Privacy Policy

The controller is BodOpory, z. s., ID No. 29920221, with its registered office at náměstí Míru 1195/5, Vinohrady, 120 00 Prague 2 (hereinafter referred to as the "association" or "we").

Website: bodopory.cz
 Contact email for data protection: info@bodopory.cz

You can contact us with questions and requests by email or in writing at the address of our registered office.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR") and related Czech legal regulations.

We process only the data necessary for a specific purpose. We obtain it primarily directly from you. Technical data is also generated when using the website; payment information may be received from a bank or payment service provider.

If you contact us, we process your name, email, and possibly phone number and the content of the message so that we can respond and handle your request. If the inquiry concerns ordering a service or participating in an event, the legal basis is the negotiation prior to concluding a contract at your request pursuant to Article 6(1)(b) of the GDPR. For other common inquiries, the basis is our legitimate interest in handling communication pursuant to Article 6(1)(f) of the GDPR.

If you register for our event, course, support group, or other service, we process identification and contact details, data regarding the application, participation, and any payment. The purpose is to ensure your participation, provide the ordered service, and inform you of organizational changes. The legal basis is the performance of a contract pursuant to Article 6(1)(b) of the GDPR.

If you pay us for a service or provide a donation, we process the data necessary to record the payment, fulfill the contract, and possibly issue a confirmation. The legal basis is Article 6(1)(b) of the GDPR. We retain accounting and tax documents for the purpose of fulfilling legal obligations pursuant to Article 6(1)(c) of the GDPR.

To the necessary extent, we process data on mutual cooperation to resolve complaints, disputes, and protect legal claims. Our legitimate interest is the protection and enforcement of rights. To secure the website and resolve technical errors, the IP address, access time, and technical data about the request or device may be processed. Our legitimate interest is the secure and reliable operation of the website. The legal basis is Article 6(1)(f) of the GDPR.

If we offer a newsletter subscription and you sign up for it, we process your email and possibly your name based on consent pursuant to Article 6(1)(a) of the GDPR. You can cancel your subscription at any time via the link in the email or by sending a message to our contact email.

Please do not include details about your health status or other sensitive personal data in the standard contact form unless we explicitly ask you to do so via a suitably secured procedure.

If a specific program requires the processing of health data or other special categories of personal data, we will provide you with separate information regarding the scope, purpose, legal basis, recipients, and retention period before obtaining them. We will also ensure an appropriate processing condition pursuant to Article 9 of the GDPR.

For association membership, volunteer cooperation, programs for children, or the publication of photographs, we may provide additional information corresponding to the specific activity. These policies in themselves do not constitute consent to such processing.

The retention period depends on the purpose of processing:

After the expiration of the relevant period, we will delete the data or irreversibly anonymize it.

Data may be processed to the necessary extent by authorized persons of the association and suppliers who provide us in particular with hosting, website management, email services, event registration, accounting, or payments.

If a supplier acts as a processor, we conclude a personal data processing agreement with them. Banks and certain payment service providers may act as independent controllers for their own legal purposes.

We may also transfer data to public authorities if required by law, or to professional advisors to the necessary extent for the protection of rights.

We do not transfer your personal data outside the European Economic Area (EEA).

Cookies are small files stored on your device when visiting a website. Other technologies for storing or reading information on the device may also serve similar functions.

Essential cookies serve exclusively to ensure the transmission of communication or functions that you explicitly request. According to Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications, consent is not required for their use. If we process personal data during their use, the legal basis is, depending on the purpose, the performance of a contract or our legitimate interest in the secure operation of the website.

Analytical and marketing cookies, if used by the website, are activated only with your prior consent. The legal basis for the related processing of personal data is consent pursuant to Article 6(1)(a) of the GDPR.

You can reject optional cookies just as easily as you can accept them. You can change your choice or withdraw your consent at any time via the link to cookie settings. The withdrawal of consent does not affect the lawfulness of previous processing.

Embedded content from third parties, such as videos or maps, which requires consent to store or read information on the device, is loaded only after such consent is granted.

We use technical and organizational measures appropriate to the nature of the data and the risks of their processing. We restrict access to data to persons who need it for their work and ensure adequate security of the systems used and the duty of confidentiality.

Under the conditions of the GDPR, you have the right to:

You can send your request to info@bodopory.cz or to the address of our registered office. We will inform you about the handling of your request without undue delay, usually within one month at the latest. In justified cases, the period may be extended by another two months; we will inform you of the extension and the reasons for it during the first month.

In case of reasonable doubts about the identity of the applicant, we may request additional information necessary to verify it. We generally handle requests free of charge; exceptions are governed by the GDPR.

The supervisory authority in the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz. You can also lodge a complaint with another competent supervisory authority under the GDPR.

Providing data is generally voluntary. However, some data is necessary for handling your request, concluding and fulfilling a contract, or fulfilling a legal obligation. If you do not provide it, we may not be able to provide the requested service, participation, or issue a document.

In forms, we distinguish between mandatory and optional items. Neither consenting to the newsletter nor consenting to optional cookies is a condition for participating in our activities.

Effective date: 1.10.2026