Privacy Policy
Effective: 28 April 2026
This policy describes how BAVSE Collective s.r.o. processes personal data of visitors to bavse.eu in line with EU Regulation 2016/679 (GDPR) and Czech Act No. 110/2019 Coll.
I. Basic provisions
1. The data controller under Art. 4(7) GDPR is BAVSE Collective s.r.o., registered office at Nad Rybníčky 840/17, Kunratice, 148 00 Prague 4, Czech Republic, ID: 21932298, email: info@bavse.eu, phone: +420 723 907 747. 2. Personal data means any information relating to an identified or identifiable natural person. 3. The controller has not appointed a Data Protection Officer.
II. Categories of data processed
We only process data you have provided us, plus statistics: • Email address — if you subscribe to our newsletter. • Anonymous traffic statistics — Vercel Analytics aggregates page views, devices and referrers without cookies and without identifying individual visitors. • Google Analytics 4 — traffic measurement only after your consent (cookie banner). IP address anonymised. Consent can be withdrawn at any time by deleting the cookie or via browser settings. • Technical cookies — "NEXT_LOCALE" remembers your language; "bavse_consent" stores your cookie banner choices. Not used for tracking or profiling.
III. Legal basis and purpose
Legal basis: • Consent for sending the newsletter under Art. 6(1)(a) GDPR in conjunction with § 7(2) of Act No. 480/2004 Coll. — consent can be withdrawn at any time. • Legitimate interest of the controller in statistical evaluation of traffic and secure operation of the website under Art. 6(1)(f) GDPR. Purpose: • Sending commercial communications (newsletter). • Measuring traffic and improving website content. • Security and stability of the technical operation. The controller does not engage in automated individual decision-making or profiling within the meaning of Art. 22 GDPR.
IV. Recipients and data transfers
We share data only with processors necessary for the service: • Ecomail.cz s.r.o. (Czech Republic) — newsletter delivery. • Vercel Inc. (USA) — hosting and anonymous analytics. Workloads run in the EU region (Frankfurt). Any transfers to the US are covered by EU Standard Contractual Clauses (SCCs) and the Data Privacy Framework. • Google Ireland Ltd / Google LLC (USA) — only if you grant consent for analytics cookies. IP address is anonymised; Google Signals and ad personalisation are disabled. Transfers to the US covered by SCCs and the Data Privacy Framework. The controller does not transfer personal data to any other third parties.
V. Retention
The controller retains personal data: • Newsletter email — until you unsubscribe (link in every email) or withdraw consent. • Technical logs — for up to 30 days. After the retention period, the controller deletes the data.
VI. Your rights
Under the GDPR you have the right to: • access your personal data under Art. 15 GDPR, • rectify your data under Art. 16 GDPR, or restrict processing under Art. 18 GDPR, • erasure under Art. 17 GDPR, • object to processing under Art. 21 GDPR, • data portability under Art. 20 GDPR, • withdraw consent in writing or electronically to the email listed in Section I. You also have the right to lodge a complaint with the Czech Data Protection Authority (uoou.cz) if you believe your right to data protection has been violated. To exercise any of these rights, email info@bavse.eu — we will respond within 30 days.