Privacy Policy
Last updated: April 13, 2026
1. Data Controller
The data controller is the operator of the NajdiNabíječku.cz website.
Contact email: info@najdinabijecku.cz
2. What Personal Data We Collect
- Email address — when registering via magic link authentication.
- Charging station reports — data you voluntarily provide when reporting a new station (address, location, photos, notes).
- Notification subscriptions — your chosen notification preferences for new stations (city, radius, region).
- Technical data — IP address, browser type, operating system, and error logs (processed by Sentry and Cloudflare).
3. Processing Purposes and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Authentication and account management | Performance of a contract (Art. 6(1)(b) GDPR) |
| Sending notifications about new stations | Consent (Art. 6(1)(a) GDPR) |
| Processing reported stations | Legitimate interest (Art. 6(1)(f) GDPR) |
| Technical security and error monitoring | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Data Recipients
Your personal data may be shared with the following processors:
- Cloudflare, Inc. (USA) — website hosting (Cloudflare Pages), CDN, DDoS protection.
- Vercel, Inc. (USA) — hosting of the admin interface (CMS) and API functions.
- Neon, Inc. (USA) — database hosting (PostgreSQL, eu-central-1 region).
- Resend (USA) — sending transactional emails (magic link authentication, notifications).
- Sentry (USA) — application error tracking and logging.
- Google LLC (USA) — traffic measurement via Google Analytics 4 and Google Tag Manager. Only if you grant consent in the cookie banner (category "Analytics and performance cookies"). Google Consent Mode v2 ensures no identifiers are sent without consent.
All processors are contractually bound to comply with the GDPR. Data transfers to the USA are carried out under standard contractual clauses (EU SCCs) and/or the EU-US Data Privacy Framework.
We do not sell or share your personal data with third parties for marketing purposes.
5. Data Retention
- Account data — retained for the lifetime of the account. After account deletion, data is permanently removed within 30 days.
- Station reports — retained for the lifetime of the account; approved reports remain in the database as public data without personal data linkage.
- Notification subscriptions — until unsubscribed or account deleted.
- Technical logs — maximum 90 days (Sentry), per Cloudflare settings.
6. Your Rights
As a data subject, you have the following rights under the GDPR:
- Right of access — you can request a copy of your personal data.
- Right to rectification — you can request correction of inaccurate data.
- Right to erasure — you can request deletion of your data (right to be forgotten).
- Right to data portability — you can export your data in a machine-readable format.
- Right to withdraw consent — you can withdraw consent for notifications at any time by unsubscribing.
- Right to lodge a complaint — you have the right to file a complaint with the Czech Data Protection Authority (UOOU), www.uoou.cz.
To exercise your rights, contact us at info@najdinabijecku.cz. You can also export your data and delete your account directly from the My Account page.
7. Cookies and Tracking Technologies
NajdiNabíječku.cz uses cookies and similar technologies (localStorage) to ensure the website functions properly and — with your consent — to measure traffic. On your first visit, a cookie banner is displayed where you can choose which cookie categories to allow. Optional categories are disabled by default.
Cookie categories
| Category | Purpose | Default |
|---|---|---|
| Essential | Login session, cookie consent storage, basic website functions. | Always on |
| Analytics | Anonymized traffic measurement (Google Analytics 4). | Off |
| Preferences | Remembering preferences (dark mode, language). | Off |
| Marketing | Reserved for future use. No marketing cookies are currently active. | Off |
Specific cookies
| Name | Provider | Category | Expiration |
|---|---|---|---|
customConsent | najdinabijecku.cz | Essential | 365 days |
payload-token | najdinabijecku.cz | Essential | Session |
_ga, _ga_* | Google Analytics | Analytics | 2 years |
Google Analytics 4 and Consent Mode v2
We use Google Analytics 4 by Google LLC to measure traffic. The measurement uses Google Consent Mode v2, which means no identifiers or personal data are sent without your consent. If you do not grant consent for analytics cookies, Google Analytics will not collect any data about your visit.
If you grant consent, Google Analytics collects anonymized data about how you use the website (visited pages, session duration, country, device type, traffic source). IP addresses are automatically anonymized and not stored in full.
Consent management
You can change your cookie consent at any time by clicking
in the website footer or by deleting the customConsent cookie in your browser.
Withdrawing consent does not affect the lawfulness of processing based on consent given
before its withdrawal.
8. Changes to This Policy
This privacy policy may be updated occasionally. We will inform you about significant changes on this page and, if applicable, by email to registered users.