Privacy Policy
Last updated:
1. Data Controller
MN Media s.r.o., registered at Varšavská 715/36, Vinohrady, 120 00 Praha 2, Czechia (IČO: 240 45 764), is the data controller responsible for the processing of your personal data.
2. What Data We Collect
When you use our contact form, we collect the following personal data:
- Name — to address you personally in our response
- Email address — to reply to your inquiry
- Message content — the text you submit
- IP address — temporarily, for rate limiting and abuse prevention
- Timestamp — when the form was submitted
We do not use cookies for tracking or analytics. We do not use any third-party analytics, advertising, or tracking services on this website.
3. Purpose and Legal Basis
We process your personal data for the following purposes:
- Responding to your inquiry — Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
- Abuse prevention (rate limiting) — Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
4. How We Process Your Data
When you submit the contact form, your message is sent directly to our email inbox via a secure SMTP connection. The message is not stored in a database — it exists only in our email system.
For rate limiting and deduplication purposes, your IP address and a hash of your submission are temporarily stored in a database and automatically cleaned up.
5. Data Retention
- Contact form messages: Retained in our email inbox for as long as necessary to handle your inquiry, then deleted.
- Rate limiting data: Stored in a database and automatically cleaned up after a short time window (typically under 1 minute).
6. Data Sharing and Transfers
Your data is processed using cloud infrastructure that may involve transfers outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).
We do not sell, rent, or share your personal data with third parties for marketing purposes.
7. Your Rights Under GDPR
Under the GDPR, you have the right to:
- Access — Request a copy of your personal data
- Rectification — Request correction of inaccurate data
- Erasure — Request deletion of your data
- Restriction — Limit how we process your data
- Data portability — Receive your data in a machine-readable format
- Objection — Object to processing based on legitimate interest
8. Complaints
You have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic (ÚOOÚ).
9. Security
We implement appropriate technical and organizational measures to protect your personal data, including encrypted transmission (HTTPS/TLS), rate limiting, and spam prevention.
10. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.