Privacy & cookies

Last updated: October 2026

1. Data controller

The controller is responsible for the processing of personal data in connection with the operation of this website and communication with visitors and customers of the centre.

2. What data we process and why

Enquiries and communication

When you contact us by e-mail or via links on this website, we process the data you provide (typically your name, e-mail address and the content of your message) in order to handle your enquiry. The legal basis is our legitimate interest in responding to you, or the performance of a contract and pre-contractual steps.

Contact form

When you write to us using the “Write to us” form on the Contact page, we process your name, e-mail address, phone number (if you choose to provide it) and the text of your message. The website does not store messages – they are delivered by e-mail to the centre's mailbox, and we use the data only to handle and answer your enquiry. The legal basis is our legitimate interest in responding to your message, or pre-contractual steps (e.g. for a leasing enquiry). To protect the form against misuse, it uses a technical session cookie that expires when you close your browser.

Website analytics

We use Plausible Analytics for anonymous visitor statistics. The measurement is cookieless – it uses no cookies, creates no profiles and does not identify individuals; data is processed within the EU. We only collect aggregate, non-personal data (e.g. visit counts, pages viewed, device type, traffic source). The legal basis is our legitimate interest in improving the website.

Technical logs

Our hosting provider may process technical server logs (e.g. IP address and access time) for security and operational stability.

3. Cookies

This website uses no advertising or tracking cookies and does not track you across other websites. Visitor measurement via Plausible works without cookies.

We only use essential browser storage – for example to remember your choice in the privacy banner so that it is not shown repeatedly. You can change this choice at any time by clearing the site data in your browser.

Our forms (gift card orders and “Write to us”) also use a technical session cookie that protects submissions against abuse and expires when you close the browser.

4. Who we share data with

We do not rent or sell personal data. We use vetted processors who act only on our instructions:

• Hosting provider – operation and security of the website.
• Plausible Analytics – anonymous visitor measurement (EU).

The map of the surrounding streets is based on data © OpenStreetMap contributors.

5. Retention

• Enquiries and communication – for as long as necessary to handle them, and a reasonable period thereafter.
• Contact form – for as long as it takes to handle your enquiry and any follow-up communication, at most 1 year from when the message was sent.
• Visitor statistics – in aggregate, non-personal form only.

6. Your rights

Under the GDPR you have, in particular, the right to:

• access your data and obtain a copy,
• rectification of inaccurate data,
• erasure ("right to be forgotten"),
• restriction of processing,
• object to processing based on legitimate interest,
• data portability,
• withdraw consent (where processing is based on consent).

To exercise your rights, contact us at info@galerieteplice.cz. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz).

7. Changes to this policy

We may update this policy from time to time. The current version is always available on this page with the date of the last update.