Who processes your data
The controller is our association, registered in the register of associations kept by the Regional Court in Plzeň, section L, file 10932. We have not appointed a data protection officer, as we are not required to – please contact us directly about anything.
- Spolek pro hrad Přimda
- náměstí Jindřicha Kolowrata 112, 348 06 Přimda
- Reg. no. (IČ): 22515879
- info@hradprimda.cz
What we process and why
We process only the data we really need. We never sell it or use it for advertising. We do not carry out automated decision-making or profiling.
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Replying to a message from the form or by e-mail | name, e-mail, phone (optional), topic and text of the message, IP address | legitimate interest in replying to you and protecting the form against abuse (Art. 6(1)(f) GDPR); if the message concerns a donation or cooperation, also steps prior to a contract (Art. 6(1)(b)) | backup of the message on the web server for 180 days; a pseudonymised hash of the IP address used to limit the number of messages for at most 2 days; the e-mail in our mailbox until the matter is settled, at most 2 years |
| Receiving and accounting for a donation | payer’s name, account number, amount, date, variable symbol and message to the recipient – from the association’s bank statement | legal obligation to keep accounts (Art. 6(1)(c)) and the donation agreement (Art. 6(1)(b)) | 5 years from the end of the accounting period under Section 31 of the Czech Accounting Act (No. 563/1991 Coll.); longer only if tax rules require it |
| Donation receipt for tax purposes and donor certificate | name, address, company registration number for companies, date of birth only if you give it to us, amount and date of the gift | handling your request within the donation relationship (Art. 6(1)(b)) | copy of the receipt as an accounting record for 5 years from the end of the accounting period |
| Thanking donors and handling questions about a gift | e-mail, phone | legitimate interest in thanking you and settling matters related to the gift (Art. 6(1)(f)) | 3 years from the last donation |
| Publishing your name in the list of donors on the website | name (we never publish amounts) | your consent (Art. 6(1)(a)) – you can withdraw it at any time by e-mail | until you withdraw your consent; we then remove your name from the website straight away |
| Secure operation of the website and its administration | technical session cookie; for logins to the website administration the user name entered, IP address, time and result of the attempt | legitimate interest in secure operation (Art. 6(1)(f)) | cookie until the browser is closed; login records 90 days |
| Web server access logs | IP address, time, page visited and browser details – recorded by the hosting provider on every visit | legitimate interest in operating and securing the website (Art. 6(1)(f)) | about 15 days – the hosting provider archives the logs daily and deletes older ones |
Where your data comes from
Most data you give us yourself – in a message, an e-mail or when you send us details for a donation receipt. Payment details (payer’s name, account number, amount, date, symbols and message to the recipient) come from the association’s bank statements at Raiffeisenbank a.s.
Providing your data is voluntary. Without an e-mail address, however, we cannot reply, and without your name and address we cannot issue a donation receipt.
Cookies
The website uses only strictly necessary cookies, which under Section 89(3) of the Czech Electronic Communications Act do not require consent – that is why there is no cookie banner. We do not use analytics, advertising or any other tracking cookies.
- PHPSESSID – set only on the Contact page to protect the form against abuse; valid until the browser is closed.
- sprava – login to the website administration (association administrators only); valid until the browser is closed, at most 12 hours.
Who receives your data
Your data is processed only by the members of the association who look after the records and correspondence, and by these recipients:
- ACTIVE 24, s.r.o., reg. no. 25115804, Sokolovská 394/17, Prague 8 – website and e-mail hosting (processor).
- Raiffeisenbank a.s. – the association’s bank account (independent controller).
- The tax office and other authorities – only where the law requires it.
The map on the Contact page
Fonts, styles and scripts are loaded from our own server, so nothing is sent to Google or other services when you visit. The only exception is the map on the Contact page from the OpenStreetMap Foundation (United Kingdom). It loads only after you click “Show map” – only then are your IP address and browser details passed to the map server. According to a decision of the European Commission, the United Kingdom ensures an adequate level of data protection. The map does not set cookies.
Your rights
You can ask us at any time to:
- give you access to your data – what we know about you and what we use it for,
- correct inaccurate data,
- erase data we no longer need or may no longer process (accounting records of donations must be kept for the statutory period),
- restrict processing,
- transfer the data you have provided to us,
- object to processing based on legitimate interest,
- withdraw your consent to the publication of your name – without affecting what was published before.
Complaints
If you believe we handle your data in breach of the rules, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz, or with the supervisory authority in your own EU country. We would be glad, though, if you contacted us first – we can sort most things out straight away.
For anything concerning your data, write to us at info@hradprimda.cz. We will reply without undue delay and within one month at the latest.
This policy applies from 1 October 2026.