This document has not yet been reviewed by an attorney and is not in effect. Passages marked [[ TO COMPLETE: … ]] are to be completed by the operator or by counsel.
Do not want to be listed? You can ask us at any time to remove your details and not to add them again – use the form on the page Remove my data or write to info@flcontacts.com. It is free and you do not have to give a reason. Details in Section 10.
flcontacts.com has compiled a database of businesses registered in Florida and supplies exports from it to business customers. The Florida dataset is active as of October 15, 2026. This notice describes what we process and how.
Information about a business is personal data only where it relates to an identifiable individual. This notice is therefore addressed to:
Visitors of this website, people who contact us and customers are covered by the Privacy Policy.
Martin Adamec (sole proprietor)
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
Czech business ID (IČO): 19552319
Email: info@flcontacts.com · Phone: +420 720 950 900 (Central European Time)
The operator is established in the European Union. The EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") therefore applies to this processing even though the records concern businesses and people in the United States (Article 3(1) GDPR). No data protection officer has been appointed. [[ TO COMPLETE: counsel – confirm that no data protection officer is required under Article 37 GDPR ]]
For each record we plan to process the following, to the extent the sources contain it:
We do not intend to process special categories of personal data (Article 9 GDPR), data about criminal convictions (Article 10 GDPR), Social Security numbers, dates of birth, or financial account data. [[ TO COMPLETE: confirm against the final data model – in particular that disciplinary history from licensing records and health-related inferences about individual license holders are not taken over ]]
We plan to use publicly available sources only. A fuller description is on the page Data sources and methodology.
The state records are public records under Florida law. Chapter 119 of the Florida Statutes provides: "It is the policy of this state that all state, county, and municipal records are open for personal inspection and copying by any person" (Fla. Stat. § 119.01(1)). Being a public record does not mean that the information is current, and it does not by itself make every use of it lawful.
On request we will tell you which source the details in your record came from. [[ TO COMPLETE: confirm the final list of sources before the first export; list each agency data set actually used and its terms of use ]]
Note for counsel (remove before publishing): Public records and commercial use. Please confirm (1) that no Florida statute or agency term restricts the commercial reuse or resale of the Division of Corporations bulk files or of DBPR and DOH license data (for example statutory exemptions from Chapter 119 for particular fields, or agency terms of use); (2) whether any record category carries a statutory ban on use for commercial solicitation, as some Florida statutes provide for specific records; (3) whether automated collection from agency websites, as opposed to official bulk downloads and public records requests, raises contract or computer-access issues; and (4) the same for automated collection of contact details from business websites (see also the CAN-SPAM note in the Terms of Sale, Section 7).
We will process the data to build and maintain a business database and to supply exports from it to business customers for business-to-business purposes: sales prospecting and direct marketing by mail, phone or email, enriching customer relationship management (CRM) systems, and market analysis. Our customers are contractually required to follow the laws that govern their outreach (Terms of Sale, Section 7).
We do not build profiles of individuals, we do not evaluate personal characteristics, and we do not make automated decisions within the meaning of Article 22 GDPR. The database is not a consumer report and may not be used for credit, employment, insurance or housing decisions.
The legal basis is Article 6(1)(f) GDPR: processing is necessary for the legitimate interests of the operator and of its customers in making information about businesses available and usable for dealings between businesses. Recital 47 GDPR recognizes that processing for direct marketing purposes may be regarded as carried out for a legitimate interest.
In weighing these interests against yours, we take into account in particular that:
Against this stands, in particular, that a business address may be a home address and that you may not expect a record filed with a state agency to be used for marketing. We give weight to this by honoring every removal request from an individual without asking for reasons. [[ TO COMPLETE: document the legitimate interests assessment in writing; state whether a summary is available on request ]]
If you received marketing from a business, that business is responsible for it; please send your opt-out to that business as well. If you know that the business obtained your details from us, tell us so in your request.
We will store and process the database on servers in the European Union. Customers are expected to be located mainly in the United States, so supplying an export will regularly mean transferring the data from the EU to the United States – the country the records originally came from. [[ TO COMPLETE: counsel – transfer mechanism under Chapter V GDPR for deliveries to U.S. customers (adequacy decision for the EU-U.S. Data Privacy Framework for certified recipients; otherwise standard contractual clauses under Article 46(2)(c) GDPR), and where a copy of the safeguards can be obtained (Article 14(1)(f) GDPR) ]]
We will keep a record for as long as the business is shown as active in the sources and the record is needed for the purposes above. Once a business is no longer shown as active, we will delete the personal details in the record [[ TO COMPLETE: deletion period after a business becomes inactive in the source ]].
After a removal request we delete the details concerned. To prevent them from being added again at the next update from the sources, we keep only the identifiers needed for that (for example document number, phone number or email address) on a suppression list [[ TO COMPLETE: retention period of the suppression list ]].
Removal request (right to object, Article 21 GDPR): you may object to the processing of your data at any time. Where the processing serves direct marketing, you do not have to give reasons, and we will no longer process your data for that purpose (Article 21(2) and (3) GDPR). We apply this to every individual, wherever you live.
The easiest way is the form on the page Remove my data. You can also write to info@flcontacts.com or send a letter to the address in Section 2.
Subject to the conditions set by GDPR, you also have the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17) and the right to restriction of processing (Article 18). The right to data portability (Article 20) does not apply to processing based on Article 6(1)(f) GDPR.
We will inform the customers to whom we previously supplied your data about a rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort (Article 19 GDPR). [[ TO COMPLETE: confirm the procedure for notifying customers ]]
We reply without undue delay and at the latest within one month of receiving the request; for complex requests the period may be extended by two further months, in which case we tell you within the first month and explain why (Article 12(3) GDPR). Handling a request is free of charge (Article 12(5) GDPR). If we have reasonable doubts about your identity, we may ask for additional information (Article 12(6) GDPR). If the public record itself is wrong or outdated, we correct our record; a lasting correction also requires a filing with the agency that keeps the record.
You may lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The authority competent for the operator is the Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic (uoou.gov.cz). Complaints may be submitted from outside the European Union.
U.S. state privacy laws. The Florida Digital Bill of Rights does not apply to the operator, for the reasons given in the Privacy Policy, Section 12; in addition, its definition of personal data excludes information lawfully made available through government records (Fla. Stat. § 501.702(19) and (28)). We honor removal requests regardless.
The planned database would cover a very large number of records obtained from public sources and not from the people concerned. In our assessment, notifying each person individually would involve a disproportionate effort. We therefore make this information publicly available on this website under Article 14(5)(b) GDPR and apply the safeguards described in Section 6. On request we give you the information about your own record individually.
Note for counsel (remove before publishing): Article 14(5)(b) GDPR is the main open risk of the business model.
We update this notice when the sources, the scope or the purposes of processing or the law change, and in any case before the first export from the Florida data set is delivered. The version published at flcontacts.com/data-notice/ applies.
Last updated: October 2026 (draft)
