1. Data controller
The data controller is:
Czech Sleep Research and Sleep Medicine Society [Česká společnost pro výzkum spánku a spánkovou medicínu, z. s.]
Company ID: 26543516
Registered office: Kateřinská 30, 120 00 Prague 2, Czech Republic
E-mail: sarka.mrazkova@can21.cz
(hereinafter the "controller").
2. What personal data the website processes
The website does not allow user registration, and no personal data is submitted through contact or other forms.
When visiting the website, technical data necessary for its safe and reliable operation may be automatically processed, in particular:
- the device's IP address,
- the date and time of access,
- the requested page or file,
- information about the web browser and operating system,
- the address of the page the visitor came from,
- information about any technical error.
This data may be temporarily stored in the web server's operational logs.
3. Purpose and legal basis of processing
Technical data is processed for the purpose of:
- ensuring the functionality and security of the website,
- protecting the website against attacks and misuse,
- diagnosing and resolving technical issues.
The legal basis is the controller's legitimate interest under Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), consisting in the safe and reliable operation of the website.
Operational logs are retained for 30 days, unless a legal regulation or the resolution of a security incident requires a longer retention period.
4. Interactive map (Leaflet and OpenStreetMap)
The website uses the Leaflet library to display an interactive map. The Leaflet library is part of this website and does not itself create cookies.
Map tiles are loaded from OpenStreetMap servers operated by the OpenStreetMap Foundation:
OpenStreetMap Foundation
St John's Innovation Centre
Cowley Road
Cambridge CB4 0WS
United Kingdom
When the map is displayed, the visitor's browser establishes a direct connection to OpenStreetMap servers. The following may be automatically transmitted to them, in particular:
- the visitor's IP address,
- information about the browser, device, and operating system,
- the address of the page on which the map is displayed,
- the date and time of the request,
- information about the requested map tiles, and therefore approximately about the map area being displayed.
This connection is technically necessary for displaying the map. The legal basis for processing by the controller is legitimate interest under Article 6(1)(f) GDPR, consisting in providing clear information about the location of the displayed place.
The OpenStreetMap Foundation processes data obtained through its servers in accordance with its own privacy policy:
https://osmfoundation.org/wiki/Privacy_Policy
Map tiles are provided through a global network of caching servers. The specific server to which the browser connects is determined by the current traffic on this network.
5. Cookies and similar technologies
This website does not create or store any cookies.
The website does not use analytical, marketing, or personalization cookies, and does not use similar technologies to track visitor behavior.
When map tiles are normally loaded from the tile.openstreetmap.org server, no cookies are created. However, the technical data described in Article 4 of this policy is transmitted.
6. Recipients of personal data
The following may have access to technical data to the necessary extent:
- the web hosting and technical infrastructure provider,
- persons responsible for the administration and security of the website,
- the OpenStreetMap Foundation when loading map tiles.
The controller does not sell personal data or provide it to third parties for marketing purposes.
7. Visitors' rights
Under the conditions set out in the GDPR, you have in particular the right to:
- obtain information about the processing of your personal data,
- request access to your personal data,
- request the correction of inaccurate data,
- request erasure or restriction of processing,
- object to processing based on legitimate interest,
- lodge a complaint with the supervisory authority.
You can exercise your rights using the controller's contact details listed in Article 1.
The supervisory authority in the Czech Republic is:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
https://uoou.gov.cz/
8. Final provisions
This policy may be updated, in particular in the event of changes to the way the website is operated, the services used, or applicable legislation.
Effective from: 15 September 2026