Privacy Policy
Version 2.0 — effective date:
This policy explains what personal data vervantis.online collects, why, on what legal basis, how long we keep it and what you can do about it. It is written to satisfy Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). We have tried to keep it readable; if anything is unclear, ask us at info@vervantis.online.
The short version. We do not ask you to register, we do not run a shop, and we do not collect your name unless you write to us. Until you accept cookies through our banner we set nothing but a strictly necessary record of that choice. Fonts and images are served from our own server, so no third party sees your IP address simply because you opened a page here.
1. Who is the controller
The controller of your personal data, within the meaning of Article 4(7) GDPR, is:
- Controller
- Alexiv Company, s.r.o.
- Registered office
- Slavojova 108/8, Nusle, 128 00 Praha 2
Czech Republic - Company No. (IČO)
- 24197271
- Register
- Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 187762
- Contact for privacy
- info@vervantis.online
- Telephone
- +420 776 019 614
- Contact person
- Margaret Cook
We are not required to appoint a Data Protection Officer under Article 37 GDPR, and we have not appointed one. Privacy requests are handled by the contact above.
2. What we collect and why
The table below lists every category of data we process through this website, the purpose, the legal basis under Article 6(1) GDPR and how long it is kept.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Server log data IP address, date and time, page requested, HTTP status, referring URL, browser and operating system string | Delivering the page you asked for; keeping the server secure; detecting and blocking abuse, scraping and attacks | Art. 6(1)(f) — our legitimate interest in a functioning, secure website. You may object under Art. 21. | Up to 14 days, then deleted or truncated |
| Consent record your cookie choice and its timestamp, stored in your browser | Proving and honouring the choice you made in the cookie banner | Art. 6(1)(c) — legal obligation to demonstrate consent (Art. 7(1) GDPR); the storage itself is strictly necessary and needs no consent | 12 months, or until you clear it via "Cookie settings" |
| Analytics data pages viewed, time on page, scroll depth, approximate region, a pseudonymous identifier | Understanding which guides are read so we can improve them | Art. 6(1)(a) — your consent, given in the cookie banner. Never set if you decline. | Maximum 14 months |
| Advertising and affiliate data click identifiers such as gclid, msclkid and campaign parameters, cookie IDs set by our advertising and affiliate partners | Measuring whether our advertising works, and attributing a referral to the correct partner so they can be paid | Art. 6(1)(a) — your consent, given in the cookie banner. Never set if you decline. | Maximum 90 days |
| Correspondence your name, e-mail address, telephone number and whatever you write to us | Answering your question, handling a correction, or dealing with a legal request | Art. 6(1)(b) or (f) — responding to your enquiry; Art. 6(1)(c) where the law requires us to keep a record | 24 months after the matter is closed, or longer where a statutory retention period applies |
We never collect passwords, payment card details, government identity numbers, or any special category of data under Article 9 GDPR (health, religion, political opinions, sexual orientation, biometrics and so on). Please do not send such data to us.
You are under no statutory or contractual obligation to provide any personal data. You can read this entire website without providing any, and without accepting any optional cookie.
3. Cookies and similar technologies
Cookies, local storage and comparable identifiers are only placed on your device with your prior consent, except where they are strictly necessary to provide the service you asked for (Article 5(3) of Directive 2002/58/EC as implemented in Section 89(3) of Czech Act No. 127/2005 Coll.).
Nothing optional is loaded before you choose. The banner appears with every optional category switched off; rejecting is one click, exactly like accepting. You can change or withdraw your choice at any time through the Cookie settings link in the footer of every page. The full inventory is in our Cookie Policy.
4. Who we share data with
We do not sell personal data, and we do not share it except as set out here:
- Our hosting provider, acting as a processor under Article 28 GDPR, which stores the server logs described above on our instructions.
- Advertising and affiliate partners, but only if you consented to advertising cookies. These partners act as independent controllers or joint controllers for the data they collect through their own identifiers, and their own privacy policies apply to it.
- Analytics providers, but only if you consented to analytics cookies.
- Public authorities, where we are legally obliged to disclose data, for example in response to a valid order from a court or a supervisory authority.
- Professional advisers (lawyers, accountants) bound by confidentiality, where necessary to establish, exercise or defend legal claims.
Fonts, stylesheets, scripts and images on this site are served from our own server. Unlike many websites, we do not embed Google Fonts, a CDN, social media widgets or third-party trackers in the page, so opening a page here does not disclose your IP address to anyone other than us and our hosting provider.
5. Transfers outside the EEA
Our own processing takes place inside the European Economic Area. Some advertising and affiliate partners, if you consent to them, may process data in a third country including the United States. Where that happens the transfer relies on one of the safeguards in Chapter V GDPR:
- an adequacy decision of the European Commission (for example the EU–US Data Privacy Framework, for partners certified under it); or
- Standard Contractual Clauses adopted by the European Commission under Article 46(2)(c), combined with supplementary measures where needed; or
- your explicit consent to the specific transfer under Article 49(1)(a), having been informed of the possible risks.
You may request a copy of the relevant safeguards by writing to info@vervantis.online.
6. Automated decision-making
We do not carry out automated decision-making producing legal or similarly significant effects, and we do not profile you in that sense, within the meaning of Article 22 GDPR.
7. Your rights
If the GDPR applies to you, you have the following rights. Exercising them is free and we answer within one month of receiving your request (Article 12(3) GDPR), extendable by two further months for complex requests, in which case we will tell you.
- Access (Art. 15) — confirmation of whether we process your data, a copy of it, and the information in this policy.
- Rectification (Art. 16) — correction of inaccurate data and completion of incomplete data.
- Erasure (Art. 17) — deletion, where one of the grounds in Article 17(1) applies.
- Restriction (Art. 18) — to have processing paused while a dispute about accuracy or legitimate interest is resolved.
- Portability (Art. 20) — to receive data you provided, in a structured, commonly used, machine-readable format, where processing is based on consent or contract and is automated.
- Objection (Art. 21) — to object at any time to processing based on our legitimate interest. Where data is processed for direct marketing, you may object at any time and we must stop immediately, with no balancing test.
- Withdrawal of consent (Art. 7(3)) — to withdraw consent at any time, as easily as you gave it. Use the "Cookie settings" link in the footer. Withdrawal does not affect the lawfulness of processing before it.
- Complaint (Art. 77) — to lodge a complaint with a supervisory authority.
To exercise any right, write to info@vervantis.online with "GDPR request" in the subject line. We may ask for information to confirm it is really you, but only where we have reasonable doubts about your identity (Article 12(6)).
8. Complaining to a supervisory authority
Our lead supervisory authority is:
- Authority
- Úřad pro ochranu osobních údajů
(Office for Personal Data Protection) - Address
- Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
- Telephone
- +420 234 665 111
- Web
- uoou.gov.cz
If you live in another EU or EEA country, you may instead complain to the supervisory authority of your own country of residence or place of work, or of the place where you believe an infringement occurred.
9. Security
This website is served exclusively over HTTPS with modern TLS. We keep the server patched, restrict administrative access, and hold data only for as long as the retention periods above allow. No system is perfectly secure, but we take the measures appropriate to the risk, as Article 32 GDPR requires.
10. Children
This website is not directed at children. We do not knowingly collect personal data from anyone under 16, the age of digital consent in the Czech Republic under Section 7 of Act No. 110/2019 Coll. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Links to other sites
This site links to third-party websites, including advertisers and affiliate partners. Once you follow such a link, this policy no longer applies: the destination site decides for itself what it collects. Please read its privacy policy. We have no control over, and accept no responsibility for, the data practices of other operators.
12. Changes to this policy
We may update this policy, for example when we add a new partner or change a retention period. The version in force is always the one on this page, identified by the version number and effective date at the top. Where a change materially affects you — in particular where it requires new consent — we will show the banner again rather than rely on silence.