← Back to Contact

Privacy Policy

Last updated:

1. Data Controller

MN Media s.r.o., registered at Varšavská 715/36, Vinohrady, 120 00 Praha 2, Czechia (IČO: 240 45 764), is the data controller responsible for the processing of your personal data.

You can contact us at .

2. What Data We Collect

When you use our contact form, we collect the following personal data:

  • Name — to address you personally in our response
  • Email address — to reply to your inquiry
  • Message content — the text you submit
  • IP address — temporarily, for rate limiting and abuse prevention
  • Timestamp — when the form was submitted

This website uses no cookies and no advertising or cross-site tracking services of any kind. We do keep anonymous statistics about how the site is used — what those contain, and why they are anonymous, is set out in section 3.

3. Website Analytics

So we can see which pages are actually useful, we keep basic statistics about visits to this website. They are collected by Plausible Analytics, which we run on our own server in Frankfurt, Germany. The statistics are not sent to Google, to Plausible's hosted service, or to any other third party — the data stays on infrastructure we control, inside the EU.

For each page view we record:

  • Page address — which page of this site was opened
  • Referrer — the website or search engine you arrived from, if any
  • Country — derived from your IP address at the moment of the visit
  • Browser, operating system, device type and screen-size category
  • Contact form submissions — counted as an anonymous event, so we know how many messages the form produces. It records only that a message was sent, never who sent it or what it said.

What makes these statistics anonymous:

  • Nothing is stored on your device. No cookies are set and no identifier is written to your browser, so there is nothing for you to accept or decline.
  • Your IP address is never stored. It is used momentarily to look up the country and to compute a one-way hash that lets us tell a returning page view apart from a new visitor within a single day. The hash cannot be reversed to an IP address, and the secret used to build it is discarded and replaced every 24 hours — so the same visitor cannot be recognised across two days, by us or by anyone reading the stored data.
  • No profiles and no cross-site tracking. We cannot follow you to other websites, and we do not attempt to work out who you are. The stored records describe pages, not people.

4. Purpose and Legal Basis

We process your personal data for the following purposes:

  • Responding to your inquiry — Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
  • Abuse prevention (rate limiting) — Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
  • Anonymous website statistics — Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in understanding how our website is used and improving it. Only the momentary handling of your IP address described in section 3 touches personal data; what we retain does not.

5. How We Process Your Data

When you submit the contact form, your message is delivered to our email inbox via a secure SMTP connection. So that no message is lost if delivery is briefly unavailable, the submission is first held in a delivery queue in our database and deleted automatically the moment it reaches our inbox — typically within seconds. Beyond this delivery step, messages are not stored in the database; they exist only in our email system.

For rate limiting and deduplication purposes, your IP address and a hash of your submission are temporarily stored in a database and automatically cleaned up.

6. Data Retention

  • Contact form messages: Retained in our email inbox for as long as necessary to handle your inquiry, then deleted.
  • Delivery queue: Deleted immediately once your message reaches our inbox (typically within seconds). If delivery fails, the queued copy is retained for up to 30 days so we can recover your message, then deleted.
  • Rate limiting data: Used only within a one-minute window and automatically deleted from the database within about a day.
  • Website statistics: Kept indefinitely, so that we can compare one period with another. As described in section 3, these records contain no IP address, no cookie, and no identifier that remains linkable to you after 24 hours.

7. Data Sharing and Transfers

This website and its analytics run on a server we control in Frankfurt, Germany, within the EU. Website statistics never leave it, and no analytics or advertising provider receives your data.

Contact form messages are delivered to our email provider, which may involve processing outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

8. Your Rights Under GDPR

Under the GDPR, you have the right to:

  • Access — Request a copy of your personal data
  • Rectification — Request correction of inaccurate data
  • Erasure — Request deletion of your data
  • Restriction — Limit how we process your data
  • Data portability — Receive your data in a machine-readable format
  • Objection — Object to processing based on legitimate interest

Contact us at — we will respond within 30 days.

9. Complaints

You have the right to lodge a complaint with the Office for Personal Data Protection of the Czech Republic (ÚOOÚ).

10. Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted transmission (HTTPS/TLS), rate limiting, and spam prevention.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.