Privacy Policy — zachranmodrou.cz

Effective from: 10 June 2026

This Policy applies to the website zachranmodrou.cz including all its subdomains (e.g. kviz.zachranmodrou.cz).

1. Data controller

The data controller is rewater s.r.o., Reg. No. 08666130, registered office at třída Kpt. Jaroše 10, 602 00 Brno, Czech Republic, registered in the Commercial Register kept by the Regional Court in Brno.

Contact: legal@rewater.eu

No Data Protection Officer (DPO) has been appointed. The controller does not meet the conditions of Art. 37 GDPR for mandatory appointment — it is not a public authority, its core activity does not consist of large-scale systematic monitoring of data subjects, nor of processing special categories of personal data.

2. Overview of processing purposes and legal bases

3. Detailed description of each processing purpose

3.1 Newsletter and commercial messages

Purpose: Sending emails with tips and information on how to save water, and commercial messages about the controller’s products and events.

Legal basis: Consent of the data subject under Art. 6(1)(a) GDPR and § 7(2) of Act No. 480/2004 Coll., on certain information society services.

Collection mechanism (double opt-in):

1. You enter your email address in the form on the website.
2. The system sends you a confirmation email with a link.
3. Only by clicking the link do you confirm your consent to subscribe.

To prove consent we retain the timestamp, IP address, consent text version and consent identifier.

Recipients and processors: Sending is handled by the Sendy tool operated on the controller’s infrastructure in the EU. Emails are delivered via Amazon SES (Amazon Web Services EMEA SARL / Amazon Web Services, Inc.) acting as processor. Servers are chosen in the EU region; as AWS is a US-based company, personal data may be transferred to the USA. Transfers are safeguarded by AWS certification under the EU-US Data Privacy Framework (DPF) and by Standard Contractual Clauses (SCC) as a fallback mechanism, under a data processing addendum (AWS GDPR Data Processing Addendum).

Retention period: The email address is retained for the duration of an active subscription. After unsubscribing, the email is moved to a Robinson list (a record of unsubscribed addresses so that messages are no longer sent to you) and kept for 3 years.

Withdrawal of consent: Consent can be withdrawn at any time by clicking the unsubscribe link in the footer of every email — the link leads directly to unsubscribing. Consent can also be withdrawn by email at legal@rewater.eu. Withdrawing consent is as easy as giving it and does not affect the lawfulness of processing before withdrawal.

3.2 Google Analytics 4

Purpose: Analysis of website traffic — visit counts, user behaviour, popular pages, traffic sources.

Legal basis: Consent under Art. 6(1)(a) GDPR, given via the cookie banner. The site uses Google Consent Mode v2 — analytics tools activate only after consent is granted.

Processor: Google Ireland Limited (for the EEA), Google LLC.

Transfers to third countries: Data may be transferred to Google servers in the USA. The legal framework is the EU-US Data Privacy Framework (DPF), with Standard Contractual Clauses (SCC) as a fallback.

Retention period: GA4 retains detailed data for 14 months, after which it is aggregated.

For details on individual cookies, see the Cookie Policy.

3.3 Technically necessary cookies and services

Purpose: Cookie consent management, session maintenance, language preferences, controlling script loading.

Legal basis (storing cookies): § 89(3) of Act No. 127/2005 Coll., on electronic communications — technically necessary cookies are exempt from the consent requirement.
Legal basis (data processing): The controller’s legitimate interest under Art. 6(1)(f) GDPR in the functional and secure operation of the website.

For the complete list of cookies, see the Cookie Policy.

4. Rights of data subjects

4.1 Right of access (Art. 15 GDPR)

You have the right to ask for confirmation of whether your personal data is being processed and to obtain a copy of it. We will respond within 30 days at the latest.

4.2 Right to rectification (Art. 16 GDPR)

You have the right to have inaccurate data corrected.

4.3 Right to erasure (Art. 17 GDPR)

You have the right to request erasure of your personal data, in particular where the data is no longer needed for the original purpose, you withdraw consent and there is no other legal basis, you object under Art. 21, or the data was processed unlawfully.

4.4 Right to restriction of processing (Art. 18 GDPR)

You have the right to request restriction of processing if you contest the accuracy of the data, the processing is unlawful, or you raise an objection.

4.5 Right to data portability (Art. 20 GDPR)

You have the right to receive your data in a structured, commonly used and machine-readable format (e.g. CSV).

4.6 Right to object (Art. 21 GDPR)

You have the right to object to processing based on legitimate interest (Art. 6(1)(f) GDPR). The controller will stop processing unless it demonstrates compelling legitimate grounds that override your interests, rights and freedoms.

4.7 Right to withdraw consent (Art. 7 GDPR)

Consent can be withdrawn at any time — for the newsletter by clicking “Unsubscribe” in every email, for cookies by changing the settings in the cookie banner, or by email at legal@rewater.eu.

4.8 Automated decision-making

We do not carry out any automated decision-making or profiling within the meaning of Art. 22 GDPR.

4.9 Right to lodge a complaint with a supervisory authority

Office for Personal Data Protection (ÚOOÚ)
Pplk. Sochora 27, 170 00 Prague 7
Phone: +420 234 665 411
Email: posta@uoou.gov.cz
Web: www.uoou.gov.cz

How to exercise your rights: By email at legal@rewater.eu, stating which right you are exercising. To verify your identity we may ask for additional information.

5. Security measures

The controller implements technical and organisational measures to protect personal data:

• encrypted communication (HTTPS/TLS),
• database access limited to authorised persons only,
• two-factor authentication and strong passwords,
• regular data backups,
• firewall and server protection.

In the event of a personal data breach likely to pose a risk to the rights and freedoms of data subjects, the controller will report the incident to the ÚOOÚ without undue delay, where possible within 72 hours.

6. Voluntary provision of data

Providing personal data is voluntary. Without your email address we cannot send you the newsletter; withholding consent, however, has no other negative consequences and is not a condition for accessing the site’s content. The site is fully functional even without consent to analytics cookies.

7. Summary of retention periods

8. Language versions

This Policy is drawn up in Czech. If it is also made available in other languages, the Czech version prevails in the event of any discrepancy.

9. Changes to the Policy

The controller reserves the right to update this Policy. In the event of a material change, newsletter subscribers will be informed by email. The current version is always available on zachranmodrou.cz.

10. Controller contact

rewater s.r.o.
třída Kpt. Jaroše 10, 602 00 Brno, Czech Republic
Reg. No.: 08666130
Email: legal@rewater.eu

Effective from: 10 June 2026