Legal
PRIVACY POLICY
Last updated: 25 September 2026
This notice explains how personal data is processed on the Koštovka website under the GDPR and related Czech law.
1. Data controller
The controller is Marek Dovičovič, Brno, Czech Republic. Contact email: marek@kostovka.cz.
2. Data we process
When you send an inquiry, we may process your name, email, phone number, event type, requested product, serving count, dietary requirements, event date, message content and technical information necessary to deliver the form securely. If you voluntarily provide information about allergies or health-related dietary needs, provide only the information necessary to prepare the order.
3. Purposes and legal bases
Data necessary to handle an inquiry is used to reply, prepare a quote and take steps at your request before a possible contract; if an order follows, it is also processed to perform that order. If you voluntarily provide health-related dietary or allergy information, it is processed only as needed to assess and prepare the requested product and on the basis of your explicit consent. You may withdraw that consent, which may make it impossible to assess a special dietary request safely. Technical logs may be processed on the basis of legitimate interests in website security and abuse prevention. Google Analytics is used only after consent to analytics.
4. Recipients and processors
Amazon Web Services may be used for hosting, API processing, email, storage and CDN services, and Google Analytics may be used after consent. These providers may act as processors or independent controllers within the scope of their services. Access to data is limited to people and services that need it for the stated purposes.
5. Transfers outside the EU/EEA
Some providers may process data outside the EU/EEA. Where that occurs, appropriate GDPR transfer mechanisms are used, such as an adequacy decision or Standard Contractual Clauses, depending on the current configuration of the service.
6. Retention
Inquiries that do not lead to an order are retained only as long as needed for communication and reasonable follow-up, typically no longer than 12 months unless there is a reason to keep them longer. Data connected with a completed order may be kept for periods required by accounting, tax or other legal obligations. Analytics retention follows the configured GA4 settings and your consent.
7. Your rights
You may request access to your personal data, correction or deletion, restriction of processing and, where the GDPR conditions apply, data portability. You may object to processing based on legitimate interests and withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
8. Complaint
If you believe your data is not being handled correctly, you can contact the controller or lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ).
9. Google Analytics
Google Analytics 4 loads on this website only after you explicitly consent to analytics. Until then, the analytics script does not load and the website does not send analytics data to Google through it. You can change your choice at any time using Cookie settings in the footer.
10. Security
The website uses HTTPS and cloud infrastructure with restricted access permissions. No internet transmission can be considered absolutely secure, so the amount of processed data is kept to the minimum required.
11. Privacy contact
Send privacy questions or requests to marek@kostovka.cz.