Effective from 1 October 2026. Last updated: 1 October 2026.
This page explains what personal data aroundprague.cz (including its /en/ and /ua/ versions) collects, why, how long we keep it, who receives it and how you can exercise your rights.
The controller (správce) of personal data on aroundprague.cz and its language versions is:
We have not appointed a data protection officer (DPO), as Article 37 GDPR does not require one in our case. For any data question, write to [email protected].
We process data under the EU General Data Protection Regulation (GDPR, 2016/679), Czech Act No. 110/2019 Coll. on the processing of personal data, Act No. 127/2005 Coll. on electronic communications (cookies) and Act No. 480/2004 Coll. on certain information society services (newsletters).
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Any visit to the site | IP address, country, browser and device (user agent), page URL, referrer, time of the request; for the page view counter and banner click statistics: IP address and time of the view or click | running and securing the site, protection against attacks and bots | legitimate interest, Art. 6(1)(f) GDPR | web server logs and IP addresses in counters: up to 15 days; attack-blocking log: up to 5 weeks |
| Analytics (Google Analytics 4, Yandex Metrica) | cookie identifiers, IP address, pages viewed, clicks, device and browser data, approximate location | traffic statistics, improving the site | consent, Art. 6(1)(a) GDPR | Google Analytics: according to the Google Analytics settings, no longer than 14 months; Yandex Metrica: under Yandex's rules |
| Advertising (Google AdSense) and affiliate links (Impact and other affiliate programmes) | advertising cookies and identifiers, IP address, impression and click data | showing ads, tracking clicks on affiliate links | consent, Art. 6(1)(a) GDPR | under Google's and the affiliate networks' rules |
| Newsletter sign-up | email, date, IP address, sign-up page, language, user agent, confirmation status | sending the newsletter | consent, Art. 6(1)(a) GDPR | until you unsubscribe; unconfirmed sign-ups: up to 12 months |
| Push notifications | your browser's subscription endpoint and encryption keys, user agent, date | notifications about new articles | consent (browser permission) | until you unsubscribe; invalid subscriptions are deleted automatically |
| Consultation request (e.g. mortgage) | name, phone, email, city, employment, income, own funds, property price, comment, consent flag, IP address, user agent, date | passing the request to a mortgage adviser partner and contacting you | consent, Art. 6(1)(a), and steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR | 12 months from the date of the request |
| Advertising enquiry | name, company, email, phone, format, budget, comment, IP address | replying and preparing an offer | pre-contractual steps, Art. 6(1)(b) GDPR | 12 months from the date of the enquiry; if a contract is concluded, its documents are kept for the periods required by tax and accounting law |
| Job posting (/en/jobs/) or job feed | company, contact person, phone, email, website, address, submitter's contact, consent flag, IP address, user agent | publishing and moderating the vacancy, notifying the employer, translating the ad into English and Ukrainian | contract, Art. 6(1)(b) GDPR, and consent to publication | the vacancy is unpublished after 30 days; contact data is kept for up to 12 months after that |
| Adding a service to the directory (/en/uslugi/) | phone, WhatsApp, email, website, city, address, social media, submitter's contact, consent flag, IP address, user agent | publishing and moderating the listing | consent, Art. 6(1)(a), and contract, Art. 6(1)(b) GDPR | while the listing is published and for up to 12 months after it is removed |
| Real estate (/en/real-estate/): agencies and their agents | name, IČO, contact person, email, phone, logo, feed access data; for agents from the feed: name, phone, email, photo | publishing listings, translating them into English and Ukrainian, reports to the agency | contract, Art. 6(1)(b), and the agency's legitimate interest, Art. 6(1)(f) GDPR | agency data: for the duration of the cooperation and up to 12 months after it ends; agent data: while the listing is published |
| OAMP deadline reminder | email, case number, filing date, calculated deadline, language, IP address, date | reminder emails about the 60-day deadline | consent, Art. 6(1)(a) GDPR | until you unsubscribe, and no longer than 12 months after the deadline |
| Comments on articles | name or nickname, text, IP address, date | publishing and moderation, spam protection | consent, Art. 6(1)(a), and legitimate interest, Art. 6(1)(f) GDPR | while the comment is published; you can ask us to delete it at any time |
| Emails and messages to us | email, name, message content | replying, cooperation | legitimate interest, Art. 6(1)(f), or contract, Art. 6(1)(b) GDPR | as long as needed for the correspondence; emails related to a contract are kept for the periods required by tax and accounting law |
We do not sell personal data. We do not make automated decisions that have legal effects on you (Art. 22 GDPR). Ad personalisation is done by Google under its own rules (section 4).
Contact fields in job ads, directory listings and property listings are published on the site. Don't enter anything you don't want to be public.
Registration, sign-in and user profiles on the site have been discontinued. We are deleting the data of old user accounts (logins, emails, profiles), comments from the old comment system and submissions from old contact forms. They disappear from backups automatically within 9 weeks (section 9).
ap_liked_…, the comment anti-spam cookie apc_last), the record of your choice in the consent banner (Google cookies FCCDCF, FCNEC), a localStorage entry recording that you dismissed the push notification banner, the service worker cache. They work without consent because the site's features don't work without them._ga, _ga_*), Yandex Metrica (_ym_*). Only after you consent in the banner. Without consent, Yandex Metrica is not loaded, and Google Analytics runs in Google Consent Mode: no cookies are set and Google receives only technical signals without identifiers.The consent banner (a Google-certified platform using the IAB TCF standard) is shown to visitors from the EEA, the UK and Switzerland. Visitors from other countries do not see the banner, and analytics is enabled for them by default.
You can change or withdraw your consent at any time: open cookie settings. You can also delete or block cookies in your browser settings. To opt out of personalised Google ads, visit myadcenter.google.com.
Some recipients are in the USA. Transfers rely on the European Commission's adequacy decision on the EU–US Data Privacy Framework (for certified companies) or on the European Commission's standard contractual clauses.
Yandex Metrica transfers data to Russia. There is no European Commission adequacy decision for Russia: data protection there may be weaker than in the EU, and public authorities may have broader access to data. That is why Metrica is enabled only if you consent in the banner. If you don't, no data is sent to Yandex, and the site works in full.
You have the right to:
Send requests to [email protected]. We will reply within one month and may ask you to confirm that the request comes from you.
If you believe we are breaking data protection rules, you can complain to the Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, [email protected]. We'd appreciate it if you contacted us first so we can try to resolve the issue.
The site is not intended for children under 15. We do not knowingly collect their data through forms.
The site runs over HTTPS only. Access to the admin area, the servers and the database is limited to the controller and the technical specialists working on his behalf. Database backups are made once a week, stored on our server in Germany outside the public part of the site and deleted automatically within 9 weeks at the latest. This means deleted data may remain in backups for up to 9 weeks.
We may update this policy. The current version is always on this page, with the date of the last update at the top.