LEGAL INFORMATION
Privacy policy
Version 2.1 · effective from 1 January 2027 · Previous versions · This is a translation; the Czech version is legally binding.
1. Who processes the data
The operator of the MůjStavebník service and the controller of personal data is Michal Barvíř, company ID 10869409, with registered office at T. G. Masaryka 956, 517 21 Týniště nad Orlicí, Czech Republic, registered in the Trade Register. Data protection contact: info@mujstavebnik.cz. We are not required to appoint a data protection officer (we do not process data on a large scale or special categories of data as our core activity).
For data of website visitors, prospects, support users and customers' billing data we are the controller. For data that companies enter into the application (their employees, customers, suppliers, attendance, photos) the respective company is the controller and we are its processor – we process them only on its instructions and for the purpose of providing the service. The terms of this processing (Art. 28 GDPR) are Article 12 of the terms and conditions. If you are an employee or customer of a company that uses MůjStavebník, please exercise your rights primarily with that company; any request we receive will be forwarded to it without undue delay.
2. What data, why and on what legal basis
| Purpose | Data | Legal basis (GDPR) | How long |
|---|---|---|---|
| Contact form, demo, support chat | name, company, e-mail, telephone, message text | pre-contractual steps and legitimate interest in replying (Art. 6(1)(b) and (f)) | 3 years from the last communication, then the thread is deleted automatically |
| Account and provision of the service | name, e-mail, telephone, company details, role, login details (password only as a secure hash) | performance of a contract (point (b)) | for the term of the contract; afterwards 7 days of full access (only when it ends with the paid period), then 30 days read-only and export, deletion within 90 days of the end of the paid period at the latest (notice 30 and 7 days in advance) |
| Online subscription order and payment | e-mail, plan and period, company ID and name; after payment address, name and telephone; name and billing address entered on the payment page; payment and subscription identifier (we do not see card details) | performance of a contract (point (b)) | for the term of the contract and 3 years after it; an uncompleted order is refunded and cancelled after 30 days |
| Proof of consent to the terms and to automatic renewal | time, version of the terms, exact wording of the confirmed texts, hash of the IP address (not the IP address), browser | legitimate interest in proving the conclusion of the contract (point (f)) | for the term of the contract and 3 years after it ends |
| Invoicing | billing details, payments | legal obligation (point (c)) – tax regulations | 10 years from the end of the year the document was issued |
| Order reminders and subscription e-mails | e-mail, order and subscription status; log of sent e-mails without content (time, type, recipients, subject, result) | performance of a contract (point (b)); log – legitimate interest in proving delivery (point (f)) | as the order; e-mail log 12 months |
| Company directory – company profile | profile data (name, name of the entrepreneur, contacts, regions, trades, description, logo, photos, references) | performance of the contract with the advertiser (point (b)) | while published; after the listing ends or the company is deleted, the profile is hidden and deleted |
| “I want to advertise” request | company name, company ID, name, e-mail, telephone, town, regions, trades, message | pre-contractual steps (point (b)) | 1 year after it is handled unless a contract is concluded |
| Inquiry to a company from the directory | name, e-mail or telephone, description, optionally a photo, IP address hash against abuse | legitimate interest in forwarding the inquiry to the chosen company and protecting the form (point (f)); the company then processes it as controller | we do not store the content, we only forward it to the company; a record of sending without personal data for 400 days |
| Security of the service and support view | IP address, device, records of logins and changes (audit trail), record of a support view of company data | legitimate interest in protecting the service and data (point (f)) | 2 years, then deleted automatically |
| Server operating logs | IP address, time, requested address, browser | legitimate interest in security and operation (point (f)) | at most 1 month; e-mail queue 48 hours |
| Error records | technical description of the error, screen, app version (e-mails and numbers are removed automatically) | legitimate interest in the functioning of the service (point (f)) | 30 days after resolution, unresolved at most 180 days |
| Notifications to phone and browser | device identifier or browser subscription address and keys, type of notification | performance of a contract (point (b)) – switched on by the user | until the device is signed out or notifications are switched off |
| Operator messages to company users (service messages and service news) | name, e-mail, company and role, notification device, record of sending and of unsubscribing from news | service messages: performance of a contract (point (b)); service news: legitimate interest in informing customers about the service (point (f)) – news can be unsubscribed at any time via the link in the e-mail | for the lifetime of the account; the unsubscribe record for the duration of the contract |
| Establishing and defending legal claims | data from the contract and communication | legitimate interest (point (f)) | for the limitation periods |
Our legitimate interests are protecting the service and data against abuse (security records, protecting forms using an IP address hash), answering your questions, forwarding an inquiry to the chosen company and establishing or defending legal claims; you may object to processing on this basis. Providing data for the account and invoicing is a contractual and statutory requirement. We do not obtain data of the companies’ employees, customers and suppliers from them directly but from the company that entered them into the app (Art. 14 GDPR); we supplement company details from the public ARES register based on the company ID entered; we obtain inquiries from the directory and from the form on a company’s website from the person who filled them in. Backups of the whole service are kept only on the service’s server for 30 days; deleted data disappears from them when they are overwritten. We do not carry out automated decision-making or profiling with legal or similarly significant effects.
In addition to full backups, we keep a version history of each company’s data – automatic restore points from which the company’s data can be restored after a mistake (continuous, daily and weekly; by default 48 hours, 14 days and 8 weeks). We keep restore points only on the service’s server for at most 8 weeks; the operator may shorten this period but not extend it. Deleted data disappears from them after 8 weeks at the latest and from the full backups of the service no later than 30 days after that. When a company’s data is deleted after the contract ends, its restore points are deleted together with it.
3. Location during attendance
The app stores the phone's location only at the moment a worker records arrival or departure, together with accuracy, time and device. We do not track location continuously or determine it in the background. The employer as controller decides on the use of location for attendance and on informing employees; the employee can see their location for each record.
The user can also use the phone’s location to set the site location for a job. Company management sees the last recorded arrival location on the team map. The company as employer must inform employees in advance that attendance with location is switched on and of its purpose.
4. Who we share data with
We do not sell data or pass it on for marketing. We use only necessary processors bound by a data processing agreement and confidentiality; the current list with their names, registered offices and safeguards is on the Sub-processors page. Recipients by category:
- a hosting provider with registered office and servers in the Czech Republic – operation of the service and backups;
- an e-mail service provider with servers in the Czech Republic – system e-mails and e-mails that companies send to their customers;
- an e-mail provider chosen by the company itself – when a company connects its own e-mail in Settings, invoices, quotations and other documents are sent to its customers through that company's mail server, on its instruction and from its address. The company chooses this provider and has its own contract with it; we store the sign-in password only in encrypted form. Messages and attachments that a company's customer sends via the construction page are visible only to that company;
- notification delivery services of mobile platform and web browser operators – only the device or subscription identifier and a short generic notification text are passed on;
- a payment gateway – card payment of the subscription; card details are processed only by the gateway, which is an independent controller for payment transactions and fraud prevention;
- a language model provider – only when a company uses the interior design assistant; the request text and technical design data (dimensions, fittings) are passed on. Do not include personal data in the request. The provider is contractually bound not to use the data to train models and to keep it only as long as needed to provide the service and prevent abuse;
- address search and map services (a state service in the Czech Republic and an open map service in the United Kingdom) – converting a site address to a location and displaying maps; the entered address or the browser’s IP address is passed on;
- banks and tools that the company connects itself – only on the company’s instruction; the public ARES register – after a company ID is entered we load public company data (only the ID is passed on); public authorities where required by law.
5. Transfers outside the European Union
Notification delivery services, the payment gateway and the language model provider may process data in the United States, the open map service in the United Kingdom. Transfers to the USA take place on the basis of the European Commission’s adequacy decision (EU-US Data Privacy Framework) for certified recipients, otherwise on the basis of standard contractual clauses (Article 46 GDPR); to the United Kingdom on the basis of the Commission’s adequacy decision. The specific safeguard for each recipient is given in the Sub-processors list; we will send you a copy of the safeguards on request.
6. Your rights
You have the right of access to your data, rectification, erasure, restriction of processing and data portability. You may object at any time to processing based on legitimate interest. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing before it. Just write to info@mujstavebnik.cz; we will reply without undue delay and within one month at the latest, verifying that the request comes from you. Exercising your rights is free of charge.
Deleting your account. You can delete your MůjStavebník account yourself in the app: My account → Delete account → confirm with your password. An employee's or site manager's account and their sign-ins on all devices are deleted immediately; work and attendance records remain with the company, which must keep them as the employer. For a company owner, a request to cancel the account and the whole company is created; support completes it within 30 days and confirms by e-mail. Documents that the law requires to be archived (invoices) are kept for the statutory period. Without the app, simply write from the e-mail address the account is registered to, to the address given in section 1.
If you believe we process data in breach of the rules, you can lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Czech Data Protection Office), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the authority in your country of residence.
7. Security
Traffic runs exclusively over HTTPS, each company's data is separated, we back up daily, administrator access is protected by two-factor authentication and important changes are recorded in the audit trail. A security breach that could put your rights at risk will be reported to the authority within 72 hours and the persons concerned will be informed. More on the Security page.
Support views company data only to the extent necessary – at the company’s request, for security or for a legal reason –; at the company’s request it may also edit the data (without export or password changes), for at most 30 minutes, and every opening and change is recorded in the company history.
Traffic measurement
We measure website traffic with our own tool on our server, without cookies and without storing IP addresses (legitimate interest in improving the website, Art. 6(1)(f) GDPR). A visitor is distinguished only by a hash that changes every day; we store the pages visited, the domain you came from, device type, system, browser, approximate screen width, language and country based on the browser language. Detailed records are deleted after 30 days, aggregate figures after 25 months. Browsers set to Do Not Track or Global Privacy Control are not measured.
8. Cookies
We only use strictly necessary cookies and browser storage – details on the Cookies page.
9. Changes to this information
This information in version 2.1 applies from 1 January 2027. We update it when the processing or regulations change; we inform customers of significant changes by e-mail or in the app. Previous versions can be found in the archive.