Privacy Policy

Personal Data Controller

The website operator and personal data controller is Eva Renda Pfister, ev.č. 24, 690 02 Břeclav, Czech Republic.

What data we process

We only collect data that you actively provide to us: name, e-mail, subject and content of the message via the contact form; cookie preferences (consent / rejection); pseudonymized traffic data via Google Analytics (only with your consent). For administrators logged in via Google OAuth, we store their Google ID, e-mail, and name.

Purpose of processing

We use the data from the contact form exclusively to answer your inquiries and communicate with you. Analytical data helps us understand how the website is used and what we can improve. Administrator authentication ensures secure access to the content management system.

Retention period

We retain messages from the contact form and the cookie consent log for the duration of the website's operation; we delete them upon request for erasure. Google Analytics: 14 months (default GA retention). Operational audit log: for the duration of the website's operation. Administrator accounts: for the duration of active access; deactivated accounts are deleted manually by the administrator upon request.

Transfer to third parties

The website uses the following external services: Google Analytics (GA4) — pseudonymized visitor analytics (only with your consent); Google OAuth — administrator authentication; Gemini API (Google LLC) — content processing, translations, and analysis of uploaded photos during website administration (administrators); OpenStreetMap Nominatim — reverse geocoding of GPS location when uploading photos from the mobile application; Active24 a.s. — web hosting, server in the EU. With the exception of these providers, we do not provide your data to any other third party.

Your rights

Under the GDPR (EU Regulation 2016/679, Articles 15–22), you have the following rights:

• Right of access — you can request information about what data we process about you.
• Right to rectification — if the data is incorrect or incomplete, we will correct it.
• Right to erasure (“right to be forgotten”) — you can request the deletion of your data.
• Right to restriction of processing — you can restrict how we use your data.
• Right to data portability — upon request by email to privacy@dukesofthesouth.eu, we will provide you with your data in a machine-readable format.
• Right to object — you can object to the processing at any time.

Cookies

The website uses functional cookies for its operation and (with your consent) analytical cookies for Google Analytics. You can change your cookie preferences at any time via the banner at the bottom of the page or by clearing cookies in your browser.

Contact for GDPR inquiries

To exercise your rights or for questions regarding data protection, please contact us by e-mail (see below) or via the contact form. We will respond within 30 days of receiving your request.

Email: privacy@dukesofthesouth.eu