Privacy

Who is responsible

The data controller is Magda Míčová, Business ID (IČO): 87717611. Registered business address: Na Labišti 524, Polabiny, 530 09 Pardubice, Czechia. Contact: info@cestoteka.cz.

Free downloads

The free Autumn PDF and public samples can be downloaded without registration, an email address or payment. Hosting access records may still be created when you visit a page or request a file.

Paid orders

For a paid order we collect your name, email, residential country, street address, city and postcode, the guide and version you chose, and an optional first name for the guide. We record the price in EUR (normally €12.90 for a guide, or the reduced first-order total if a welcome code applies), the order date, the order number, and your acknowledgement of our terms and this privacy notice. Please do not include dates of birth, photographs or other sensitive information about a child.

We use these details to fulfil the contract, talk to you about the order and send the correct PDF. Payment is by bank transfer in euros only. We record manually confirmed payments, bank references, refunds and cancellations for accounting and our internal sales records. Magda Míčová is not a VAT payer; the price shown is the total you pay — Czech VAT is not added. These records do not change the price on their own.

Approximate connection country

The server may derive an approximate country from your connection using an offline IP-country database. We store the country, source and database version, not the full IP in the order. It is a supporting security and record-keeping hint based on legitimate interests, not proof of residence. A mismatch with your address is flagged for human review; the connection country never automatically refuses an order. We do not send the IP to an external geolocation service. Hosting access logs are separate from this order record.

Email and delivery

If you email info@cestoteka.cz, we use your message and email address to respond and fulfil your request. Order acknowledgements are sent by email, together with payment instructions (including bank details and a payment QR where we provide one). The private download link is sent by us after we check that your bank transfer has been credited. We do not share contact information for advertising.

A private download link uses a random access token. The server stores its hash, associated order and file, expiry and access count. The token is not placed in ordinary page links or sent to third-party scripts. Treat your link as private and save the PDF to your device.

Letters about the world

If you join the letters on this website, we use your email address to send occasional letters about explaining the world to little ones, and a welcome code in the first letter. We do this only when you tick the consent box. You can unsubscribe in any letter, or by writing to info@cestoteka.cz. Joining is separate from ordering a guide or downloading a free PDF.

The legal basis is your consent. You can withdraw it at any time, and we will stop the letters.

Brevo. The address is stored with Brevo (also known as Sendinblue), our mailing service, so the letters can be sent and so you can unsubscribe. This English list is separate from our Czech list. Brevo processes the address on our instructions. We do not sell it, and we do not pass it to anyone else for their own advertising.

Storage and service providers

Orders and payment records are stored in access-restricted files on our hosting. Only authorised administration sessions can view them or mark a payment as received.

Hosting. The English site (cestoteka.com) is hosted by WEDOS Internet, a.s. in Czechia. WEDOS provides the server, storage and related technical logging under their hosting terms and the processing arrangements that apply to that service.

Email. Order messages and replies go through info@cestoteka.cz. The mailbox for info@cestoteka.cz is provided by WEDOS in Czechia, on the cestoteka.cz hosting. A copy of each message stays in that WEDOS mailbox. Email content and mailbox data are stored and delivered under WEDOS’s terms for that service.

Bank. Payments are EUR bank transfers to Magda Míčová’s business account with mBank. The bank processes the transfer as your payment service provider. We do not use a card gateway or other online payment processor on this site.

We do not sell personal data. We share an email address with Brevo only when you join the letters, as described above.

How long we keep information

• Paid orders and accounting records (including name, address, email linked to the order, order number, amount, payment confirmation and refunds): kept for as long as Czech accounting and tax rules require for business records — typically up to 10 years from the end of the relevant accounting period.
• Ordinary enquiry emails that are not part of a paid order: usually up to 3 years after the last reply, unless we need them longer for a complaint or legal claim.
• Private download links: the server stores a hash of the access token, the linked order and file, expiry and access count. Tokens stay available until they expire or after the download window described in your email; treat your link as private and save the PDF to your device.
• Hosting access logs: retained by WEDOS for a limited period according to WEDOS hosting terms, for security and technical operation. These logs are separate from your order record.
• Letters: the email address stays with Brevo until you unsubscribe or we close the list. A short private record that you consented, and when, stays with our other site records.
• Free Autumn PDF and public samples: no registration or email is required. Hosting may still create ordinary access records when you visit a page or request a file.

When a retention period ends, we delete or anonymise the data unless a longer legal hold still applies.

Necessary cookies and security

The order form uses a necessary session cookie to protect submission and prevent duplicate orders; the internal administration has its own protected login session. These are functional cookies, not advertising or tracking cookies. This version does not add analytics, advertising pixels, embedded social media or external fonts. Security rate-limit records use a hashed connection identifier for a short period.

Children and AI

The order form is for adults. A first name is optional and is used only if you request an edit. We do not send checkout, payment or download information to an AI service. If an edit would require additional data processing, we will explain it separately before using a new service.

Your rights

You may have rights to access, correction, deletion, restriction, portability and objection, subject to the applicable conditions. Where consent is used you may withdraw it. Contact info@cestoteka.cz; you may also complain to the Czech Office for Personal Data Protection or the relevant supervisory authority where you live.

Required order and address details are needed to accept and fulfil an order. A first name for the guide is optional. No marketing subscription is part of checkout.

Version: 29 October 2026.