Last updated: 29 October 2026

1. Who we are

This website, statasoft.com, is operated by Stata Software s.r.o., registered in the Czech Republic, ID No. (IČO) 24998486, registered office at Na okraji 381/41, Veleslavín, 162 00 Praha, Czech Republic (the “Company”, “we”). We are the data controller for personal data collected through this site.

Contact for privacy matters: [email protected].

2. What data we collect and why

Contact and project forms. When you submit a form, we collect your name, company, email, phone (if provided), your platform URL and any details you include. We use this to respond to your request and, if a project follows, to prepare a proposal. Legal basis: our legitimate interest in responding to inquiries and taking steps prior to a contract (Art. 6(1)(b) and (f) GDPR). We keep this data for up to 24 months after our last contact, or longer if a contract is concluded.

Job applications. When you email us a CV, we process the data it contains to assess your application. Legal basis: steps prior to entering a contract (Art. 6(1)(b) GDPR). We keep applications for 6 months after the decision unless you agree to a longer period.

Email correspondence. Emails you send us are stored on our mail servers and processed to handle your request.

Server logs. Our hosting provider and CDN automatically record IP address, browser type, requested pages and timestamps for security and troubleshooting. Legal basis: legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR). Logs are retained for up to 30 days.

We do not sell personal data and do not use it for automated decision-making.

3. Cookies

We use only strictly necessary cookies — those required for the site to function, such as session handling, your cookie-consent choice and security tokens set by our CDN. These do not require consent under applicable law.

We do not use analytics, advertising or tracking cookies. Third-party content embedded on the site (e.g. Google Maps on the Contact page) may set its own cookies when loaded; see the provider’s policy.

4. Who we share data with

We use the following processors, bound by data-processing agreements:

• Hosting: Namecheap, Inc. (USA) — site and email hosting
• CDN and security: Cloudflare, Inc. (USA / EU data centres)

Where data is transferred outside the EEA, this is done under the EU Standard Contractual Clauses or an adequacy decision (EU–US Data Privacy Framework where applicable).

5. Your rights

Under the GDPR you have the right to access, rectify or erase your data, restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, email [email protected]. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).

6. Security

The site is served over HTTPS. Access to form submissions and email is limited to staff who need it to respond to you.

7. Changes

We may update this policy. The current version is always available on this page, with the date of the last update at the top.