Privacy policy
These privacy principles are based on Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”).
General provisions
Article 1
This regulation sets rules for the protection of natural persons in connection with the processing of personal data and rules regarding the free movement of personal data.
It protects the fundamental rights and freedoms of natural persons, especially their right to personal data protection.
Article 4
For the purposes of this regulation:
Personal data: any information relating to an identified or identifiable natural person (the “data subject”).
Processing: any operation or set of operations performed on personal data, whether automated or not.
Controller: a natural person who determines the purposes and means of processing personal data.
Data controller:
Kateřina Schneiderová, Company ID (IČO) 24020346
Address: Strahovská 261, 373 24 Římov, Czech Republic
Contact:
Email: info@rodokmeny-schneider.cz
Consent of the data subject is a free, specific, informed, and unambiguous expression of will by which the data subject agrees to the processing of their personal data.
Principles of personal data processing
Article 5
Personal data is processed lawfully, fairly, transparently, and only for specific, explicitly stated, and legitimate purposes.
Personal data is adequate, relevant, and limited to what is necessary, and it is retained only as long as required to fulfill the processing purpose.
The controller retains personal data for the period necessary to exercise rights and obligations arising from the contractual relationship, at most 2 years after its termination, or until consent to processing is withdrawn.
Personal data may be shared with third parties only as necessary for services provided, especially with online storage providers (Microsoft, Google) and shipping companies (PPL, GLS, Zásilkovna, Czech Post).
Personal data is not transferred outside the European Union.
Article 6
Processing personal data is lawful if the data subject has given consent or if processing is necessary for fulfilling a contract.
The purpose of processing is to handle orders, communicate with clients, and fulfill rights and obligations arising from the contractual relationship. The controller mainly processes identification and contact data.
Contact form
Personal data provided through the website contact form (name, email, message content) is processed solely to handle the inquiry. Data is not used for marketing purposes and is not shared with third parties without consent. Data is retained only as long as necessary to respond to the inquiry, up to 1 year.
Use of analytics tools (Google Analytics)
The website uses Google Analytics to analyze traffic and improve functionality. Google Analytics uses cookies and processes website usage data, including IP addresses. This processing is based on consent provided through the cookie banner.
Article 7
If processing is based on consent, the controller must be able to prove that the data subject gave consent.
The data subject may withdraw consent at any time.
Rights of the data subject
Article 15
The data subject has the right to access their personal data and information about its processing.
Article 16
The data subject has the right to correct inaccurate or incomplete personal data.
Article 17
The data subject has the right to have personal data deleted if the purpose of processing no longer exists.
Controller responsibility and data security
Article 24
The controller has implemented appropriate technical and organizational measures to ensure personal data protection.
Article 32
Data security corresponds to the nature and scope of processing and the risks to the rights of data subjects.
Article 37
The controller has not appointed a data protection officer.
Final provisions
By submitting the form or order, the data subject confirms that they have read and agree with these privacy principles.
The controller reserves the right to amend these principles. The current version will always be published on the controller’s website.
These privacy principles take effect on 1 January 2026.