required by applicable legal obligations or for the establishment, exercise or defence of legal claims.

Technical and security data may be retained by our service providers according to their applicable retention policies.

6. Cookies and anti-spam protection

This website does not use cookies for advertising or visitor analytics.

Cloudflare Turnstile is used to distinguish legitimate visitors from automated submissions. For this purpose, Cloudflare may process technical signals such as IP address, browser and device information, TLS characteristics and the website origin. Turnstile may use cookies or similar technologies that are strictly necessary for security and fraud prevention.

More information is available in the Cloudflare Turnstile Privacy Addendum and the Basin Privacy Policy.

7. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

• request access to your personal data;
• request correction or deletion of your data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive your data in a portable format, where applicable;
• lodge a complaint with a supervisory authority.

No decisions producing legal or similarly significant effects are made about you solely by automated means.

To exercise your rights, contact us at info@madalbal.cz.

You may also lodge a complaint with the Czech supervisory authority:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
uoou.gov.cz

8. Changes to this policy

We may update this Privacy Policy when the website, its services or applicable legal requirements change. The current version will always be published on this page.