1. Introduction
This policy describes how we process the personal data of website visitors and of users of our services in connection with the activities of the political party Osmička žije (hereinafter “we” or “the controller”). The processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, “GDPR”) and with Act No. 110/2019 Coll., on personal data processing.
2. Data controller
The controller is:
- Osmička žije
- Company ID (IČO): 1726298
- registered office: Mirovická 1116/29, 182 00 Prague 8 – Kobylisy
Contact for questions about personal data protection (the controller's general contact address or a dedicated mailbox): info@8zije.cz.
3. What data we process
We process in particular the following categories of data, depending on how you communicate with us:
- Identification and contact details – your first name and surname, your e-mail address and possibly your telephone number, if you provide it in a form or in an e-mail.
- The content of your message – the text you send us through the contact form (including the subject of the message).
- Technical data – e.g. IP address, browser type, basic information about your device and the time of access, where this is necessary for the operation of the website, for security or for traffic analysis (see cookies below).
4. Purposes and legal bases of the processing
We process personal data for the following purposes:
- Dealing with a query or a request (contact form, e-mail) – legal basis: Article 6(1)(b) GDPR (steps taken at the request of the data subject with a view to concluding a contract / pre-contractual steps) and/or Article 6(1)(f) GDPR (legitimate interest in communicating with citizens and partners), or Article 6(1)(a) GDPR (consent), where we explicitly require consent (e.g. the newsletter).
- Sending information e-mails / the newsletter – only on the basis of consent under Article 6(1)(a) GDPR, which can be withdrawn at any time.
- Compliance with legal obligations – e.g. accounting, replies to requests from public authorities – basis Article 6(1)(c) GDPR.
- Operation and security of the website, statistics – basis Article 6(1)(f) GDPR (legitimate interest in a functional and secure website); for optional cookies (analytics) we rely on your consent, managed in the cookie banner (see article 8).
5. Retention period
We keep personal data only for as long as is strictly necessary to fulfil the purpose of the processing, and at the longest:
- data from the contact form / correspondence: for as long as is strictly necessary to deal with the matter and for any follow-up communication, unless the law requires longer;
- newsletter data: until consent is withdrawn + a short technical period for synchronisation;
- logs and operational data: for as long as is strictly necessary to ensure the security and operation of the website.
6. Recipients and processors
Your data may be processed by our contracted processors, which provide us with the services necessary for the operation of the website and for communication, in particular:
- web hosting / domain provider: Vedos Webhosting;
- application platform and CDN provider: Vercel Inc. (USA — see article 7);
- content management (CMS) provider: Sanity AS (Norway / USA — see article 7);
- transactional e-mail service provider (sending the message from the contact form): Resend, Inc. (USA — see article 7);
- map service provider (if a map is embedded on the website): Google Ireland Limited – Google Maps;
- provider of anonymous traffic statistics (only once consent has been given in the cookie banner, see article 8): Google Ireland Limited – Google Tag Manager / Google Analytics.
We have concluded contracts with the processors under Article 28 GDPR. You can request the current list of processors at the contact address given above.
7. Transfers to third countries
Some of our processors (in particular Vercel Inc., Resend, Inc. and Google) may process data on infrastructure outside the European Economic Area (as a rule in the USA). Where that happens, we do so only where appropriate safeguards under the GDPR are in place — typically the standard contractual clauses approved by the European Commission, or an adequacy decision (e.g. the EU–US Data Privacy Framework), unless the law provides otherwise.
8. Cookies and similar technologies
Our website uses cookies and similar technologies. Consent to the optional categories (analytics in particular) is managed in a cookie banner powered by the open-source tool Klaro!, which runs directly in your browser and stores your decision in a cookie on your device; Klaro itself does not pass any data to third parties.
Necessary cookies (e.g. for the functionality of the website and to store your consent decision) are processed without the need for consent, on the basis of legitimate interest under Article 6(1)(f) GDPR. Optional cookies (analytics via Google Tag Manager / Google Analytics) are activated only after you have given consent; you can withdraw your consent at any time in the footer of the website (the “Cookie settings” link).
Details of the individual files, their purposes and their storage periods can be found in the cookie banner, or in a separate “Cookie policy” document, if it has been published.
9. Your rights
In connection with the processing of personal data you have, in particular, the right:
- of access to the data (Article 15 GDPR);
- to rectification of inaccurate data (Article 16 GDPR);
- to erasure (the “right to be forgotten”), under the conditions of Article 17 GDPR;
- to restriction of processing (Article 18 GDPR);
- to object to processing based on legitimate interest (Article 21 GDPR);
- to data portability, where this is technically feasible (Article 20 GDPR);
- to withdraw consent to processing based on consent, at any time, without this affecting the lawfulness of the processing carried out before the withdrawal;
- to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (the Czech data protection authority), Pplk. Sochora 27, 170 00 Prague 7, website: www.uoou.cz.
Please send requests to exercise your rights to: info@8zije.cz. We will reply without undue delay, usually within one month (or with an extension under the GDPR).
10. Source of the data
We obtain personal data directly from you (forms, e-mail, telephone).
11. Automated decision-making
We do not take decisions based solely on automated processing, including profiling, which would have legal effects for you or would similarly significantly affect you, except in cases where we would expressly inform you of this.
12. Closing provisions
We may update this policy; the current version will always be published on this page together with the date on which it takes effect. In the event of substantial changes we may inform you in another appropriate way (e.g. on the website or by e-mail), where the law requires it.
