Česky · ← momentovka.cz

Privacy policy

Version 2 · effective 7 September 2026 · This version covers the momentovka.cz website before the service launches. Once Momentovka launches, policies for event hosts and guests will follow — I’ll cover those in the launch e-mail. This English text is a courtesy translation; the Czech version is the binding one.

1. Who is responsible for Momentovka

The data controller is me, David Azarian, a sole trader under the Czech Trade Licensing Act, company ID (IČO) 17064619, registered office K Beranovu 1190/15, Dolní Chabry, 184 00 Praha 8, Czechia. Momentovka is the name of the service I’m building under this IČO. I am not a VAT payer.

For anything privacy-related, write to ahoj@momentovka.cz. I have no data protection officer — the law doesn’t require one of me.

2. What this site does with your data

Before launch, this site has a single function: the waiting list. When you leave me your e-mail, I store:

  • the e-mail address,
  • optionally the type of event you ticked (wedding, party, trip, company event),
  • the language you chose, so the e-mails arrive in the right one,
  • where you came from (the utm_source parameter or the referring page),
  • the time of sign-up, the time of confirmation, and the exact consent wording you saw at that moment.

Nothing else. I don’t collect names, phone numbers or photos before launch.

3. What I use the data for, and on what basis

PurposeDataLegal basis
Purpose: Send you a confirmation e-mail and then at most two launch announcements — the site and the apps.Data: e-mail, event typeLegal basis: your consent, Art. 6(1)(a) GDPR — withdrawable at any time, see section 7
Purpose: Know which channel works (Instagram, Threads, referrals), so I don’t waste money on the ones that don’t.Data: traffic source, aggregate onlyLegal basis: legitimate interest, Art. 6(1)(f)
Purpose: Protect the form from bots and keep the site running.Data: IP address, technical browser dataLegal basis: legitimate interest, Art. 6(1)(f)
Purpose: Prove that you gave consent — and possibly withdrew it.Data: consent wording, timestampsLegal basis: legal obligation, Art. 7(1) GDPR

I use the event type only to write you what’s relevant at launch. No profiling, no automated decision-making.

4. Double opt-in

After you submit the form, you get a confirmation e-mail. Until you click the link in it, you’re not on the list and won’t get anything else from me. Unconfirmed sign-ups are deleted after 30 days.

5. How long I keep the data

  • Unconfirmed e-mail: 30 days, then deleted.
  • Confirmed e-mail: until you withdraw consent, at most 6 months after the second launch announcement. Then the list is deleted. If you create a Momentovka account in the meantime, your e-mail is governed by the service’s own policy.
  • Record of a withdrawn consent: 3 years — so I never write to you again and can prove I stopped.
  • Security logs: at most 30 days.

6. Who processes data on my behalf

The site runs on the infrastructure of Cloudflare, Inc. (San Francisco, USA): hosting, database, e-mail sending and the Turnstile form protection. The database is located in Europe; Cloudflare is a global network, though, so some data (such as your IP address when a page loads) may be handled outside the EU as well. Cloudflare is my processor under a data processing agreement; transfers to the USA are covered by the EU–US Data Privacy Framework adequacy decision and standard contractual clauses.

I don’t sell your data, don’t pass it to advertisers, and don’t use it to train any models.

7. Your rights

At any time you can:

  • withdraw consent — one click in every e-mail, or a message to ahoj@momentovka.cz; withdrawal doesn’t affect what happened before it,
  • request access to your data, its correction or deletion,
  • request restriction of processing or data portability — you’ll get the data in a machine-readable format,
  • object to processing based on legitimate interest.

I’ll reply within one month. If you think I’m handling your data badly, you can turn to the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz. I’d be glad if you tried me first.

8. Cookies and traffic measurement

The site uses no advertising or tracking cookies and shows no cookie banner, because there’s no reason to. The only two technical cookies are the Cloudflare Turnstile form protection (telling humans from bots) and the stored language choice; under § 89(3) of the Czech Electronic Communications Act, neither requires consent.

Traffic is measured in aggregate on the server, without cookies and without identifying individual visitors.

9. Children

The site isn’t meant for children under 15 and I don’t knowingly collect their data. If it has happened, write to me and I’ll delete it.

10. Changes to this policy

I only ever change this policy by issuing a new version with a higher number and date. The consent wording you saw at sign-up stays stored with your record — so I always know what you said yes to.

Version 2 · 7 September 2026 (added the two technical cookies — site language — and the English version of the site) · Version 1 · 6 September 2026