Privacy Policy

Website privacy notice for customers, prospective customers, suppliers and other business contacts

Effective date: 3 August 2026

At a glance

We use personal data primarily to respond to enquiries, prepare quotations, deliver scientific supplies and services, manage business relationships, operate and secure our website, and meet legal obligations. We do not sell personal data.

1. Who We Are

INFINITAS Scientific s.r.o. (“INFINITAS”, “we”, “us” or “our”) is a Czech limited liability company serving business and institutional customers in the scientific supplies and services sector. For the processing described in this Privacy Policy, INFINITAS is the data controller unless we state otherwise.

This Policy applies to personal data collected through infinitas-scientific.com (the “Website”), through our contact and request-for-quotation (“RFQ”) forms, and in related business communications. It does not govern a third party’s independent processing on its own website or service.

2. Information We Collect

Information you provide

  • Identity and professional details, such as your name, job title, employer or organisation, department and country.
  • Contact details, such as your business email address, telephone number and business address.
  • Enquiry and RFQ details, including requested products or services, specifications, quantities, delivery location, timelines, project information, messages and attachments where enabled.
  • Commercial and transaction information, such as quotations, purchase orders, contracts, invoicing details, delivery information and correspondence.
  • Communication preferences and any other information you choose to provide.

Information collected automatically

When you visit the Website, our systems and service providers may collect limited technical information, such as IP address, browser and device type, operating system, referring page, pages visited, date and time, cookie identifiers, error information and security logs. The exact data depends on the Website configuration and your cookie choices.

Please do not submit sensitive personal data, confidential patient data, or other information that is not necessary for your enquiry. Our Website is intended for professional and business use and is not directed to children.

3. How and Why We Use Information

We process personal data only where we have a lawful basis under the General Data Protection Regulation (EU) 2016/679 (“GDPR”). Depending on the circumstances, we use personal data to:

  • respond to enquiries and communicate with you — based on our legitimate interests in managing business communications or on steps requested before entering into a contract;
  • prepare quotations, assess requirements, process orders, deliver products or services, invoice and provide support — to take pre-contractual steps or perform a contract;
  • manage relationships with customers, prospective customers, suppliers and partners — based on our legitimate interests in operating and developing our B2B activities;
  • operate, maintain, troubleshoot and secure the Website, email and IT systems — based on our legitimate interests in reliable and secure operations;
  • maintain business, tax, accounting, compliance and dispute records — to comply with legal obligations and, where relevant, establish, exercise or defend legal claims;
  • send marketing communications where permitted — based on consent where required, or on legitimate interests where applicable law permits, always subject to your right to opt out; and
  • use optional analytics or similar cookies — based on your consent where consent is legally required.

Where we rely on legitimate interests, we consider the necessity of the processing and balance our interests against your rights and reasonable expectations. You may request information about this assessment using the contact route in Section 13.

4. Contact Forms and Requests for Quotation

When you submit a contact form or RFQ, we use the information to understand your request, contact you, prepare and follow up on a quotation, evaluate feasibility, coordinate with relevant suppliers or service providers where necessary, and maintain an appropriate record of the interaction. Fields marked as required are needed for us to handle the request; if you do not provide them, we may be unable to respond or issue a quotation.

Submitting an enquiry does not subscribe you to general marketing. If an RFQ contains information about other people, you should ensure that you are authorised to provide it and that those people have received this Policy where appropriate.

5. Email Communications

We use business email services, including Google Workspace and Gmail-based SMTP functionality, to receive form notifications and communicate with business contacts. Messages may contain contact, enquiry, quotation, order and support information. We may retain relevant correspondence as part of our customer, supplier, transaction or compliance records.

You may unsubscribe from marketing emails at any time by using the unsubscribe mechanism provided or by contacting us. Opting out of marketing does not stop service, transaction, safety, legal or other non-marketing communications.

6. Cookies and Similar Technologies

The Website may use cookies or similar technologies that are strictly necessary for core operation, security, session management, form functionality and preference storage. With your consent where required, it may also use optional analytics or other non-essential technologies. A cookie banner or Cookie Policy, where available, provides more specific information about current cookies, providers, purposes and durations.

You can adjust optional choices through the Website’s consent tool and can also control cookies in your browser. Blocking necessary cookies may affect Website functionality. We do not activate non-essential cookies before consent where applicable law requires prior consent.

7. Third-Party Services and Recipients

We disclose personal data only as reasonably necessary for the purposes in this Policy. Recipient categories may include:

  • Google Workspace and Gmail/SMTP services used for business email, collaboration, storage and form notifications;
  • WordPress and relevant Website themes, plugins and form tools used to operate the Website and receive submissions;
  • our web-hosting, domain, security, backup, maintenance and IT-support providers;
  • payment, logistics, product manufacturers, distributors, specialist service providers, professional advisers and other business partners where necessary to respond to or fulfil a request;
  • public authorities, courts, auditors or other parties where disclosure is required by law or necessary to protect legal rights; and
  • a buyer, investor or adviser in connection with a genuine corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

These providers may act as our processors, in which case they may process personal data only under our instructions and appropriate contractual safeguards, or as independent controllers for their own legally defined purposes. We do not sell or rent personal data.

8. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including legal, accounting, tax, audit, warranty, security and dispute-resolution needs. Retention is assessed by reference to the nature and sensitivity of the data, the relationship, legal limitation periods, statutory recordkeeping rules and the risk of harm from unauthorised use or disclosure.

As a general guide, unanswered or unsuccessful enquiries and quotations are normally reviewed for deletion or anonymisation within three years after the last meaningful interaction. Customer, supplier, contract, invoice and delivery records may be retained for the duration of the relationship and for the periods required by Czech or EU law, which can in some cases be up to ten years or longer where a dispute or legal hold applies. Security and server logs are normally kept for a shorter period appropriate to security needs. Marketing preference and suppression records may be kept as needed to respect your choice.

Where feasible, we delete or anonymise data when the applicable retention period ends.

9. Your GDPR Rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

  • access your personal data and receive information about its processing;
  • correct inaccurate or incomplete personal data;
  • request erasure of personal data;
  • request restriction of processing;
  • receive personal data you provided in a structured, commonly used and machine-readable format and transmit it to another controller where the right to data portability applies;
  • object at any time to direct marketing, and object on grounds relating to your situation where processing is based on legitimate interests;
  • withdraw consent at any time, without affecting processing carried out before withdrawal; and
  • lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, workplace or the alleged infringement.

INFINITAS’s lead supervisory authority is expected to be the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, https://uoou.gov.cz. We encourage you to contact us first so we can try to resolve your concern.

To exercise a right, use the contact details in Section 13. We may ask for information reasonably necessary to verify your identity. We normally respond within one month, although the GDPR permits an extension for complex or numerous requests. Rights are not absolute, and we will explain any lawful reason for declining or limiting a request.

10. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include access controls, account security, encryption in transit where supported, system updates, backups, provider due diligence and staff confidentiality practices. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

INFINITAS is established in the Czech Republic. Some service providers or their support operations may process personal data outside the European Economic Area (“EEA”). Where personal data is transferred to a country not recognised by the European Commission as providing an adequate level of protection, we use an applicable transfer mechanism, such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where appropriate. Transfers may also rely on another lawful GDPR mechanism.

You may contact us for further information about the safeguards relevant to a particular transfer. The location and transfer arrangements of third-party services can change; their current privacy documentation provides additional details.

12. Automated Decision-Making

We do not use Website enquiries or RFQ data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on you. If this changes, we will provide the information and safeguards required by law.

13. Contact Information

For privacy questions, requests or complaints, please contact:

Controller: INFINITAS Scientific s.r.o.
Registered office: Školská 689/20, Nové Město, 110 00 Praha 1, Czech Republic
Company ID: 24088374
Privacy email: info@infinitas-scientific.com
Website: https://infinitas-scientific.com
Contact route: Use the Contact page on the Website and mark your message “Privacy Request”.

14. Updates to This Policy

We may update this Policy to reflect changes in our services, Website technology, providers, processing activities or legal requirements. We will publish the revised version on the Website and change the effective date above. If a change materially affects how we use personal data, we will provide additional notice where required by law.

Scroll to Top