Privacy policy

Effective from 13 October 2026

Your privacy matters to us. This policy explains what personal data we process on vestragroup.cz, why, for how long and what rights you have. We follow Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll.

1. Data controller

The controller of personal data is Vestra Group s.r.o., Company ID 24087581, registered office in Prague, Czech Republic. Contact: info@vestragroup.cz, +420 607 050 045.

2. What data we process

  • Vestra account data: name, email, phone and an overview of your services in the individual divisions (e.g. subscription, listings, watchdogs). The account is shared by the Vestra Group websites – vestragroup.cz and vestrareality.cz. When you sign in on vestragroup.cz, we also record the time and method of sign-in.
  • When signing in with Google or Apple: the name and email the provider passes to us. We never see the password to your Google or Apple account.
  • Technical data: IP address, browser type and access time in server logs.
  • Data stored in your browser (see section 4).

3. Why we process data

  • Signing in and displaying your account overview – performance of a contract (Art. 6(1)(b) GDPR).
  • Answering your enquiries and communicating with you – performance of a contract or our legitimate interest.
  • Secure operation of the website and protection against misuse (server logs) – legitimate interest (Art. 6(1)(f) GDPR).
  • Compliance with legal obligations, e.g. accounting and tax (Art. 6(1)(c) GDPR).
  • Analytics and marketing cookies – only with your consent (Art. 6(1)(a) GDPR). We do not use them yet.

4. Cookies and browser storage

vestragroup.cz does not use advertising or tracking cookies. In your browser's storage it keeps only data necessary for the site to work: your chosen language, your choice in the cookie bar, your account sign-in (a security token) and technical display data (which intro film and background were shown).

We load fonts from our own server, not from Google. You can change your choice at any time via the “Cookie settings” link in the website footer and delete stored data in your browser settings.

5. Who we share data with

  • Hostinger International Ltd. – provider of the website hosting and the account server.
  • Google Ireland Limited and Apple Distribution International Ltd. – only if you choose to sign in with their account.
  • Public authorities – only where required by law.

We do not sell your data or pass it to third parties for marketing purposes.

6. How long we keep data

  • Account data for as long as the account exists; after it is closed we delete it unless we are required by law to keep it.
  • Server logs only for as long as necessary for secure operation.
  • Data in browser storage until you delete it yourself.

7. Your rights

  • The right of access to the data we process about you.
  • The right to rectification of inaccurate or incomplete data.
  • The right to erasure (“to be forgotten”) and to restriction of processing.
  • The right to data portability and the right to object to processing.
  • The right to withdraw your consent at any time.
  • The right to lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.gov.cz).

8. Contact

For questions about the processing of personal data or to exercise your rights, contact: Vestra Group s.r.o., email info@vestragroup.cz, phone +420 607 050 045.