Privacy policy
MĚSTSKÉ HOLUBNÍKY, z. s.
Effective from 25 October 2026
I. Introduction
MĚSTSKÉ HOLUBNÍKY, z. s. (hereinafter referred to as the "Controller", "we" or "us") respects the privacy of website visitors, customers, donors, volunteers and other individuals whose personal data we process.
This Privacy Policy explains what personal data we collect, why we process it, how long we retain it, with whom we may share it and what rights individuals have regarding their personal data.
We process personal data in accordance with:
Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR),
Czech Act No. 110/2019 Coll., on Personal Data Processing,
Czech Act No. 480/2004 Coll., on Certain Information Society Services,
Czech Act No. 127/2005 Coll., on Electronic Communications,
other applicable Czech and European Union legislation.
This Policy primarily applies to www.mestskeholubniky.cz, its online store, customer accounts, contact forms, newsletter, financial contributions and communications relating to the activities of the association.
II. Identity of the Data Controller
The Data Controller is:
MĚSTSKÉ HOLUBNÍKY, z. s.
Registered office: Jurečkova 1811/18, 702 00 Ostrava, Czech Republic
Identification Number: 23630175
Legal form: Registered association
Registration: Association Register maintained by the Regional Court in Ostrava, Section L, File 22181
Contact person: Michaela Klimšová
Telephone: +420 737 716 512
Email: info@mestskeholubniky.cz
Website: https://www.mestskeholubniky.cz
For questions concerning data protection or to exercise your GDPR rights, please contact us by email or write to our registered office.
III. Categories of Personal Data Collected
Depending on how you use our services, we may process the following categories of personal data:
1. Identification Data
First name, surname, business name and identification details of a business customer, where applicable.
2. Contact Information
Email address, telephone number, billing address and delivery address.
3. Order Information
Products purchased, quantities, prices, delivery methods, order status, purchase history and related correspondence.
4. Payment and Accounting Information
Payment amounts, bank transfer references, bank account numbers or payer names where included in payment records, and information required for accounting purposes.
Our online store accepts bank transfer payments. We do not require payment card information to process these payments.
5. Customer Account Information
Registration details, login email, information required to authenticate access, protected login credentials, account settings and order history.
6. Contact Form Information
Name, email address, telephone number, message subject, message content and other information voluntarily provided.
7. Volunteer and Collaboration Information
Name, contact details, city or location, preferred type of involvement and information included in a collaboration request.
8. Donor Information
Information about financial contributions, payment identification and details required for recording donations or issuing donation confirmations.
9. Newsletter Information
Email address, name where provided, subscription preferences and records of subscription or unsubscription.
10. Technical Information
IP address, date and time of access, browser and device information, website security and operational logs, cookies and similar technologies.
We process only personal data that is appropriate and necessary for the relevant purpose.
IV. Purposes and Legal Bases of Processing
1. Order Processing and Contract Performance
We process personal data to accept and confirm orders, receive payments, arrange delivery and communicate with customers.
Legal basis: Article 6(1)(b) GDPR – performance of a contract or steps taken prior to entering into a contract.
2. Accounting and Legal Obligations
We process billing, accounting and payment information to comply with applicable accounting, taxation and other legal requirements.
Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.
3. Customer Account Management
We process information necessary to create, maintain, secure and operate customer accounts.
Legal basis: Article 6(1)(b) GDPR – performance of the account service agreement.
4. Returns and Complaints
We process data needed to assess and resolve complaints, returns, refunds and related legal claims.
Legal basis: Article 6(1)(b), (c) and, where appropriate, (f) GDPR, depending on the processing activity.
5. Contact Forms and Communication
We use contact details and messages to respond to enquiries and collaboration requests.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in communication and handling enquiries; or Article 6(1)(b) GDPR where the communication relates to entering into or performing a contract.
6. Volunteering and Collaboration
We process information necessary to assess applications to participate in association activities and organise potential collaboration.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in managing association activities, or Article 6(1)(b) GDPR where contract-related processing is necessary.
7. Donations and Financial Support
We process personal data to record contributions, communicate with donors, issue relevant confirmations and fulfil accounting obligations.
Legal basis: Article 6(1)(b) GDPR where necessary for a donation agreement and Article 6(1)(c) GDPR for legal obligations.
8. Newsletter and Marketing Communications
We process contact information to send news about our projects, association activities, events and products.
For individuals who are not existing customers, the legal basis is generally consent under Article 6(1)(a) GDPR.
Where legally permitted, we may send existing customers information about our own similar products or services under Article 6(1)(f) GDPR and Section 7(3) of Czech Act No. 480/2004 Coll., provided that customers were offered an opportunity to object when their contact details were collected and in each subsequent communication.
9. Website Security and Legal Claims
We process necessary technical and related information to protect our website, prevent fraud, maintain system security and establish, exercise or defend legal claims.
Legal basis: Article 6(1)(f) GDPR – legitimate interests in security and the protection of legal rights.
10. Analytics and Marketing Technologies
Where we use non-essential analytics or marketing cookies, their storage and access require prior user consent. Any subsequent processing of personal data must also have an appropriate legal basis under the GDPR.
V. Newsletter and Electronic Communications
Visitors may subscribe to our newsletter through the subscription forms on our website.
The newsletter may contain information about urban pigeon lofts, association projects, public events, news and online store products.
Where subscription is based on consent, participation is voluntary and consent may be withdrawn at any time.
Every marketing newsletter must provide a simple, free way to unsubscribe, for example through an unsubscribe link or by contacting info@mestskeholubniky.cz.
Unsubscribing does not affect the processing of information necessary for existing orders, accounting or other legal obligations.
We retain records reasonably necessary to demonstrate consent, withdrawal or an objection to further communications.
VI. Recipients of Personal Data
We share personal data only with authorised recipients to the extent necessary for the relevant purpose.
Recipients or categories of recipients may include:
PPL – for the delivery of purchased goods, including recipient name, delivery address, telephone number, email address and parcel information.
Banks and Payment Service Providers – to process and identify bank payments.
Website Hosting and Technical Service Providers – for operating, maintaining and securing our website and online store.
Email and Newsletter Service Providers – to send order confirmations and permitted informational or marketing communications.
Accounting and Legal Service Providers – where necessary to comply with obligations or protect legal rights.
Public Authorities – where disclosure is required by applicable law.
Where a recipient acts as a data processor, appropriate contractual and security arrangements must be maintained under the GDPR.
We do not sell personal data for independent third-party marketing.
VII. Retention of Personal Data
We retain personal data only for as long as necessary for the relevant purpose or as required by law.
1. Order Information
For the duration of the purchase contract and subsequently for the period required for complaints, related claims and the protection of legal rights, generally up to three years after completion of the order unless a longer period is necessary.
2. Accounting and Tax Documents
For the period required by applicable legislation, generally five years from the end of the relevant accounting period for accounting documents. Longer statutory periods, such as ten years for certain VAT records where applicable, are respected.
3. Customer Accounts
For as long as the account exists. Following account closure, data is deleted or anonymised unless further retention is necessary for statutory obligations, existing contracts or legal claims.
4. Contact Forms and General Communication
For the time necessary to respond to the enquiry and generally up to twelve months after the last communication, unless a longer retention period is justified.
5. Volunteer and Collaboration Information
For the duration of communication and application assessment. Where collaboration begins, for its duration and the necessary period following its completion.
6. Donor Information
For the time required to record contributions, issue confirmations and comply with accounting, tax or other legal requirements.
7. Newsletter Data
For the duration of the lawful basis for sending newsletters, particularly until consent is withdrawn or the recipient unsubscribes. A minimal unsubscribe record may be retained to prevent further unwanted communications.
8. Security Logs
For as long as necessary for website security and incident investigation, generally from several days to a few months. Retention may be proportionately extended when an incident requires investigation.
VIII. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies are small data files or technical identifiers used to support website functionality.
We distinguish the following categories:
a) Strictly Necessary Cookies
These support functions such as shopping carts, user login, form security and technical settings.
Consent is not required to store cookies that are strictly necessary under the applicable electronic communications legislation. Any related personal data processing must have a valid legal basis under the GDPR.
b) Analytics Cookies
These may help us understand website traffic and improve our services. Non-essential analytics cookies require prior consent before they are stored or accessed.
c) Marketing Cookies
These may be used to measure advertising performance or customise marketing content. Where used, they are activated only after the visitor's prior consent.
Visitors must be able to refuse non-essential cookies as easily as they accept them and subsequently change or withdraw consent.
Information about the specific cookies used, their providers, purposes and lifetimes must reflect the technologies actually deployed and be available through cookie settings or a separate cookie information page.
Refusing non-essential cookies must not prevent the basic use of the online store.
IX. International Data Transfers
The use of certain external technical, communication or analytics services may in some circumstances involve transfers of personal data outside the European Economic Area (EEA).
Such transfers are permitted only where the conditions of the GDPR are fulfilled, including an applicable European Commission adequacy decision or appropriate safeguards such as Standard Contractual Clauses.
Details of actual recipients, destination countries and applicable transfer safeguards must reflect the services used and be provided to affected individuals before the relevant processing takes place.
X. Security of Personal Data
We adopt appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration and disclosure.
Access to personal data is restricted to authorised individuals who require it for their duties.
We seek to maintain appropriate protection of user accounts, authentication credentials and communication systems.
Security measures are proportionate to the nature of the personal data processed and the associated risks.
No method of electronic transmission or storage can guarantee absolute security. We therefore seek to prevent and appropriately respond to security incidents.
XI. Data Subject Rights
Subject to the requirements and limitations of the GDPR, individuals have the following rights:
Right of Access – to obtain confirmation of whether personal data is processed and, where applicable, access to that data.
Right to Rectification – to request correction of inaccurate personal data or completion of incomplete information.
Right to Erasure – to request deletion of personal data where the legal conditions are met.
Right to Restriction – to request restriction of processing in the circumstances specified by the GDPR.
Right to Data Portability – to receive eligible personal data in a structured, commonly used and machine-readable format.
Right to Object – to object to processing based on legitimate interests. Where personal data is processed for direct marketing, individuals may object at any time, and such processing must cease.
Right to Withdraw Consent – to withdraw consent at any time where processing is consent-based, without affecting the lawfulness of previous processing.
Rights Relating to Automated Decisions – to be protected against certain solely automated decisions producing legal or similarly significant effects, subject to the conditions of the GDPR.
Requests can be submitted to info@mestskeholubniky.cz.
We respond without undue delay, normally within one month of receipt. The period may be extended in accordance with the GDPR in more complex cases.
Where necessary, we may request reasonable verification of the applicant's identity.
XII. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you may contact us and request that the matter be resolved.
You also have the right to lodge a complaint with the competent supervisory authority.
Czech Data Protection Authority (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7, Czech Republic
Telephone: +420 234 665 111
Email: posta@uoou.gov.cz
Website: https://uoou.gov.cz
Your right to seek judicial remedies remains unaffected.
XIII. Provision of Personal Data and Automated Decision-Making
Certain personal data is necessary to process purchases, deliver goods, receive payments and comply with legal obligations.
If required information is not provided, we may be unable to process an order or enter into a purchase contract.
Customer account registration, newsletter subscription, general enquiries and offers of voluntary assistance are voluntary activities.
Our ordinary services are not intended to involve decisions based solely on automated processing that produce legal or similarly significant effects on individuals. If such decision-making is introduced, we will provide the information required by law concerning its operation and consequences.
XIV. Final Provisions
This Privacy Policy may be updated to reflect legal, technological or operational changes.
The current version is published at www.mestskeholubniky.cz.
Where significant changes in processing occur, we will inform affected individuals appropriately and as required by law.
This Privacy Policy is available in Czech, English and Spanish. All versions are intended to provide equivalent information concerning personal data processing.
This Privacy Policy takes effect on 25 October 2026.
Data Protection Contact
MĚSTSKÉ HOLUBNÍKY, z. s.
Jurečkova 1811/18, 702 00 Ostrava, Czech Republic
Telephone: +420 737 716 512
Email: info@mestskeholubniky.cz