Privacy Policy

Version: 1.1 Effective date: 1 November 2026

1. Introduction

HMH Vision s.r.o. ("HMH Vision", "we", "us" or "our") respects your privacy and is committed to protecting personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit or interact with the following websites:

• hmhv.com — HMHV Group
• hmhvision.com — HMH Vision
• synav360.com — SYNAV360
• procserv.com — ProcServ

These websites and business brands are operated by HMH Vision s.r.o.

This policy applies to visitors, individuals submitting enquiries and other persons communicating with us through these websites.

Separate privacy notices or contractual arrangements may apply to customers, consultants, candidates, suppliers and authorised users of our business platforms.

2. Data Controller

The data controller responsible for the processing described in this policy is:

HMH Vision s.r.o.
Rybná 716/24, Staré Město
110 00 Praha 1
Czech Republic

Company Identification Number (IČO): 06239617
VAT Identification Number (DIČ): CZ06239617

Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 278692.

Privacy contact: privacy@hmhv.com

3. Personal Data We Collect

Depending on how you interact with our websites, we may collect:

Information you provide directly

• Name and company name
• Business email address
• Telephone number
• Country or location information
• Nature of your enquiry
• Messages and other information you voluntarily provide
• Your preference for a telephone call
• Records of your communications with us

Technical and security information

When you access our websites, technical systems may process information such as your IP address, browser and device information, request timestamps, security-verification results and information necessary to maintain website functionality and prevent abuse.

Business relationship information

If your enquiry develops into a commercial relationship, we may process additional business contact details, correspondence, proposals and related records under the applicable privacy notice or contractual arrangements.

Please avoid including unnecessary sensitive personal data or confidential business information in public enquiry forms.

4. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

Purpose	Legal basis
Responding to enquiries and communications	Legitimate interests under Article 6(1)(f) GDPR, or pre-contractual steps under Article 6(1)(b) where applicable
Evaluating prospective business relationships	Legitimate interests or applicable pre-contractual steps
Operating, maintaining and securing our websites	Legitimate interests under Article 6(1)(f)
Preventing spam, automated abuse and unauthorised activity	Legitimate interests under Article 6(1)(f)
Complying with legal and regulatory obligations	Article 6(1)(c)
Processing optional analytics or marketing technologies	Consent under Article 6(1)(a), where required

Our legitimate interests include responding to business communications, operating our services, maintaining security and protecting our systems against misuse.

Where processing relies on legitimate interests, we consider the relevant interests, necessity and potential impact on individuals.

Submitting a contact form does not constitute consent to receive unrelated marketing communications.

5. Website Enquiries and HMHV Cloud

Enquiries submitted through our websites may be transmitted securely to HMHV Cloud, our central business-management platform.

We use this platform to register enquiries, identify the originating website, manage communications and coordinate appropriate follow-up activities.

Access to enquiry information is intended to be restricted to authorised personnel according to their responsibilities.

If an enquiry develops into a business relationship, relevant information may be incorporated into the corresponding business records.

Consultant Registration and Candidate Assessment

HMHVision.com provides a registration facility for independent consultants, interim managers, operational specialists and other professionals interested in potential assignments.

When an individual registers, we may collect and process:

• Name, contact details, country of residence and nationality
• Professional experience, qualifications and employment history
• Current role, industry expertise, functional capabilities and skills
• Professional profile information and LinkedIn profile details
• Availability, preferred assignment types, working arrangements and willingness to travel
• Indicative commercial expectations, including preferred currency and day-rate band
• CVs and other documents voluntarily submitted
• Registration declarations, acknowledgement timestamps and related administrative records
• Assessment information, correspondence and decisions concerning potential assignments

We process this information to assess professional suitability, manage our consultant network, identify potential assignment matches and communicate with applicants.

Depending on the specific processing activity, the applicable legal basis is Article 6(1)(b) GDPR, where processing is necessary to take steps requested by an individual before entering into a contract, or Article 6(1)(f) GDPR, where processing is necessary for our legitimate interests in evaluating and maintaining a network of suitably qualified professionals.

We do not rely on a mandatory consent checkbox as the legal basis for ordinary consultant-registration assessment.

Applicants acknowledge that they have read the Privacy Policy and separately confirm the accuracy of the information they provide.

Registration does not guarantee acceptance into our consultant network, an introduction to a client or an assignment.

CVs and registration information may be stored in HMHV Cloud and associated secure document-storage infrastructure, including Microsoft Azure.

Access is restricted to authorised personnel involved in registration assessment, consultant-network management and relevant assignment matching.

Where a consultant enters into a contractual engagement, additional privacy notices and contractual arrangements may apply.

6. Service Providers and Recipients

We use external technology providers to support website hosting, security, communications and business operations.

Depending on the website and service configuration, these may include:

• IONOS — domain registration and DNS services supporting our public website domains
• Vercel — website hosting and application delivery
• Cloudflare — Turnstile security verification used to protect public forms against automated submissions and abuse. This service may process IP addresses, browser signals and other technical information required for security verification.
• Upstash — rate-limiting infrastructure
• Microsoft — business email and communications
• Providers supporting HMHV Cloud, including its hosting, database and infrastructure services

We may also disclose information to professional advisers, authorised service providers or public authorities where appropriate and legally required.

Service providers processing personal data on our behalf are subject to applicable contractual and data-protection requirements.

7. International Data Transfers

Our principal website hosting, application-processing and document-storage infrastructure is configured in European regions.

The infrastructure arrangements currently include:

• Vercel — server-side functions for our four public websites are configured to execute in Frankfurt, Germany.
• Upstash — our rate-limiting Redis database has its primary region in Frankfurt, Germany.
• Microsoft Azure — our document-storage account uses West Europe (Netherlands) as its primary region and North Europe (Ireland) as its secondary region, with read-access geo-redundant storage.
• Microsoft 365 — the data-location information available in our administration portal identifies European Union/EFTA locations for the services shown.

These regional configurations do not mean that all processing is restricted to the European Economic Area.

Certain service providers, including Cloudflare, Vercel, Microsoft and other infrastructure providers, may process technical, operational, support or administrative information in other countries.

Where personal data is transferred outside the European Economic Area, we rely on an applicable lawful transfer mechanism, such as an adequacy decision or, where appropriate, the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required.

Information about relevant international-transfer safeguards may be requested by contacting privacy@hmhv.com.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose, subject to applicable legal obligations.

Our intended retention arrangements are:

Website enquiries not resulting in a business relationship

Personal data will normally be retained for up to 24 months after the last meaningful interaction, after which it will be deleted or anonymised, unless a lawful reason requires longer retention.

Enquiries developing into business relationships

Relevant information may be retained as part of the applicable client, contractual or business records, subject to a separate retention schedule.

Consultant registrations and CVs

Where a consultant or candidate registers but is not engaged on an assignment, we retain the registration information, CV and associated assessment records for no longer than 12 months after the last meaningful interaction, unless a specific lawful reason requires different treatment.

A meaningful interaction may include substantive correspondence, a candidate-initiated profile update or an assessment discussion relevant to potential assignments.

Routine administrative changes, automated system updates or internal database maintenance do not, by themselves, restart the retention period.

Applicants may request earlier deletion of their personal information, subject to applicable legal obligations and lawful exceptions.

Where an individual becomes an engaged consultant or enters into a contractual relationship, relevant information may be retained under the applicable contractual, accounting and legal retention arrangements.

Retention and deletion controls are being implemented within HMHV Cloud and its associated document-storage infrastructure. Until automated controls are fully operational, retention compliance must be managed through appropriate administrative review and deletion procedures.

Security and technical records

These are retained according to operational security requirements and applicable provider configurations, generally for shorter periods.

Legal obligations and disputes

Information may be retained for longer where necessary to comply with statutory obligations, establish or defend legal claims, or meet other lawful requirements.

Retention arrangements will be implemented and reviewed within the relevant systems.

9. Cookies and Similar Technologies

Our websites may use cookies and similar technologies necessary for website operation, security and user preferences.

Certain websites use Cloudflare Turnstile to help distinguish legitimate visitors from automated activity.

Where optional analytics, advertising or other non-essential technologies are introduced, we will provide appropriate information and obtain consent where legally required.

Embedded video content

Certain HMHV Group websites may provide video content hosted by Vimeo.

Where the privacy-aware video player is implemented, Vimeo content is not loaded automatically when the page opens. Instead, visitors are presented with a video preview and may choose to activate playback.

Activating the video establishes a connection with Vimeo and may result in the processing of technical information, including IP address, device and browser information, and the use of cookies or similar technologies.

The video player uses Vimeo's Do Not Track (dnt=1) parameter to request reduced tracking. This does not guarantee that Vimeo will refrain from all technical data processing or storage.

Visitors who do not activate the video player can continue using the relevant website without loading the embedded Vimeo player.

Further information is provided in the Cookie Policy applicable to each website.

10. Data Security

We implement technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration and disclosure.

These may include encrypted communications, access controls, authentication, security monitoring, rate limiting and restricted administrative access.

No internet-based system can guarantee absolute security.

11. Your Rights

Subject to applicable GDPR conditions, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate information
• Request erasure of personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Request data portability where applicable
• Withdraw consent where processing relies on consent
• Lodge a complaint with a competent supervisory authority

To exercise your rights, contact privacy@hmhv.com.

We may request information reasonably necessary to verify your identity before responding.

We will respond within the time limits required by applicable data-protection law.

12. Supervisory Authority

The competent supervisory authority in the Czech Republic is:

Úřad pro ochranu osobních údajů
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic

Website: https://uoou.gov.cz

You may also have the right to contact another competent supervisory authority under applicable law.

13. External Websites

Our websites may contain links to third-party websites.

We are not responsible for the privacy practices of independent third parties. We recommend reviewing their privacy notices before providing personal information.

14. Changes to This Privacy Policy

We may update this policy to reflect changes in our services, technology, legal obligations or personal-data processing practices.

The current version and effective date will be published on the relevant website.

15. Contact

For questions about this Privacy Policy or the processing of your personal data, contact:

HMH Vision s.r.o.
Email: privacy@hmhv.com

Registered office: Rybná 716/24, 110 00 Praha 1, Czech Republic.