Privacy Policy

1. Controller identity

The controller of personal data processed in connection with this website is Diwaka, operating from Senovážné nám. 992/8, Praha, Czech Republic. You can contact the controller by email at [email protected] or by telephone at +420 244 401 147.

The controller is responsible for determining the purposes and means of personal data processing and for ensuring that processing is conducted lawfully in accordance with applicable data protection law.

2. Scope of this policy

This policy applies to all personal data collected through the website diwaka.info, including data submitted through the contact form and data collected automatically through browser cookies and server logs. It does not apply to third-party websites linked from this website.

By using this website, you acknowledge that you have read this Privacy Policy. If you do not agree with the terms of this policy, you should not submit personal data through this website.

3. Data we collect

We collect the following categories of personal data:

Contact form data: When you submit the contact form, we collect your name, email address, subject, and the content of your message. You provide this data voluntarily. Submission of this data is not a legal or contractual requirement, but the form cannot be submitted without it.

Technical data: When you visit our website, our server and any analytics tools we use may automatically collect technical information including your IP address (in anonymized form where possible), browser type and version, the pages you visit, the time and date of your visit, and referring URL. This data is collected automatically and is used for the technical operation and security of the website.

Cookie data: We use cookies as described in our Cookie Policy. Your cookie preferences are stored locally in your browser.

4. Legal basis for processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

Legitimate interests (Article 6(1)(f) GDPR): Processing contact form submissions for the purpose of responding to enquiries. We have a legitimate interest in communicating with individuals who initiate contact with us. This basis is used only where our legitimate interest is not overridden by your interests or fundamental rights.

Consent (Article 6(1)(a) GDPR): Processing related to non-essential cookies, where you have given explicit consent through the cookie consent mechanism on this website. You may withdraw consent at any time by clearing your cookie preferences.

Legal obligation (Article 6(1)(c) GDPR): Where processing is necessary to comply with applicable Czech or EU law.

5. How we use your data

Contact form data is used solely for the purpose of responding to your enquiry. We do not use it for marketing purposes, we do not add you to any mailing lists, and we do not share it with third parties for commercial purposes.

Technical data is used for website operation, security monitoring, and understanding how the website is used in aggregate. It is not used to identify individual visitors for marketing purposes.

We do not make automated decisions or carry out profiling based on personal data collected through this website.

6. Data retention

Contact form data is retained for as long as necessary to respond to your enquiry and for a reasonable period thereafter in case of follow-up questions, typically no longer than 24 months from the date of last contact.

Technical log data is retained for a period necessary for security purposes, typically no longer than 12 months.

Cookie preference data is stored in your browser for up to 12 months, after which you will be asked to confirm your preferences again.

When data is no longer needed for its original purpose and there is no legal obligation to retain it, we securely delete or anonymize it.

7. Third parties and transfers

We do not sell personal data to third parties. We may share data with technical service providers who assist in operating this website (such as hosting providers) under appropriate data processing agreements. These providers are required to process data only on our instructions and in accordance with applicable data protection law.

We do not transfer personal data to countries outside the European Economic Area (EEA) unless appropriate safeguards are in place as required by Chapter V of the GDPR, such as adequacy decisions or Standard Contractual Clauses.

We may disclose personal data where required by Czech law, EU law, or by order of a competent authority.

8. Your rights

Under the GDPR and Act No. 110/2019 Coll., you have the following rights in relation to your personal data:

Right of access (Article 15 GDPR): You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data.

Right to rectification (Article 16 GDPR): You have the right to request correction of inaccurate personal data we hold about you.

Right to erasure (Article 17 GDPR): You have the right to request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected.

Right to restriction of processing (Article 18 GDPR): You have the right to request that we restrict processing of your data in certain circumstances.

Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, machine-readable format.

Right to object (Article 21 GDPR): You have the right to object to processing based on legitimate interests at any time.

Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request, as required by Article 12 of the GDPR. If we are unable to comply with a request, we will explain why.

You also have the right to lodge a complaint with the supervisory authority. In the Czech Republic, the competent supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, website: uoou.cz.

9. Cookies

This website uses cookies. Detailed information about the cookies we use, their purpose, duration, and how you can control them is available in our Cookie Policy. Essential cookies are used on the basis of legitimate interest in the technical operation of the website. Non-essential cookies are used only with your explicit consent.

10. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or disclosure, in accordance with Article 32 of the GDPR. These measures are reviewed and updated as necessary.

No method of transmission over the internet or electronic storage is entirely secure. While we take commercially reasonable steps to protect your data, we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or applicable law. The date of the most recent revision is shown at the top of this page. Where changes are material, we will take reasonable steps to draw them to your attention.

Continued use of the website after the publication of an updated policy constitutes acceptance of the revised terms.

12. Contact the controller

For any questions relating to this Privacy Policy, or to exercise your data subject rights, please contact:

Diwaka
Senovážné nám. 992/8
Praha, Czech Republic
Email: [email protected]
Phone: +420 244 401 147