Privacy Policy

Last updated: February 15, 2026

1. Introduction and Scope

This Privacy Policy explains how we collect, use, and protect your personal data when you visit the Expatea website at expatea.cz ("Website").

Website visitors: This policy applies to you.

Service clients: If you use our services or have entered into any contractual relationship with us (including consultations, service provision, or any paid or unpaid engagement), the processing of your personal data is governed by our Framework Agreement.

We comply with applicable Czech data protection laws implementing the General Data Protection Regulation (GDPR).

For general terms governing your use of this Website and ordering of services, please see our Terms and Conditions.

2. About Expatea

Expatea is a registered business — IČO: 67454399 — operating under the name Expatea, represented by Aleš Nedomlel, registered in the Czech Republic (hereinafter "Data Controller").
Contact: [email protected]
Full contact and registration details are set out at the end of this policy.

3. Your Rights as a Data Subject

Under applicable Czech data protection laws, you have the following rights:

• Right of access: Request information about your personal data and how we process it
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data in certain circumstances
• Right to restriction of processing: Request limitation of processing in certain situations
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw your consent at any time for consent-based processing
• Right to data portability: Receive your data in a portable format where applicable

To exercise your rights: Contact [email protected]

To file a complaint:
Úřad pro ochranu osobních údajů (ÚOOÚ)
Pplk. Sochora 27, 170 00 Praha 7, Czech Republic
Website: www.uoou.cz
Email: [email protected]

4. Why We Process Your Data (Legal Bases)

We process your personal data based on the following legal grounds:

• Analytics cookies: Your consent provided via the cookie banner
• Server logs: Legitimate interest in maintaining security and preventing abuse
• Communications (emails, WhatsApp messages, contact form submissions, etc.): Legitimate interest in responding to inquiries and maintaining business relationships
• Newsletters and notifications: Your consent

5. How Long We Keep Your Data

• Session recordings (LogRocket): 30 days, then automatically deleted
• Server logs: Up to 2 months
• Self-hosted analytics: Raw data approximately 24 months; aggregated anonymous reports indefinitely
• Communications (emails, WhatsApp messages, contact form submissions, etc.): Typically up to 10 years from last contact, or as required by applicable law
• Newsletter subscriptions: Until you unsubscribe

You may request earlier deletion of your data, subject to legal retention requirements.

6. What Personal Data We Collect

6.1 Analytics (with your consent via cookie banner)

Session recording (LogRocket): Browser and device information, IP address, session recordings (clicks, navigation), approximate location (city/country level), referrer URLs.

6.2 Server Logs (essential for security)

IP addresses, browser type, operating system, timestamps, pages requested.

Self-hosted web analytics: Anonymized IP addresses, pages visited, browser and device information, visit duration, referrer information.

6.3 Communications

When you contact us via email, WhatsApp, or other means: Name, contact details, message content, and any information you voluntarily provide.

6.4 Newsletter and Notification Subscriptions

Contact details, consent records, communication preferences.

7. Data Sharing and International Transfers

7.1 LogRocket, Inc. (USA)

Session recording data is transferred to LogRocket, Inc. in the United States. LogRocket acts as our data processor under Standard Contractual Clauses ensuring adequate protection of your data. Sessions are automatically deleted after 30 days.

7.2 Server Logs and Analytics

Server logs and self-hosted analytics data are stored on EU-based server infrastructure and on our local systems in the Czech Republic. This data is not shared with third parties.

7.3 No Marketing Third Parties

We do not share your data with third parties for marketing purposes.

7.4 Legal Obligations

We may disclose your data if required by Czech law, court order, or other legal obligation.

8. Cookies

Our Website uses a cookie consent banner that allows you to accept or decline analytics cookies.

8.1 Analytics Cookies (require consent)

When you accept analytics cookies via our cookie banner, we activate LogRocket session recording to help us improve user experience.

8.2 Essential Cookies (no consent required)

Necessary for basic Website functionality.

8.3 Managing Your Cookie Preferences

You can change your cookie preferences at any time by:

• Clicking "Cookie Settings" in the footer of our Website to re-open the cookie banner and modify your choice
• Adjusting your browser settings to block or delete cookies

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted transmission (SSL/TLS), access controls, and secure storage. While we use industry-standard security practices, no internet transmission or electronic storage system is completely secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version is always published on the Website, together with the date of the most recent update. We encourage you to review this policy periodically.

11. Severability

If any provision of this Privacy Policy is found to be invalid, ineffective, or unenforceable, this does not affect the validity or effectiveness of the remaining provisions. Any such provision shall be replaced by a valid provision with the closest equivalent purpose and meaning.

12. Data Controller Details and Contact

Expatea
Aleš Nedomlel
IČO: 67454399
Registered address: Štrauchova 547, 50601 Jičín, Czech Republic
Email: [email protected]