PRIVACY POLICY
We are aware that our visitors, users and others who visit our website (collectively, the “Users”) value their privacy. This document therefore contains important information about the rules we follow when processing personal data.
All processing of personal data on our part is always carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).
BASIC INFORMATION
Identification and contact details of the Provider:
| name: | Proactive Network z.s. |
|---|---|
| Company ID (IČO): | 09089209 |
| registered office: | Okružní 1288/15, Nová Ulice, 779 00 Olomouc, Czech Republic |
| contact e-mail: | proactivenetwork@gmail.com |
| contact phone: | +420775225425 |
(hereinafter also the “Provider”)
Data Protection Officer:
The Provider has not appointed a Data Protection Officer, as it is not required to do so under Article 37 GDPR.
Transfer of personal data to a third country or an international organisation:
The Provider does not transfer personal data to third countries or international organisations within the meaning of Article 44 et seq. GDPR.
Automated individual decision-making and profiling:
The Provider does not carry out profiling or automated individual decision-making.
Supervisory authority:
The supervisory authority at the Provider’s registered office is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, e-mail: posta@uoou.cz, tel.: +420 234 665 125.
Role of the Provider:
The Provider acts both as a controller and as a processor of personal data.
THE PROVIDER AS A CONTROLLER OF PERSONAL DATA
The Provider acts as a controller of personal data in relation to the personal data of the following persons: website visitors.
What personal data does the Provider process, for what purpose and on what legal basis?
Visiting the website. The Provider processes data obtained from natural persons when they visit the Provider’s website. When the website is visited, the Provider collects and processes the following types of personal data, which are stored: first name, surname, contact details: e-mail address, telephone number. The Provider further processes the following data: cookies, IP address, type of device. This data is necessary for the website to be displayed correctly. In addition, it may also be used, as needed, to maintain the secure operation of the website and for other purposes described in this Privacy Policy. The Provider processes this personal data on the basis of its legitimate interest or the User’s consent. Information about cookies is provided below.
If the User is a customer of the Provider, the Provider may, on the basis of its legitimate interest, send commercial communications – newsletters to the User’s e-mail address. In other cases, newsletters may only be sent on the basis of consent. Newsletters can be unsubscribed from at any time.
If the Provider intends to process any personal data other than that stated in this article, or for other purposes, it may do so only on the basis of validly given consent to the processing of personal data. Consent to the processing of personal data must be given in a separate document.
Information on the processing of personal data of the Provider’s employees is set out in a separate internal regulation.
Sensitive personal data
As a controller, the Provider does not process personal data of Users that fall within the special categories of personal data under Article 9 GDPR.
How long does the Provider process personal data?
Personal data is processed only for as long as there is a legal reason for keeping it; after that, the data is deleted without undue delay.
Personal data processed to fulfil obligations arising from specific legal regulations is processed by the Provider for the period laid down by the relevant legislation. This includes, for example, statutory data retention or documentation obligations, in particular obligations to retain data arising from civil, commercial or tax law. Once the obligation to retain the data ceases, the personal data will be deleted without undue delay.
Other personal data is processed for the duration of the contractual relationship with the User.
THE PROVIDER AS A PROCESSOR OF PERSONAL DATA
The Provider acts as a processor of personal data for other controllers.
The controller of this personal data is obliged to comply with all personal data protection rules laid down by the GDPR and other legislation governing this area. The Provider bears no responsibility for any breach of personal data protection rules by the controller of this personal data.
What personal data does the Provider process as a processor and what is the purpose of the processing?
The Provider processes the following personal data: identification details: first name, surname; contact details: e-mail address, telephone number; technical data from the website: cookies, IP address, device type (subject to consent).
The purpose of the processing is: improving the quality of our services and communication, sending informational or marketing communications (provided the data subject has given their consent), and website traffic analytics.
If the Provider becomes a processor of personal data falling within the special categories of data, the User is responsible for the lawfulness of obtaining and handling such data under the GDPR and national legislation. If the Provider finds that the conditions for processing special categories of personal data have not been met, it reserves the right to remove such personal data from its servers. Before deleting the personal data, the Provider will contact the User with a request for remedy.
How long does the Provider process personal data?
The Provider processes personal data for the duration of the contractual relationship with the User. After the contractual relationship ends, all data is deleted within 30 days of its termination. Users are entitled to request the deletion of their data at any time during the contractual relationship. Upon receiving a User’s request for deletion, the Provider will delete all data without undue delay.
RECIPIENTS OF PERSONAL DATA
The Provider does not transfer personal data to any other controllers.
The Provider does not transfer personal data to any processors of personal data.
DATA SECURITY
To protect Users’ data against unauthorised or accidental disclosure, the Provider uses reasonable and appropriate technical and organisational measures.
Where servers are located in a data centre operated by a third party, the Provider ensures that similar technical and organisational measures are also in place at that third party.
All data is stored only on servers located in the European Union or in countries that ensure the protection of personal data at a level equivalent to the protection provided by the legislation of the Czech Republic.
The Provider uses the following data security procedures: technical measures include the use of secure connections (HTTPS), firewalls and regularly updated antivirus software, encryption of sensitive information during transmission and storage, and secure access credentials for internal systems. Organisational measures include restricting access to personal data to authorised personnel only, instructing employees on data protection principles, and logging and regularly reviewing access activities.
USERS’ RIGHTS
Every User has:
- the right of access to personal data: The User has the right to obtain from the Provider confirmation as to whether or not personal data concerning them is being processed and, where that is the case, the right to access that personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients to whom the personal data has been or will be disclosed; d) the envisaged period for which the personal data will be stored; e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of its processing, or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) any available information as to the source of the personal data, where it is not collected from the Users; h) the existence of automated decision-making, including profiling. The User also has the right to obtain a copy of the personal data being processed.
- the right to rectification of personal data: The User has the right to have the Provider rectify, without undue delay, inaccurate personal data concerning them, or complete incomplete personal data.
- the right to erasure of personal data: The User has the right to have the Provider erase, without undue delay, personal data concerning them where: a) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; b) the User withdraws the consent on which the processing was based and there is no other legal ground for the processing; c) the User objects to the processing and there are no overriding legitimate grounds for the processing; d) the personal data has been processed unlawfully; e) the personal data must be erased to comply with a legal obligation under Union or Member State law; f) the personal data has been collected in relation to the offer of information society services. However, the right to erasure does not apply where the processing is necessary for compliance with a legal obligation, for the establishment, exercise or defence of legal claims, and in other cases set out in the GDPR.
- the right to restriction of processing: The User has the right to have the Provider restrict processing in any of the following cases: a) the User contests the accuracy of the personal data, for a period enabling the Provider to verify its accuracy; b) the processing is unlawful and the User opposes the erasure of the personal data and requests the restriction of its use instead; c) the Provider no longer needs the personal data for the purposes of the processing, but the User requires it for the establishment, exercise or defence of legal claims; d) the User has objected to processing, pending verification of whether the legitimate grounds of the Provider override those of the data subject.
- the right to object to processing: The User has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them that is processed on the basis of legitimate interest. In such a case, the Provider will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights of the Users, or for the establishment, exercise or defence of legal claims.
- the right to data portability: The User has the right to receive the personal data concerning them which they have provided to the Provider in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller where: a) the processing is based on consent, and b) the processing is carried out by automated means. In exercising the right to data portability, the User has the right to have the personal data transmitted directly from one controller to another, where technically feasible.
- the right to lodge a complaint with a supervisory authority: If the User believes that the Provider is not processing their personal data lawfully, they have the right to lodge a complaint with the supervisory authority. The contact details of the supervisory authority are given above.
- the right to be informed about rectification or erasure of personal data or restriction of processing: The Provider is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. The Provider will inform the User about those recipients if the User requests it.
- the right to be informed in the event of a personal data breach: Where a personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the Provider is obliged to communicate the breach to the User without undue delay.
- the right to withdraw consent to the processing of personal data: Where the processing of any personal data is based on consent, the User has the right to withdraw their consent to the processing of personal data in writing at any time by sending a withdrawal of consent to the e-mail address: proactivenetwork@gmail.com.
COOKIES
The Provider uses cookies, which are small text files that identify users of the Provider’s website and record their user activity.
The text in a cookie often consists of a series of numbers and letters that uniquely identify the User’s computer, but do not provide any specific personal data about the User. A cookie usually contains the name of the domain from which it was sent, information about its age and an alphanumeric identifier.
The Provider’s website automatically identifies the User’s IP address. All this information is recorded in a server log file, which allows the data to be processed subsequently. The Provider also records the browser request and the time of the request, the status and the amount of data transferred within that request. It also collects information about the browser and the computer operating system used and their versions. It further records the websites from which you came to the Provider’s website. The IP address of your computer is stored only for the time the website is being used and then for the necessary period. After that, the IP address is deleted or anonymised by shortening.
Types of cookies and similar technologies
Technical cookies and similar technologies: On the basis of its legitimate interest, the Provider uses technically necessary cookies, which are required for the operation of the website and to ensure its functionality. These may be persistent or session cookies. A persistent cookie remains on the hard drive even after the browser is closed. Persistent cookies may be used by the browser on subsequent visits to the Provider’s website. Persistent cookies can be deleted. Session cookies are temporary and are deleted as soon as the browser is closed. The Provider uses this data to operate the website, in particular to identify and resolve errors, to determine how the website is used and to make adjustments or improvements. These are purposes for which the Provider has a legitimate interest in processing the data under Article 6(1)(f) GDPR.
The User can set their browser to block these cookies. The Provider points out that in such a case some parts of the website will not work.
The Provider uses the WebStorage listed in the table below in the same way and for the same reasons.
With the User’s consent, the Provider also uses the following cookies:
Analytical cookies and similar technologies: These cookies help the Provider analyse how Users use the website. They may be used, for example, to measure and improve the performance of the website. These cookies make it possible, for example, to find out how the User arrived at the website – directly, via a search engine or through a link on a social network. The Provider also learns how long Users stay on the site and which links they click.
These cookies are set on the User’s device only if the User gives consent to this on their first visit to the website (under Article 6(1)(a) GDPR). Analytical cookies can be refused at any time by changing the Detailed cookie settings.
The Provider uses the WebStorage listed in the table below in the same way and for the same reasons.
Advertising cookies and similar technologies: Advertising cookies make it possible to display advertising based on the User’s preferences. They may be used, for example, so that the Provider can create a profile of the User’s interests and show the User relevant advertisements.
These cookies are set on the User’s device only if the User gives consent to this on their first visit to the website (under Article 6(1)(a) GDPR). Advertising cookies can be refused at any time by changing the Detailed cookie settings. If the User does not give consent, they will not receive content and advertisements tailored to their interests.
The Provider uses the WebStorage listed in the table below in the same way and for the same reasons.
Where applicable, other cookies / similar technologies, if listed in the table below.
To obtain and manage the User’s consent, the Provider uses the CookiesLišta.cz platform by Cookies lišta, s.r.o., ID: 17418640, Příčná 1892/4, Praha 1, 110 00 Prague, Czech Republic. The platform collects information about the device, information about the browser, the anonymised IP address, the date and time of the visit, the requested URLs, the path to the website and the geographical location. This makes it possible to inform the User about the Provider’s web environment and to obtain, manage and document their consent. The legal basis for the processing of the data is Article 6(1)(c) GDPR, as the Provider is required by law to provide proof of consent in accordance with Article 7(1) GDPR. The data will be deleted as soon as it is no longer needed for logging purposes and there are no statutory retention requirements. Further information on data protection at the platform provider can be found at: https://www.cookiesbar.io.
Third-party cookies may also be placed on the Provider’s website. The Provider uses the following cookies:
| Processor | Cookie name | Personal data | Purpose of processing | Legal basis | Processing period |
|---|---|---|---|---|---|
| Technical cookies / similar technologies | |||||
| Proactive Network z.s. | dcb_dsv | no | Version of consent to the processing of cookies. | legitimate interest | local storage / 365 days |
| Proactive Network z.s. | dcb_config | no | Configuration of consent to the processing of cookies. | legitimate interest | local storage / 365 days |
| Google LLC - 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | cookiePreferences | no | Registers the user’s cookie preferences. | user consent | 2 years |
| Analytical cookies / similar technologies | |||||
| Google LLC - 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | _ga | no | The main cookie used to distinguish unique users. | user consent | 2 years |
| Google LLC - 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | _ga_* | no | Used to persist the state of the current session (* is replaced by the unique container ID). | user consent | 2 years |
| Google LLC - 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | _gid | no | Used to distinguish users for daily statistics. | user consent | 24 hours |
| Google LLC - 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | _gat | no | Used to throttle the request rate to Google’s servers. | user consent | 1 minute |
| Microsoft Corporation - 1 Microsoft Way, Redmond, WA 98052, USA | _clck | no | Stores the Clarity user ID and preferences that are unique to the website and assigned to the same user ID. | user consent | 365 days |
| Microsoft Corporation - 1 Microsoft Way, Redmond, WA 98052, USA | _clsk | no | Connects multiple page views by a user into a single Clarity session recording. | user consent | 1 day |
| Microsoft Corporation - 1 Microsoft Way, Redmond, WA 98052, USA | CLID | no | Identifies the first time Clarity saw this user on any site using Clarity. | user consent | end of session (browser) |
| Microsoft Corporation - 1 Microsoft Way, Redmond, WA 98052, USA | ANONCHK | no | Indicates whether MUID is transferred to ANID, a cookie used for advertising. Clarity does not use ANID, so this is always set to 0. | user consent | end of session (browser) |
| Microsoft Corporation - 1 Microsoft Way, Redmond, WA 98052, USA | MR | no | Indicates whether to refresh MUID. | user consent | 7 days |
| Microsoft Corporation - 1 Microsoft Way, Redmond, WA 98052, USA | MUID | no | Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics and other operational purposes. | user consent | 365 days |
| Microsoft Corporation - 1 Microsoft Way, Redmond, WA 98052, USA | SM | no | Used in synchronising the MUID across Microsoft domains. | user consent | end of session (browser) |
Cookie settings in the browser
Most web browsers accept cookies automatically. However, it is possible to use controls that allow them to be blocked or deleted.
Instructions for blocking or deleting cookies in browsers can usually be found in the privacy policy or help documentation of the individual browsers.
FINAL PROVISIONS
The Provider will update this Privacy Policy in the event of any change. The current version of the Privacy Policy will always be available on the Provider’s website. If there is a material change in this Privacy Policy regarding the way personal data is handled, the Provider will inform Users by visibly publishing a relevant notice before implementing these changes.
Last updated: 6 October 2026