Privacy & Legal

How we handle your data.

Last updated: 8 June 2026

Who runs this site

Operator
Martin Šabata — sole trader (OSVČ), trading as FrontFoot HQ
Business ID
IČO 73584088 (Czech Republic, EU)
Registered address
Velešovice 33, 683 01 Velešovice, Czech Republic
Email
info@martin-sabata.com
Sales & enquiries
sales@martin-sabata.com (Lenka Marek, New Zealand)

01 Who we are

FrontFoot HQ is the trading name of Martin Šabata, an independent European engineering business operating since 2004, bringing AI and automation solutions to New Zealand and Australia. For the purposes of the EU General Data Protection Regulation (GDPR), the operator named above is the data controller for personal data processed through this site and our business communications.

If you have any question about this policy or your data, contact us at info@martin-sabata.com.

02 What we collect

When you simply visit

Simply browsing this site sets no cookies, runs no third-party analytics or advertising trackers, and loads no external resources — fonts and images are served from our own server. Browsing leaves no tracking footprint. The only time any information leaves your browser is if you choose to submit our enquiry form (see below).

Our web server keeps standard technical logs (IP address, date and time, requested page, browser type) for security and reliable operation. These are kept only briefly and are not used to identify or profile you.

When you use our enquiry form

If you submit the contact form, we process the details you provide — your name and email (required), and optionally your company, phone number, the services you're interested in, and your message — to respond to your enquiry and manage our business relationship. This information is recorded in our own customer-relationship management (CRM) system.

When you email us

If you email us directly, we process the details you provide — your name, email address and the content of your message — to respond and to manage our business relationship.

When we contact you (business outreach)

If we have reached out to your organisation, we hold business contact details — typically a name, role and work email address — obtained from publicly available business sources and relevant to your professional role.

03 Why we process it (legal basis)

  • Operating the site & security — our legitimate interest in running a safe, functioning website (server logs).
  • Replying to your enquiry — when you email us or submit the form, we process your details to respond and to take steps at your request prior to any agreement.
  • Business-to-business outreach — our legitimate interest (Art. 6(1)(f) GDPR) in offering relevant services to businesses, balanced against your rights. We contact organisations, in a professional capacity, with messages relevant to their work — and we stop the moment you ask.

04 Cookies & tracking

We don't use them. No cookies, no analytics, no pixels, no fingerprinting, no third-party scripts. There is no consent banner because there is nothing to consent to.

05 Who can see your data

We do not sell your data and we do not share it for advertising. Personal data may be processed by trusted infrastructure providers acting on our instructions:

  • Hosting — our server is located in the European Union (Germany).
  • Email — correspondence is handled through our business email providers.
  • Our CRM — enquiries you submit are recorded in our own customer-relationship management system, operated by us within the European Union. It is our system, not a third party selling or reusing your data.

Data is processed within the European Union. Where any provider is outside the EU, we rely on appropriate safeguards required by GDPR.

06 How long we keep it

Server logs: kept for 14 days for security purposes, then automatically deleted. Correspondence and business contact data: only as long as needed for the relationship or enquiry, and then deleted. If you ask us to remove your details, we do so promptly.

07 Marketing emails & opting out

Every marketing email we send clearly identifies us as the sender and includes a simple way to opt out. You can stop hearing from us at any time by replying with “unsubscribe” or emailing sales@martin-sabata.com. We honour opt-outs without delay and keep a minimal suppression record so we don't contact you again.

For recipients in New Zealand and Australia: our outreach is intended to comply with the Unsolicited Electronic Messages Act 2007 (NZ) and the Spam Act 2003 (Cth, Australia) — sender clearly identified, message relevant to your business role, and a functional unsubscribe in every message.

08 Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. To exercise any of these, email info@martin-sabata.com — there's no charge and we'll respond within the statutory time limit.

You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz). Visitors in New Zealand may contact the Office of the Privacy Commissioner, and in Australia the Office of the Australian Information Commissioner (OAIC).

09 Changes to this policy

If this policy changes, we'll update the date at the top of the page. Material changes will be made clear on this page.