Privacy policy
We process only the data we need to run the catalogue and to make your account work. We never sell it or use it for advertising. Below is an overview of what data that is, why we have it and how long we keep it.
Who processes the data
The data controller is the operator of aquaparky.info. For any privacy matter, contact us at [email protected].
What data we process
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Account: e-mail, first and last name, two-factor authentication setup | Sign-in, reviews, account security | Performance of a contract (Art. 6(1)(b) GDPR) | Until the account is deleted |
| Reviews: name, rating, text and uploaded photos | Publishing the review with a place | Performance of a contract (Art. 6(1)(b) GDPR) | Until the review or account is deleted |
| Reports from a place page: contact e-mail and name, message text | Handling the report or a profile-management request | Legitimate interest (Art. 6(1)(f) GDPR) | Until the report is handled; deleted afterwards on request |
| Sign-in attempts: e-mail and IP address | Protecting accounts against password guessing | Legitimate interest (Art. 6(1)(f) GDPR) | 24 hours |
| Traffic measurement (Google Analytics) | Finding out which pages people use | Consent (Art. 6(1)(a) GDPR) | As long as the cookies last, max. 2 years |
| Operational logs: application errors and requests | Running and securing the site | Legitimate interest (Art. 6(1)(f) GDPR) | Short term – the log folder is emptied on every deployment |
What we do not do
- We do not sell or hand over data for advertising.
- We do not send newsletters or marketing messages.
- We do not use advertising or remarketing cookies.
- We do not profile visitors for automated decision-making.
Who receives the data
Your personal data is not shared or sold anywhere – it is used exclusively for the functionality of this website. All sensitive data is stored in an encrypted form in the database.
The only external tool is Google Analytics (Google Ireland Limited) for anonymous traffic measurement. Data about your visit is shared with Google only if you give conscious consent in the cookie bar.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. You can withdraw your consent to traffic measurement at any time in the cookie settings.
We will delete your account and reviews on request – just write to [email protected].
If you are not satisfied with how we handled it, you can turn to the Czech Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz).
How we protect the data
The site runs over HTTPS, passwords are stored as argon2id hashes, names and two-factor keys are encrypted (AES-256-GCM), and only a signed-in administrator can reach the admin section.
Cookies
The list of cookies the site uses and the consent settings are on the page Cookie policy.
Last updated: 12 October 2026.