1. Introductory Provisions

1.1. This Privacy Policy (hereinafter referred to as the "Policy") describes how Love production s.r.o. (hereinafter referred to as the "Administrator") processes the personal data of users of the website www.novaosmicka.cz (hereinafter referred to as the "Website") and is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

1.2. The Administrator processes personal data as a controller and is responsible for complying with personal data protection rules.

2. Purpose and Legal Basis for Data Processing

Purpose of processing	Legal basis (GDPR)	Category of data
A) Performance of a contract / Pre-contractual phase Purpose description: Handling inquiries, requests, and registration forms (including Google Forms), delivery of ordered services, and communication with the user for the performance of the contract.	Article 6(1)(b) GDPR	Identification and contact data
B) Legitimate interests of the Administrator Purpose description: Ensuring Website security, protection against abuse and spam (hCaptcha); Internal statistical analysis of traffic and user behavior (Google Analytics, Google Search Console, Microsoft Webtools) for Website optimization.	Article 6(1)(f) GDPR	Technical data (IP address, cookies, website behavior)
C) Consent of the data subject Purpose description: Targeted marketing, retargeting, and conversion measurement using tools (Facebook Pixel, Google Analytics) that are not essential for the operation of the Website.	Article 6(1)(a) GDPR	Marketing data (cookies for marketing)

3. Recipients and Processors of Personal Data

Webhosting provider: Active 24, s.r.o., which technically ensures the operation and storage of the Website.
Providers of IT, analytical, and marketing services:
- Google Ireland Limited (Google Analytics, Google Search Console, Google Forms, Google Tag Manager).
- Meta Platforms, Inc. (Facebook Pixel Code).
- Microsoft Corporation (Microsoft Webtools).
- hCaptcha (Intuition Machines, Inc.) for form security.
External advisors: Accounting, tax, or legal advisors, if necessary for the Administrator to comply with a legal obligation.

Transfer outside the EU:

Personal data is transferred to the USA (Google, Meta, Microsoft). This transfer is secured using Standard Contractual Clauses (SCCs) approved by the European Commission, which ensure an adequate level of protection.

4. Cookies and Tracking Technologies

4.1. The Website uses cookies and similar tracking technologies (e.g., Facebook Pixel, Google Analytics scripts). Cookies are small text files stored on the user's device.

4.2. Types of cookies:

Necessary (technical) cookies: These cookies are crucial for the proper functioning of the Website and are processed on the basis of a legitimate interest. They do not require your consent.
Analytical, marketing, and preference cookies: These cookies are used only with the prior explicit consent of the user , which is obtained through the implemented cookie bar (banner).

4.3. Cookie Management:

You can revoke or change your consent to analytical and marketing cookies at any time through the consent management tool (cookie bar) on our Website.

5. Rights of the Data Subject

As a data subject, the user has the following rights, which can be exercised by contacting the Administrator at the email address provided in Section 1:

Right of access: You have the right to obtain confirmation as to whether or not your personal data is being processed, and if so, to obtain a copy thereof.
Right to rectification: You have the right to have inaccurate or incomplete personal data concerning you rectified without undue delay.
Right to erasure (right to be forgotten) Right to erasure (right to be forgotten): You have the right to have your personal data erased if one of the reasons under Article 17 of the GDPR applies.
Right to restriction of processing: You have the right to restrict the processing of data in the cases set out in Article 18 of the GDPR.
Right to data portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller.
Right to object: You have the right to object at any time to processing based on legitimate interest.
Right to withdraw consent: If processing is based on your consent, you have the right to withdraw it at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint: You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (ÚOOÚ), with its registered office at Pplk. Sochora 27, 170 00 Praha 7.

PRIVACY POLICY