Privacy Policy

This Privacy Policy (the "Policy") describes the collection, use, and further processing of personal data obtained through the web interface of, as well as all its subdomains, including the subdomains and (hereinafter collectively referred to as the "web" or "web interface").

Data Controller:

GARTAL Management a.s., with its registered office at Kovářská 2537/5, 190 00 Praha 9 - Libeň
CRN: 06667911
being a VAT payer
registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, File 23098

Contact details of Data Controller:

Postal address: Kovářská 2537/5, 190 00 Prague 9 - Libeň
Telephone number: (+420) 840 400 440, (+420) 246 031 364

The Policy is very important to us. Please read these Terms and Conditions, which contain important information regarding the processing of your personal data and related rights and obligations.


1.1. What is the legal framework for our handling of personal data?

We handle personal data in accordance with the laws of the Czech Republic and applicable European Union regulations, in particular, Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "Regulation"), Act No. 110/2019 Coll., on the processing of personal data, as amended, Act No. 127/2005 Coll., on electronic communications and on the amendment of some related acts (the Electronic Communications Act), as amended and Act No. 480/2004 Coll., on certain Information Society Services and on Amendments to some Acts, as amended.

1.2. What is personal data?

Personal data means any information that identifies or could identifie a particular individual. Personal data is in particular (but not exclusively):

  • identification data such as a name, surname and gender;
  • contact details such as phone number, email address;
  • other data such as cookie information, IP address (network identifier) including browser type, device and operating system, time and number of web interface accesses and other similar information.


2.1. How do we get your personal information?

You provide us with your personal information, especially by filling in our contact form or other form in the web interface. If there is any change in your personal information, please let us know.

When visiting and using the web interface, some personal data can be retrieved and stored through cookies. Read more about cookies in our Cookie Policy.

2.2. On what basis and for what purposes do we process your personal data?

  • Personal data entered upon request (in particular via the contact form) of our services may be processed without your express consent on the basis and for the purpose of concluding and fulfilling of the contract. Furthermore, we may process this data in accordance with our statutory obligations (in particular, record keeping, archiving of tax documents, etc.) and protection of our legitimate interests.
  • If you give us confirmation in the web interface, we are entitled to process your personal data entered into the web interface, especially when filling out a contact form or another form, for the purpose of sending business communications and direct marketing or for other purposes, with which you have explicitly agreed. If you are under the age of 15, you need permission from your legal representative. If we have doubts, we can ask you to confirm your age.
  • If personal data is processed through cookies, we process this personal data on the basis of and for the purposes of concluding and fulfilling the contract (only applies to necessary cookies) or with your consent (which you give in the relevant bar located on the web interface, without this consent it is not possible to collect these cookies), especially for the purposes of providing user support, improving our services, including analysis of user behavior and marketing. You can read more about cookies in our Cookie Policy.

We may use your personal information for any other purpose than that for which we obtained it, but only with your consent.

2.3. How long is the data kept for?

Personal data entered as part of request for our services is used only during the timeframe necessary to fulfill the contract (or until it is clear that the contract will not be concluded) and legal obligations, and to protect our legitimate interests.

If you give us explicit consent to the processing of personal data in accordance with the previous article, the data will be used for as long as our web interface operates or for the period specified in the consent.


3.1. The right to withdraw consent

If we process your personal data only based on your consent (ie without any other legitimate reason), you may withdraw this consent at any time.

The cancellation of consent to the processing of your personal data is possible at any time:

  • via e-mail sent to our contact e-mail address;
  • via our contact phone number;
  • in the form of a letter sent to our mailing address;
  • in the case of business communications – by the means specified in each email containing business communication (by clicking on the logout or other way).

Revocation of consent does not affect the legality of personal data processing carried out before the consent will have been revoked.

3.2. The right of access to personal data

You have the right to ask us whether we process your personal information. If we process your data, you have the right to access this personal data and, in particular, the following information:

  • purpose of processing;
  • the category of processed personal data;
  • the recipients or categories of recipients to whom personal data will be made available;
  • the length of time that personal data will be stored.

At your request, we will provide you with a copy of the processed data. For additional copies, we may charge you an administrative fee not exceeding the costs associated with making and forwarding these additional copies.

3.3. Right to correct personal data

If your personal data is inaccurate or incomplete, you have the right to request immediate correction, i.e. correcting inaccurate data and/or adding incomplete data.

3.4. The right to object to processing

You have the right at any time to object the processing of your personal data when it is processed for direct marketing purposes, including any automated processing of personal data. Once the objection has been raised, we will no longer process your personal data for these purposes.

3.5. The right to erasure ("the right to be forgotten")

You have the right to require us to delete your personal information if:

  • personal data is no longer needed for the purposes for which they were collected or processed;
  • you have revoked consent to processing;
  • you object to the processing of personal data;
  • your personal data was processed unlawfully.

If there are no legitimate reasons for our refusal to delete, we are obliged to comply with your request.

3.6. The right to limit processing

You have the right to request that we limit the processing of your personal data if:

  • you deny the accuracy of your personal information;
  • processing is unlawful and instead of deletion you are requesting a limitation of the processing of your personal data;
  • we no longer need your personal data for processing purposes, but you require it to identify, enforce or defend legal claims;
  • you object to the processing.

When we limit processing, we are only authorized to store your personal information; Further processing is possible only with your consent or for legitimate reasons.

If the processing of personal data is limited due to an objection to the processing, it will take some time for us to determine if we are legally bound to comply with your objection.

If the processing of personal data is limited due to a denial of the accuracy of the data, it is subject to limitation until the data accuracy is verified.

3.7. The right to data portability

You have the right to obtain your personal data you have provided to us in a structured, commonly used and machine-readable format, and to forward it to another Data Controller.

3.8. How can you invoke your rights?

You may invoke your rights in connection with personal information through our contact details. All information and actions will be provided to you without undue delay.

We make the most of your personal data protection. If you are not satisfied with our work in that field, you have the right to contact the competent authorities, in particular, the Personal Data Protection Office (, which supervises the protection of personal data. This provision does not prejudice your right to apply directly to the Office for the Protection of Personal Data directly with your complaint.

If your place of residence, place of employment or place of alleged violation of personal data is located outside the Czech Republic in another member state of the European Union, you can contact the relevant supervisory authority in that member state.


4.1. Who processes your personal data?

We are a personal data controller within the meaning of the regulation. To the extent necessary to meet the contract or other obligations, we are entitled to pass on your personal information to other persons, especially those involved in the performance of the contract or our obligations. Alternatively, we may assign other processors and recipients of personal information (e.g., web hosts). We will be happy to tell you, based on your query, who specifically processes your personal information.

Your personal data will not be transferred to countries outside the European Union unless it is necessary for the performance of the contract or for any other reason, in accordance with the rules of such transmission prescribed by the Regulation.

4.2. Joint administrators

Within GARTAL, your personal data is passed between companies and processed by GARTAL Management a.s. and GARTAL Real Estate and Development s.r.o. These companies are in the position of so-called joint administrators, as they coordinate with us the purpose and means of processing your personal data.

In the case of any privacy inquiries and the exercise of your rights, you may contact authorized persons via contact details specified in the header of these Terms and Conditions, which are common to all companies within the GARTAL group.

4.3. How do we process personal data?

Personal and other collected data is fully secured against abuse. Personal data will be processed in electronic form in an automated manner or in printed form, in a non-automated manner.


You can read more about cookies in our Cookie Policy.

This Policy is valid and effective from 01/01/2022.

In the event of a dispute as to the terms of this Agreement the Czech version shall prevail.