User Data Deletion Policy

Last updated: 16.6.2026

1. Purpose and Scope

This Data Deletion Policy explains how InsightSofa, operated by ROUCEK Group s.r.o. (“InsightSofa”, “we”, “us”), handles the deletion of personal and customer data. It applies to data processed through the InsightSofa platform and related services.

In most cases, InsightSofa acts as a data processor on behalf of our business customers, who are the data controllers of the feedback and respondent data collected through the platform. This means our customers determine why and how their data is processed, and retain primary responsibility for deletion requests relating to their respondents. InsightSofa acts as a controller only for the limited data we collect about our direct account users (for example, login credentials and billing contacts).

2. Types of Data Covered

This policy covers:

Account data – information about platform users, such as names, email addresses, and login credentials.

Customer (controller) data – feedback, survey responses, respondent records, and related content that our customers collect and store using the platform.

Usage and technical data – logs, analytics, and metadata generated through use of the service.

3. Deletion Requests

3.1 Requests from our customers (data controllers)

Our customers can delete data they control at any time, either directly within the platform or by contacting us. Where a customer instructs us to delete data, we will do so in accordance with our agreement with them and applicable law.

3.2 Requests from individuals (data subjects)

If you are an individual whose personal data was collected through a survey or feedback request, the organization that sent you that survey is normally the data controller. We recommend directing deletion requests to that organization. If you contact us directly, we will forward your request to the relevant customer or assist them in fulfilling it.

For data where InsightSofa is the controller, you may exercise your rights under applicable data protection law (including the right to erasure under the GDPR) by contacting us at the address below.

4. How to Request Deletion

To request deletion of your data, contact us at:

Email: info@insightsofa.com

Company: ROUCEK Group s.r.o.

Address: Spindlerova 286, Roudnice nad Labem

Please include enough information for us to identify the relevant data. We may need to verify your identity before processing the request.

5. Deletion Timeframe

We will acknowledge deletion requests without undue delay and, where InsightSofa is the controller, complete verified requests within 30 days, unless a longer period is permitted or required by law. Where InsightSofa is a processor, we act on deletion instructions from the relevant customer according to our service agreement.

6. Backups and Residual Data

After deletion from active systems, data may persist in encrypted backups for a limited period. Backup copies are deleted on a rolling basis, typically within [90] days, after which the data is no longer recoverable. During this period, backup data is isolated and not used for any active processing.

7. Data We May Retain

We may retain certain data after a deletion request where we are legally required or permitted to do so – for example, to comply with legal, accounting, or tax obligations, to resolve disputes, or to enforce our agreements. Such data is retained only for as long as necessary and is then deleted or anonymized.

8. Anonymization

In some cases, instead of deleting data, we may anonymize it so that it can no longer be linked to an identifiable individual. Anonymized data may be retained and used for statistical and analytical purposes.

9. Changes to This Policy

We may update this policy from time to time. The current version is always available on our website, with the “Last updated” date reflecting the most recent revision.

10. Contact

For any questions about this policy or about how we handle your data, contact us at [privacy@insightsofa.com].