Privacy policy

1. Who is the controller

The controller of personal data is Petr Drahokoupil, Business ID (IČ) 02245132, registered address Ciolkovského 851/3, 161 00 Praha 6 – Ruzyně, Česká republika, e-mail info@impaku.com.

The controller has not appointed a data protection officer; no such obligation arises under Art. 37 GDPR. For any data protection matter, please write to the e-mail address above.

This notice describes processing under Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll., on personal data processing.

2. The starting point

The site has no registration and no user accounts. It stores no names, e-mail addresses or other identifying details of visitors, builds no profiles and sells no data to anyone.

No analytics or advertising measurement runs on the site without your consent.

3. What data we process and why

a) Technical request data. Each time a page loads, the hosting platform processes the IP address, browser type and version, referring page and time of the request. This serves to deliver the page, to maintain security and to guard against abuse. The legal basis is the legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR).

b) Traffic measurement. We use Google Analytics 4. It processes a pseudonymous identifier held in cookies, the pages visited, approximate location at city or region level, device type, language and traffic source. Measurement starts only after you give consent; the legal basis is consent (Art. 6(1)(a) GDPR in conjunction with Section 89 of Act No. 127/2005 Coll., on electronic communications). You may withdraw your consent at any time.

c) E-mail correspondence. If you write to us, we process your e-mail address and the content of your message so that we can reply and deal with the matter. The legal basis is the legitimate interest in handling correspondence (Art. 6(1)(f) GDPR), or compliance with a legal obligation in the case of claims and complaints.

The site does not process special categories of personal data and does not knowingly process children’s data.

4. Cookies and similar technologies

Before consent is given, only your consent choice is stored, and it is held in browser storage rather than in a cookie. That record never leaves your browser.

Analytics cookies are set only after consent. A full list, including names and lifetimes, is on the Cookies page; that is also where you can change your choice at any time.

5. Who we pass data to

Data is processed by the following processors, each under a data processing agreement:

• Vercel Inc. (USA) — hosting and delivery of the site. Processes technical request data.
• Supabase — the site’s content database, located in the European Union (region eu-central-1, Frankfurt am Main, Germany). The database holds encyclopaedic content, not visitor data.
• Google Ireland Limited (Ireland) — Google Analytics 4, only once consent has been given.

6. Transfers outside the European Union

Vercel Inc. and Google may also process data in the United States. Such transfers rely on the European Commission’s adequacy decision under the EU–US Data Privacy Framework of 10 July 2023, supplemented by standard contractual clauses under Art. 46 GDPR.

The site’s content database is stored exclusively in the European Union.

7. How long we keep data

• Technical hosting logs — for a short period, to the extent set by the provider’s configuration; typically in the order of days to weeks.
• Traffic measurement data — no longer than 14 months from the last activity, after which Google Analytics deletes it automatically.
• Cookie consent choice — 12 months in your browser, after which we ask again. You can delete it at any time by clearing the site’s data in your browser.
• E-mail correspondence — for as long as the matter is being dealt with and thereafter for as long as is necessary to defend legal claims.

8. Your rights

In relation to your personal data you have the right under the GDPR:

• of access to the data and to a copy of the data processed (Art. 15),
• to rectification of inaccurate data (Art. 16),
• to erasure (Art. 17),
• to restriction of processing (Art. 18),
• to data portability (Art. 20),
• to object to processing based on legitimate interest (Art. 21),
• to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)).

9. How to exercise your rights

Write to info@impaku.com. We will reply without undue delay and within one month at the latest; in complex cases that period may be extended by a further two months, of which we will inform you. Exercising your rights is free of charge.

Consent to analytics cookies can also be withdrawn without writing to us — through the “Cookie settings” link in the footer of every page.

Because the site stores no identifying details and measurement is pseudonymous, we may not always be able to identify a visitor; in that case we may, under Art. 11 and Art. 12(6) GDPR, ask you for additional information or refuse the request with an explanation.

10. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is Úřad pro ochranu osobních údajů (the Czech Data Protection Authority), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.

If you live in another Member State, you may contact the supervisory authority in your own country.

11. Automated decision-making and security

We carry out no automated decision-making or profiling producing legal effects for data subjects.

The site runs exclusively over an encrypted connection (HTTPS). Only the operator has access to content administration and to analytics data.

12. Minors

The site is a public encyclopaedia without registration and collects no data enabling identification. In the Czech Republic, a person over the age of 15 may give consent to the processing of personal data in relation to information society services on their own; we recommend that anyone younger does not consent to analytics cookies without the knowledge of their legal guardian.

13. Changes to this notice

We may amend this notice if the scope of processing or the tools used change. The current version is always on this page; the date of the last revision is shown beneath the heading.