Legal information

Privacy Policy

We handle personal data the same way we work with clients — clearly, to the necessary extent, and with respect.

Who processes your data (the Controller)

The controller of personal data is Vít Mačuda, Company ID (IČ): 14143143, registered at Bílanská 2126/24, Kroměříž, 767 01, Czech Republic. The sole trader is registered in the Trade Licensing Register kept by the Kroměříž Municipal Authority.

This policy applies to the processing of personal data through the poboku.cz website. If you have any questions about data protection, you can contact us at: jdeme@poboku.cz.

What data we process, for what purpose, and for how long

We process personal data only to the extent necessary and for specific purposes:

Handling inquiries and customer communication

Data processed: First name, last name, email, phone number.
Legal basis: Processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Retention period: For the duration of the communication and up to 1 year after it ends.

Sending commercial communications (newsletters) and marketing offers

Data processed: First name, last name, email address, phone number.
Legal basis: Your explicit consent (Art. 6(1)(a) GDPR).
Retention period: Until you withdraw your consent (e.g. by clicking the unsubscribe link in an email).

Traffic analysis and ad targeting (Cookies)

Data processed: IP address, network identifiers (cookies), data about your behavior on the website.
Legal basis: Your explicit consent given through the cookie banner (Art. 6(1)(a) GDPR).
Retention period: Up to 13 months or until you withdraw your consent.

Who has access to your data (Processors and recipients)

To keep our website and services running smoothly, we rely on trusted partners who handle data according to our instructions:

Web hosting: Wedos
Email tool: Resend
Analytics and advertising platforms: Google, Meta Platforms, Seznam.cz, Microsoft, TikTok, LinkedIn, Imper CZ, s.r.o.

Transfers of data outside the EU (to third countries)

When using some of the services listed above (e.g. Google, Meta, Microsoft, TikTok, Resend), your personal data may be transferred to third countries, primarily the USA. This transfer is fully compliant with legislation, based on the European Commission's adequacy decisions (the Data Privacy Framework) and the application of standard contractual clauses.

Your rights

Under the GDPR, you have the following rights regarding your personal data, which you can exercise with us at any time:

Right of access: You can request information about what data of yours we process.
Right to rectification: If your data is inaccurate, you have the right to have it corrected.
Right to erasure ('right to be forgotten'): Under certain conditions, you have the right to request the deletion of your data.
Right to restriction of processing: You can ask us to temporarily stop using your data.
Right to data portability: You have the right to receive your data in a machine-readable format.
Right to object: If we process data based on legitimate interest, you can object to that processing.
Right to withdraw consent: You can withdraw your consent to receiving newsletters or to the use of cookies at any time.
Right to lodge a complaint: You have the right to contact the Office for Personal Data Protection (ÚOOÚ) if you believe we are not handling your data correctly.

This document is valid and effective as of 31 July 2026.