Legal information

Provider identification · Privacy policy · Terms of service · Right of withdrawal

1. Provider identification

This service is operated by:

• HEXENKRAFT s.r.o.
• Registered office: V zahradách 2462/31, Libeň, 180 00 Praha 8, Czech Republic
• Company registration number (IČO): 29665931
• VAT ID: CZ29665931
• Registered in the Commercial Register kept by the Municipal Court in Prague (Městský soud v Praze), section C, file 450419
• Represented by its managing director (jednatel)
• Contact: hello@klariq.eu

To report a security issue, see our vulnerability disclosure page.

2. Privacy policy

Controller

The controller of your personal data is HEXENKRAFT s.r.o. (details above). For any privacy request, contact hello@klariq.eu.

What we process, and why

• Your email address: to deliver your purchase confirmation and download link and to identify your order. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• Your questionnaire answers: frozen at the moment of purchase so your pack can be regenerated and re-downloaded anytime. Legal basis: Art. 6(1)(b) GDPR.
• Order metadata: order token, amount, language, timestamps, and your consent to immediate delivery. Legal basis: Art. 6(1)(b) and, for retention, our legal obligation under accounting/tax law (Art. 6(1)(c) GDPR).
• Customer record: once you have paid, your name, email address and country, linked to your order, in our customer database on our own EU server, to manage your order, invoices and support requests. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Kept for as long as we must keep the invoice.
• Aggregate analytics: we use privacy-friendly, cookieless web analytics. Our analytics store no IP address and set no cookies, so no cookie banner is required. Legal basis: our legitimate interest in measuring traffic (Art. 6(1)(f) GDPR).
• Server access logs: our EU web server records the IP address, time and requested page for every request to klariq.eu, for security and abuse prevention (Art. 6(1)(f) GDPR). These logs are kept for 30 days.

Processors and where data sits

Payment is handled entirely by Stripe. We never see or store your card number; we keep only a Stripe session reference. We also use an EU email provider to send your confirmation and an EU hosting provider to run the service. Stripe's handling of your payment data is governed by Stripe's own privacy policy. Stripe may transfer payment data outside the EU (for example to the United States) under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

Free classifier

The free risk classification runs on the answers you submit and returns a result. No account is created and no answers are stored unless you proceed to purchase.

Change alerts (optional)

If you ask to be told when your obligations or their dates change, we store your email address, the language you chose, the risk tier you classified as (so an alert reaches only the people it affects), and a record of the consent wording you agreed to. The legal basis is your consent (Art. 6(1)(a) GDPR). We confirm the address by sending one link, an address that is never confirmed is deleted within 30 days. We use it for nothing else, never share or sell it, and every message carries an unsubscribe link. You can withdraw consent at any time, which deletes the record entirely.

Retention

Order records (including the frozen questionnaire) are kept as long as needed to provide re-downloads and to satisfy statutory accounting and tax retention periods, then deleted. Server access logs are kept for 30 days.

Your rights

Under the GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to its processing, and to data portability. Contact hello@klariq.eu to exercise them. You may also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz) or with the supervisory authority in your country of residence.

3. Terms of service

The product

Klariq provides automatically generated compliance documents (digital content, delivered as PDF) based on the answers you provide. The documents are not legal advice: they are a structured starting point. For a binding legal assessment, consult a qualified lawyer.

Price and delivery

The compliance pack is a one-time purchase at the price displayed at checkout. HEXENKRAFT s.r.o. is a VAT payer in the Czech Republic. The VAT treatment of each purchase is stated on the invoice. Business customers in another EU country with a valid VAT ID are invoiced without Czech VAT under the reverse-charge mechanism (Art. 196 Directive 2006/112/EC); you account for the VAT. An invoice is issued for every purchase and emailed to you after payment. Delivery is immediate: after payment your pack is available via a personal download link, also sent to your email. The link does not expire.

14-day right of withdrawal, and its waiver for digital content

As a consumer you normally have the right to withdraw from a distance contract within 14 days without giving a reason. However, for digital content not supplied on a tangible medium, this right expires once performance has begun with your prior express consent and your acknowledgement that you thereby lose the right of withdrawal (Art. 16(m) of Directive 2011/83/EU; Sec. 1837(l) of the Czech Civil Code).

At checkout you are asked to give this express consent: you agree that the pack is delivered immediately after payment and acknowledge that you thereby waive your 14-day right of withdrawal. The purchase cannot be completed without it. If you do not give this consent, do not complete the purchase; your statutory withdrawal right is then preserved and you may use the model form below. If you purchase as a business rather than as a consumer, the 14-day withdrawal right does not apply.

Complaints and defective performance

Your statutory rights regarding defective digital content are unaffected by the withdrawal waiver. If your pack fails to generate, cannot be downloaded, or does not correspond to the answers you submitted, contact hello@klariq.eu and we will remedy the defect or refund you. We resolve consumer complaints within 30 days.

Out-of-court dispute resolution

You may submit a consumer dispute to the Czech Trade Inspection Authority (ČOI, coi.gov.cz) for out-of-court resolution. Consumers resident elsewhere in the EU may use the consumer-protection body of their own country.

Governing law

These terms are governed by the law of the Czech Republic. Where you contract as a consumer, the mandatory consumer-protection provisions of your country of habitual residence remain unaffected (Art. 6 Rome I Regulation 593/2008).

4. Model withdrawal form

Complete and return this form only if you wish to withdraw from the contract and you did not consent to immediate delivery (see section 3).