Privacy policy
We process only the data we need to run the catalogue and to make your account work. We never sell it or use it for advertising. Below is an overview of what data that is, why we have it and how long we keep it.
Who processes the data
The data controller is the operator of aquaparky.info. For any privacy matter, contact us at [email protected].
What data we process
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Account: e-mail, first and last name, two-factor authentication setup | Sign-in, reviews, account security | Performance of a contract (Art. 6(1)(b) GDPR) | Until the account is deleted |
| Reviews: name, rating, text and uploaded photos | Publishing the review with a place | Performance of a contract (Art. 6(1)(b) GDPR) | Until the review or account is deleted |
| Reports from a place page: contact e-mail and name, message text | Handling the report or a profile-management request | Legitimate interest (Art. 6(1)(f) GDPR) | Until the report is handled; deleted afterwards on request |
| Sign-in attempts: e-mail and IP address | Protecting accounts against password guessing | Legitimate interest (Art. 6(1)(f) GDPR) | 24 hours |
| Traffic measurement (Google Analytics) | Finding out which pages people use | Consent (Art. 6(1)(a) GDPR) | As long as the cookies last, max. 2 years |
| Operational logs: application errors and requests | Running and securing the site | Legitimate interest (Art. 6(1)(f) GDPR) | Short term – the log folder is emptied on every deployment |
What we do not do
- We do not sell or hand over data for advertising.
- We do not send newsletters or marketing messages.
- We do not use advertising or remarketing cookies.
- We do not profile visitors for automated decision-making.
Who receives the data
Data reaches only the processors we cannot run without: our hosting provider (servers in Czechia), the e-mail provider for system messages, and Google Ireland Limited for traffic measurement – and only when you consent to measurement.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. You can withdraw your consent to traffic measurement at any time in the cookie settings.
We will delete your account and reviews on request – just write to [email protected].
If you are not satisfied with how we handled it, you can turn to the Czech Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz).
How we protect the data
The site runs over HTTPS, passwords are stored as argon2id hashes, names and two-factor keys are encrypted (AES-256-GCM), and only a signed-in administrator can reach the admin section.
Cookies
The list of cookies the site uses and the consent settings are on the page Cookie policy.
Last updated: 12 October 2026.