LEAN TOOLSAcademy of future of lean by API

Privacy Policy

This policy describes how we process personal data in the LEAN Tools app and on the lean-tools.cz website.

Who processes the data

API – Akademie produktivity a inovací, s.r.o., Company ID 27382133, Želevčice 5, 274 01 Slaný, Czech Republic. Contact for all questions and requests concerning personal data: info@e-api.cz.

We act in two roles. As a controller we process data from the website, from the contact form and about signing in to the app. As a processor we process data that our customers enter into the app (see Measurement data).

User accounts

For an account in the app we process:

  • first and last name,
  • email address (sign-in, data verification and password change),
  • phone number – optional,
  • a photo as an avatar – only if you upload it yourself,
  • the preferred language of the app,
  • sign-in data (for example the time of the last sign-in).

Purpose: providing the app, signing in, account security and user support.

Legal basis: the account is created by your employer or another customer that uses the app. We process the data in the account on the customer's behalf as a processor (see Measurement data). Sign-in and security data we process as a controller on the basis of our legitimate interest in the secure and proper operation of the service (Article 6(1)(f) GDPR).

Retention: for as long as the account is active. After the account is closed or the service to the customer ends, we keep the data for a further 30 days and then delete or anonymise it. It disappears from the daily database backups, which we keep for 30 days, within a further 30 days at the latest.

Measurement data

Measurements are created by our customers and may contain the names of measured workers and a record of the course of their work.

  • The customer is the controller of this data. The customer decides whom to measure and why, and is responsible for the legal basis, for informing the measured persons and for the retention period.
  • We are the processor. We process the data only on the customer's behalf, on the customer's instructions and under our contract with the customer (Article 28 GDPR). We do not use it for our own purposes.
  • Assistance: we help the customer handle requests from measured persons, for example for erasure or anonymisation. We notify the customer of any security incident at its contact address within 48 hours of discovery.
  • When the service ends, we keep the data for a further 30 days (the customer can ask for it back) and then delete it manually. It disappears from the daily backups within a further 30 days at the latest.
  • Sub-processor: the server infrastructure provider Hetzner Online GmbH (servers in Germany).

If a measurement concerns you, please contact your employer first. Any request that reaches us will be passed on to them without delay.

Contact form

When you submit the form on the Contacts page we process your name, e-mail address, phone number (optional) and the text of your message. The form does not store the message in a database; it reaches us as an e-mail in the info@e-api.cz mailbox. The provider of the e-mail service is our processor.

Handling your enquiry

  • Purpose: to answer your enquiry and to prepare a possible offer or demonstration of the app.
  • Legal basis: steps prior to entering into a contract at your request and our legitimate interest in answering an incoming enquiry (Article 6(1)(b) and (f) GDPR). We do not need your consent to handle the enquiry; before sending you only confirm that you have read this policy.
  • Retention: while the enquiry is being handled and then for 12 months after the last communication. If a contract is concluded, further retention is governed by that contract and statutory periods.

Business communication (separate, optional consent)

  • Purpose: sending business communication about the LEAN Tools app by e-mail or phone.
  • Legal basis: your consent (Article 6(1)(a) GDPR), given by ticking a separate box. Sending your enquiry does not depend on it, and without it we will not send you any business communication.
  • Retention: until you withdraw consent, for 3 years from the date it was given at most. You can withdraw consent at any time by e-mail to info@e-api.cz; withdrawal does not affect the lawfulness of processing before it. We keep the time consent was given as proof.

Form protection (ALTCHA). The form is protected against bots by ALTCHA. The check runs on our own server as a computational task in your browser; it uses no cookies, does not track you and passes no data to third parties. We use the IP address only to limit the number of submissions and keep it in server memory for one hour at most.

The lean-tools.cz website

The website uses no analytics or advertising cookies and does not measure traffic. It therefore needs no cookie consent. It stores only the technical data necessary to operate:

  • cookie i18n_redirected – the chosen language of the website,
  • cookie and browser storage auth.strategy – technical sign-in setting; after you sign in to the app, a sign-in token is added (valid for 24 hours),
  • browser storage nuxt-color-mode – the chosen display colour mode.

When you visit, the server's access logs record your IP address and request details. They serve security and troubleshooting (legitimate interest) and we keep them for about 20 days.

Where the data is stored

On servers in the European Union (Germany). We keep database backups for 30 days.

Your rights

You have the right of access to your data, rectification, erasure, restriction of processing, portability and the right to object. Where processing is based on consent, you may withdraw it at any time. Send your request to info@e-api.cz. We will handle it within 30 days of receipt. You also have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

Account deletion

Ask for your account to be deleted at info@e-api.cz. We will delete or anonymise your profile within 30 days; billing data is kept only for the period required by law.

Last updated: 23 October 2026