Effective and last updated: 12 August 2026
1. Who controls your personal data
The controller is the provider identified for the relevant service in the order, order confirmation, client account or invoice. Before a contract is concluded, the controller is the provider whose services are being requested. If this is not clear from the communication, we will route the request to the correct provider.
Michal Nováček
Havlíčkova 286, 664 01 Řícmanice
IČO: 09281720
Chillout Hosting & IT, s.r.o.
Havlíčkova 286, 664 01 Řícmanice
IČO: 21617236
Regional Court in Brno, Section C, File 139514
For questions and requests concerning your rights, use obchod@czechchillout.cz or a ticket in the client area.
2. What data we process and why
Order, account and service delivery
We process identification and contact details, account, order, service, configuration, pricing and payment information in order to take steps before entering into a contract and to perform it. A service cannot be provided without the information needed to create the account, deliver the service and issue the relevant document.
Billing and legal obligations
We process billing, accounting and tax information where required by law. For payments, we generally record the status, amount, method and payment reference; full payment-card details are processed by the selected payment gateway, not by Czech Chillout.
Support, operations and security
We process communications and tickets and technical data related to service operation, such as IP address, event time, service identifier, login and security events and resource usage. The legal bases are performance of the contract and our legitimate interests in securing the infrastructure, preventing abuse, handling incidents and protecting legal claims.
Optional features and marketing
Data from analytics, advertising and personalization technologies are processed only according to the choice made in the cookie settings. Linking a Discord account is optional and occurs only when initiated by the user. We send commercial communications only where permitted by law and provide an easy way to opt out.
We obtain data mainly from you, through your use of the website, client area and services and, where necessary, from payment and technical providers or public registers.
3. Who may receive the data
We do not sell personal data. To the extent necessary, data may be accessed by authorized personnel and providers of infrastructure, data centres, network protection and CDN services, billing and client systems, payments, banking, email and communications, server administration and professional advisers. We may also disclose data to public authorities where required by law. Analytics and advertising providers receive data only where the relevant consent has been given.
Some providers may process data outside the European Economic Area. Such transfers take place only where the GDPR conditions are met, for example on the basis of an adequacy decision or standard contractual clauses, depending on the provider.
4. How long we retain data
We retain data only for as long as necessary for the relevant purpose. Account and service data are processed for the duration of the contract and afterwards for the period needed to settle obligations, complaints and legal claims. Accounting and tax documents are retained for the statutory period. Tickets and operational or security logs are retained according to their relevance for support, security, incident response and legal claims, so the period may vary. The cookie choice record is retained for no more than 365 days unless changed earlier.
5. Your rights
Subject to the conditions set by the GDPR, you may request:
- access to and a copy of your personal data,
- rectification of inaccurate or completion of incomplete data,
- erasure or restriction of processing where the legal conditions are met,
- data portability for automated processing based on a contract or consent,
- object to processing based on legitimate interests,
- withdraw consent at any time without affecting the lawfulness of earlier processing.
We may reasonably verify the identity of the requester before handling a request. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, uoou.gov.cz.
6. Automated processes and customer data
The systems automate service provisioning, invoicing, reminders and technical changes to service status according to payment and the Terms and Conditions. This is not profiling or automated individual decision-making based on an assessment of the customer's personal characteristics.
Where a customer stores personal data of other persons through a hosting service and determines the purposes and means of that processing, the customer is responsible for it. The provider may act as a processor in relation to such data; where required by the nature of the service, the processing terms will be covered by a separate agreement.
7. Cookies and changes to this notice
Details of cookies and similar technologies are set out in our Cookie Policy.
We may update this notice if the services used, processing activities or legal requirements change. The current version and its effective date are published on this page.