Privacy Policy
What personal data we process, why, for how long, and what rights you have.
Version 1.0 · effective from 27 October 2026
Draft prepared before launch; a lawyer must review it. Items marked [TO BE ADDED] are still missing. English translation; the Czech version prevails.
1. Controller
The controller of your personal data is Martin Matúšek - MM Tire, Stupavská 1358/68, 901 01 Malacky, Slovak Republic, Company ID 56 856 911 (“we” or the “operator”), who runs the services under the MagnoHost brand.
Contact for data protection questions: podpora@magnohost.cz. We have not appointed a data protection officer, as the law does not require us to.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Slovak Act No. 18/2018 Coll. on the protection of personal data.
2. What data, why and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Customer account and provision of services | name, e-mail, address, company name and ID if applicable, login details (passwords are stored only as a hash), details of ordered services | performance of a contract (Art. 6(1)(b) GDPR) | while the account exists; after it is closed, up to 4 years for possible contractual claims |
| Payments and invoicing | invoice details, payment information (amount, date, status, payment ID) | legal obligation – accounting (Art. 6(1)(c) GDPR) | invoices and accounting records for 10 years from the end of the year they relate to |
| Support and complaints | content of requests, e-mails and complaints | performance of a contract and legal obligation (record of complaints) | while the account exists; complaints for 4 years after they are resolved |
| Withdrawal from contract | data from the withdrawal form (name, e-mail, contract identification, optional note), date and time sent | legal obligation (confirming and proving the withdrawal) | 4 years from sending |
| Security and abuse prevention | IP address, login and device details, technical logs | legitimate interest in securing the services (Art. 6(1)(f) GDPR) | technical logs usually up to 90 days [TO BE VERIFIED against actual settings] |
| Service e-mails | e-mail, content of notifications (invoices, payment reminders, service changes) | performance of a contract | record of sent e-mail for 90 days |
| Establishing and defending legal claims | data needed to recover amounts owed or defend a dispute | legitimate interest (Art. 6(1)(f) GDPR) | for the limitation period and any proceedings |
We do not send marketing messages and do not use data for profiling or automated decision-making.
Providing account and billing data is necessary to conclude the contract. Without them we cannot provide the service.
3. Data you store on the service
Data you upload to your server, website or bot (for example data about players or visitors) are processed by us as a processor only to the extent necessary to run the service. You are the controller of those data. The terms of processing are in Article 12 of the Terms and Conditions.
4. Who processes data with us
We share data only with those who need them to provide the services, and only to the necessary extent:
| Recipient | Role | Data location |
|---|---|---|
| Vercel Inc. | hosting of the public website | EU and USA |
| Neon Inc. | website database (content management, withdrawal form) | EU (Frankfurt) |
| Hetzner Online GmbH (Germany) | server rental: customer area, control panel and customers' servers | EU |
| OVH SAS (France) | server rental: customer area, control panel and customers' servers | EU |
| Contabo GmbH (Germany) | server rental: customer area, control panel and customers' servers; e-mail mailbox and sending e-mail | EU |
| Stripe Payments Europe, Ltd. | card payments (as an independent controller) | EU, possibly USA |
| GOPAY s.r.o. | payment gateway, if you choose it when paying (as an independent controller) | EU |
Payment gateways process card details themselves; we do not receive them. We also disclose data to public authorities where required by law and, where applicable, to an accountant or tax adviser bound by confidentiality.
Where data are transferred outside the European Economic Area (in particular to the USA), this is based on the European Commission's adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
5. How we protect data
Access to systems is protected by passwords and, for administration, two-factor authentication. Connections to the website, customer area and control panel are encrypted (HTTPS). Passwords are stored only as hashes. Only people who need access for their work have it.
6. Your rights
You have the right to:
- access – find out what data we process about you and obtain a copy,
- rectification of inaccurate data (you can correct most of them yourself in the customer area),
- erasure, if the data are no longer needed or are processed unlawfully; some data (such as invoices) must be kept by law,
- restriction of processing,
- data portability for data you provided to us and that we process on the basis of a contract,
- object to processing based on legitimate interest,
- lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, Bratislava, www.dataprotection.gov.sk. You may also contact the authority of the country where you live; in the Czech Republic this is the Office for Personal Data Protection, www.uoou.gov.cz.
Send requests to podpora@magnohost.cz. We will handle them without undue delay and within one month at the latest. To avoid disclosing data to someone else, we may verify your identity, for example by a reply from the e-mail address of your account.
7. Children
Our services are not intended for persons under 18. A minor may only use a service ordered by their legal guardian.
8. Cookies
The cookies we use are described in the Cookie Policy.
9. Changes
We update this policy when the way we process data changes. The current version is always on this page. We inform customers of material changes by e-mail. This policy is effective from 27 October 2026.