Legal
Privacy policy
How we handle your personal data under GDPR and Czech law.
Updated:
Controller
The data controller is Minotauro Group s.r.o., company ID 23962461, registered office Perucká 2587/12, Vinohrady, 120 00 Prague 2, Czech Republic, listed in the commercial register maintained by the Prague City Court ("we").
Contact us at info@minotauro.cz or +420 776 345 099.
What data we process
Only data you provide, or data generated by your visit to the site:
- Contact form - name, email, phone and the message you send.
- Communication - content of emails and phone calls related to your interest in an apartment.
- Technical data - IP address, device type, browser, pages visited, timestamps. Usually anonymised (GA4 IP anonymisation).
Why we process it (legal basis)
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Replying to contact-form inquiries | legitimate interest (art. 6(1)(f)) |
| Negotiation and conclusion of the sale contract | performance of a contract (art. 6(1)(b)) |
| Return call-backs | legitimate interest |
| Analytics (GA4, Microsoft Clarity) | consent (art. 6(1)(a)) - given via the cookie banner |
| Legal obligations (accounting, AML) | legal obligation (art. 6(1)(c)) |
Retention
- Inquiries without a signed contract: 12 months from the last communication.
- Data in concluded contracts: statutory retention periods (tax records 10 years, AML records 10 years).
- Analytics data: up to 14 months (GA4 default), anonymised.
Recipients
We don't transfer data outside the EEA. Processors we use:
- Google Ireland Limited - Google Analytics 4 (IP-anonymised, DPA in place).
- Microsoft Ireland - Microsoft Clarity (anonymised heatmaps).
- Cloudflare, Inc. - hosting / CDN / Turnstile spam protection (SCCs in place).
- Email providers and escrow agents - as needed for the sale (attorney/notary escrow, bank).
- Accounting and tax advisors - bound by confidentiality.
New processors are vetted for GDPR compliance before engagement. All processors operate under written data-processing agreements.
Your rights
As a data subject, you have the right to:
- access your data,
- rectify inaccurate data,
- erasure ("right to be forgotten") where legal grounds have lapsed,
- restrict processing,
- portability of data provided on consent or contract basis,
- object to processing based on legitimate interest,
- withdraw consent at any time (without affecting lawfulness of earlier processing),
- lodge a complaint with the Czech Data Protection Authority (uoou.cz).
Send any request to info@minotauro.cz. We reply within 30 days.
Cookies
See our separate Cookie policy for cookie-specific detail.
Security
We use standard technical and organisational measures - encrypted transport (HTTPS), access on need-to-know basis, data minimisation. We're not liable for misuse caused by your own actions (e.g. sharing credentials).
Changes
We may update this document. The current version is always available here; the last update date is shown beneath the title.