Home ❯ Contact ❯ Terms & Conditions

Privacy Notice

Last updated: 16 September 2026

This Privacy Notice explains how Projectino s.r.o., operator of the RedmineX product and brand, processes personal data when acting as a data controller.

This notice primarily covers website visitors, prospects, business contacts, customers, suppliers and users who interact with Projectino in a business context. Processing of personal data contained in a customer's Redmine environment or otherwise processed by Projectino on a customer's instructions is governed separately by the RedmineX Data Processing Agreement.

1. Controller and contact

Projectino s.r.o.
Světova 523/1
180 00 Prague 8
Czechia
Company ID: 09829202
VAT ID: CZ09829202

Privacy requests: hello@redmine-x.com

2. Personal data we process

Depending on how you interact with us, we may process:

  • name, job title, company and business contact details;

  • account, enquiry, support and communication records;

  • quotation, contract, order, billing and payment-related information;

  • information about Products and Services used or requested;

  • technical data such as IP address, browser/device information, access logs and security events; and

  • website and marketing interaction data collected through cookies and similar technologies where permitted.

We normally obtain this information directly from you, from the organisation you represent, from our business relationship with you, from publicly available business sources, or automatically through use of our website and systems.

3. Why we process personal data

We process personal data only where we have an appropriate legal basis, including:

  • Contract and pre-contract steps: to prepare quotations, conclude and administer agreements, provide Products and Services, communicate with customers and manage accounts.

  • Legal obligations: to comply with accounting, tax, regulatory and other legal requirements.

  • Legitimate interests: to operate and secure our business and systems, manage customer relationships, prevent misuse, improve our Products and Services, establish or defend legal claims, and conduct proportionate B2B marketing where permitted by law.

  • Consent: where consent is required, including for certain marketing communications, cookies or tracking technologies. Consent may be withdrawn at any time without affecting earlier lawful processing.

Where information is necessary to enter into or perform a contract, failure to provide it may prevent us from providing the relevant Product or Service.

4. Website analytics, advertising and marketing

We may use analytics, advertising and marketing technologies including Google Analytics, Google Ads, Meta Pixel, LinkedIn and Usermaven. Where applicable law requires consent, non-essential cookies or similar technologies are activated only after consent is given through our consent mechanism.

We use Mailjet to send newsletters and marketing communications. You can unsubscribe using the link provided in marketing emails or contact us at hello@redmine-x.com.

We may also contact existing or prospective business customers about RedmineX products and services where this is permitted by applicable law. You may object to direct marketing at any time.

5. Recipients and service providers

We share personal data only where necessary for the purposes described in this notice. Recipients may include:

  • hosting, infrastructure, security and IT providers;

  • payment providers such as Stripe and PayPal;

  • email and communication providers, including Mailjet and Google services;

  • analytics and advertising providers identified above;

  • professional advisers, accountants and legal advisers; and

  • public authorities where disclosure is required by law.

Some providers act as processors on our instructions; others may act as independent controllers for parts of their services.

We do not sell personal data.

6. International processing and transfers

Projectino operates internationally and uses service providers that may process personal data in different countries. Personal data may therefore be processed within or outside the European Economic Area.

Where the GDPR applies to a transfer outside the EEA, we use an appropriate legal mechanism where required, such as an adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful safeguard.

Customer production data processed by Projectino on the customer's instructions is subject to the separate Data Processing Agreement and the hosting region agreed for that Service.

7. Retention

We keep personal data only for as long as reasonably necessary for the relevant purpose:

  • contractual and customer-management records are retained during the relationship and for the applicable limitation period afterward;

  • accounting and tax records are retained for the periods required by law;

  • security and technical logs are retained according to operational and security needs;

  • marketing data is retained until consent is withdrawn, you object to marketing, the data is no longer useful for the stated purpose, or another applicable retention limit is reached; and

  • cookie and analytics data is retained according to our consent settings and the applicable provider configuration.

We may retain limited information for longer where necessary to establish, exercise or defend legal claims or comply with law.

8. Your rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • obtain access to your personal data;

  • correct inaccurate or incomplete data;

  • request deletion of personal data;

  • request restriction of processing;

  • receive certain data in a portable format;

  • object to processing based on legitimate interests, including an unconditional right to object to direct marketing; and

  • withdraw consent at any time where processing is based on consent.

Requests can be sent to hello@redmine-x.com. We may need to verify your identity before completing a request. Exercising GDPR rights is normally free of charge; a reasonable fee may be charged or a request refused only where permitted by law, including for manifestly unfounded or excessive requests.

You also have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority in Czechia is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ).

9. Security

We use technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures are selected according to the nature of the processing and the associated risk.

No internet or information system is completely risk-free. If we identify a personal-data breach, we will assess and handle it in accordance with applicable law.

10. Automated decision-making

Projectino does not use personal data covered by this notice for solely automated decisions that produce legal effects or similarly significant effects on individuals, unless specifically disclosed otherwise

11. Changes to this notice

We may update this Privacy Notice to reflect changes in law, technology, providers or our processing activities. The current version and revision date will be published on the RedmineX website.