Privacy policy

Effective from 14 September 2026

01Who processes the data

The controller of your personal data is Lukáš Horna, Company ID (IČO) 03892875, registered office Do čtvrti 1036/21, Modřany, 143 00 Praha 4, Czech Republic. Contact: info@pragueplus.cz.

I process personal data in accordance with EU Regulation 2016/679 (GDPR). This document summarises what I know about you, why and for how long.

02What data and why

• User account — name, e-mail and password. I need them to be able to give you access to purchased content (performance of the contract).
• Purchase — e-mail and order details (what you bought and when). They serve to deliver the content and to fulfil accounting and tax obligations. Payment is processed by the payment gateway — I have no access to your payment card details.
• Communication — when you write to me (a question, a complaint), I process your e-mail and the content of the message so that I can reply.

I do not collect any data beyond what is needed to run the website and handle your purchase. Apart from the measurement tools described in chapter 05 (which run only with your consent), I do not pass data to anyone for marketing, and there is no automated decision-making or profiling.

03How long I keep the data

• Account data — for as long as your account exists.
• Purchase data and tax documents — for the period required by accounting and tax regulations (generally 10 years).
• Communication — for the time needed to handle your request, at most 2 years.

04Who can access the data

I work with the data myself. Technically, the web hosting provider and the payment gateway operator take part in running the service; they process only what is necessary for their service. I do not transfer data to countries outside the EU — except for the measurement tools in chapter 05, which run only with your consent.

05Cookies and browser storage

Essential — the browser stores only technical data necessary for the website to work: your account sign-in, the contents of your cart, the places you have marked as visited and your cookie choice. Without them the website would not work; no consent is required for them and they are not sent to any server.

I measure basic traffic with Cloudflare Web Analytics. It stores no cookies or other identifiers in the browser and does not track you across websites — it only counts, in aggregate, how many people came, which pages they viewed, from which country and on what type of device. An individual visitor cannot be identified from this, so no consent is required here either.

In the cart I also count how many times people go through each step of the purchase (opening the cart, clicking “Buy”, clicking “Order and pay” and moving on to the payment gateway). Only a daily total per step and page language is stored — no IP address, e-mail or anything else that could tell who it was. This does not require consent either.

On your first visit, a card in the corner asks whether I may also use two further categories. Until you agree, none of them is loaded:

• Analytics — Google Analytics 4 (Google Ireland Ltd.). It shows me which pages people read, for how long and where visitors get stuck. The IP address is truncated. The _ga and _ga_* cookies last up to 2 years.
• Marketing — Meta Pixel (Meta Platforms Ireland Ltd.) and the Google Ads tag (Google Ireland Ltd.). They tell me whether a visit came from my ad and let me show ads to people who care about Prague. The _fbp and _gcl_* cookies generally last 3 months.

Your choice is remembered for a year and you can change it at any time via the Cookies link in the footer. Google and Meta may also process data outside the EU (in the USA); both companies participate in the EU–US Data Privacy Framework and use standard contractual clauses.

06Your rights

At any time you have the right to request access to your data, its correction or erasure, restriction of processing, data portability, and the right to object to processing. Just write to the e-mail above — I will reply within 30 days at the latest.

If you believe I am handling your data improperly, you can contact the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz) or the supervisory authority in your own EU country.

This document is a translation of the Czech Ochrana soukromí. In the event of any discrepancy, the Czech version prevails.