Privacy policy

The Controller operates the website www.tingbrno.cz, online services and other projects on the internet (hereinafter the “Services”) brought together on the website. In operating these Services, the Controller processes personal data of natural persons.

Personal data are identifiers that the user (data subject) has provided to the Controller and that, alone or in combination with other identifiers, are capable of identifying a specific data subject.

For the purposes of this Policy, a data subject is a natural person whose data are processed by the Controller in operating the Services.

Processing of personal data means an individual operation or a set of operations systematically performed when handling personal data, in particular their collection, organisation, storage, retrieval, use, sorting and classification in databases, blocking and others.

A processor is a natural or legal person entrusted by the Controller with processing personal data for purposes determined by the Controller.

The legal framework governing the Controller’s processing of personal data is Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter the “GDPR”) and Act No. 110/2019 Coll., on the Processing of Personal Data.

1. The purpose of processing personal data is the use of the Services provided by the Controller and the Controller’s information and marketing activities (sending email newsletters and other commercial communications).

2. The legal basis for processing personal data is a concluded contract, an order or consent given by the data subjects.

3. The Controller sends email newsletters and other email messages of the nature of commercial communications on the basis of specific consent to receiving email messages (newsletters) within the meaning of Act No. 480/2004 Coll., on Certain Information Society Services. The Controller also sends email messages to its customers, i.e. persons who have used the Controller’s Services, within the legal limits set by Act No. 480/2004 Coll., even without prior express consent to receiving commercial communications.

4. The Controller processes personal data to the extent in which users provided them and only for the purposes stated above (purchase of goods or services / conclusion of a contract, further use of the Services and sending information in the form of email newsletters).

5. In operating its website, the Controller uses cookies and other electronic identifiers (together hereinafter “cookies”). Their purpose and use are governed by the rules for processing cookies, of which the user is informed in the cookie bar, where they give consent to the processing of their personal data when cookies are used, and by the rules the Controller has published for this purpose in line with the actual use of cookies.

6. On the basis of consent given in the cookie bar, the Controller uses the Google Analytics 4 service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service is used to analyse website traffic, i.e. to find out how users use the website, which pages they visit and where they come from. It stores the cookies _ga and _ga_ME186RPJZZ on the user’s device with a validity of no more than 12 months from the last visit. The legal basis for this processing is the user’s consent under Article 6(1)(a) of the GDPR. Without consent, the service does not load and processes no data about the visit. Consent can be withdrawn at any time via the “Cookie settings” link in the website footer.

The Controller retains the personal data provided for the following periods:

a) For the duration of the contractual relationship: contract, accounting, user account/service, marketing consent for its duration and for the following 3 years after its termination (due to possible complaints or other claims of the contracting parties).

b) For 5 years from the user’s last use of the service.

c) Until consent is withdrawn or until a similar act by which the user withdraws the Controller’s ability to process their personal data.

d) Data on individual visits processed by the Google Analytics service for the period set in that service, no longer than 14 months. Aggregate traffic statistics that do not allow the user to be identified may be kept longer.

In connection with the processing of personal data, the Controller guarantees data subjects in particular the following rights arising from the GDPR:

Data subjects have the right of access to their personal data. They also have the right to have them rectified and/or completed or erased, or they may request restriction of the processing of their personal data, as well as the right not to be subject to automated individual decision-making (including profiling).

Data subjects have the right to object to the processing of their personal data.

Data subjects have the right to data portability in a structured, commonly used and machine-readable format.

Data subjects are entitled to withdraw their consent to the processing of personal data at any time. To withdraw consent, the Controller recommends using its contact email: rodicemjednoduse@gmail.com

Data subjects are entitled to lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz), registered office Pplk. Sochora 27, 170 00 Praha 7, email posta@uoou.cz, data box qkbaa2n.

1. When processing data for the purposes set out above, the Controller uses processors and assures data subjects that it has selected processors that can guarantee the same level of security of personal data during processing as the Controller. These processors are:

• Invoicing software provider (Fakturoid): issuing and recording tax documents

• Email service provider: sending newsletters and transactional emails

• Shipping service (Zásilkovna / Packeta): delivery of printed products

• Google Ireland Limited (Google Analytics 4): analysis of website traffic, only with the user’s consent

2. In its activities, the Controller does not transfer personal data outside the EU, with the exception of the Google Analytics 4 service referred to in Article II point 6. Within this service, data may be transferred to Google LLC in the USA on the basis of the European Commission’s decision on the adequate level of protection of personal data (EU-U.S. Data Privacy Framework).

3. The Controller reserves the right to amend this Policy in the event of changes on the Controller’s side or in the relevant legislation.

4. This Privacy Policy is effective from 25 October 2026.