Privacy Policy
Last updated: July 25, 2025
Your privacy is our priority. We do not collect any sensitive personal data and use only anonymous analytics and technically necessary storage to enhance site performance. You can change your cookie settings at any time.
1. Data Controller
The controller of your personal data under the GDPR is:
Miroslav Stern Agency, s.r.o.IČO: 23406984
DIČ: CZ23406984
Příčná 1892/4, Nové Město, Praha 110 00
Email: agency@miroslavstern.com
No Data Protection Officer (DPO) has been appointed.
For inquiries or to exercise your rights, please contact us by email.
2. Purposes and Legal Bases of Processing
- Website operation and maintenance: anonymous technical logs (visit time, pages loaded) – not personal data, GDPR not applicable.
- User preferences: storing cookie and language settings in
localStorage
– processed based on your consent (Art. 6(1)(a) GDPR). - Traffic analytics: anonymous statistics via
Analytics.js
– processed on the controller’s legitimate interest (Art. 6(1)(f) GDPR). - External content display: YouTube, Spotify, Instagram, OpenStreetMap – metadata and content loaded only after consent (Art. 6(1)(a) GDPR).
- Audio visualization: parameters of the WaveSurfer.js library – technically necessary (Art. 6(1)(f) GDPR).
3. Categories of Processed Data
Category | Scope | Legal Basis |
---|---|---|
Technical logs | Visit time, pages loaded (anonymized, no identifiers) | Not personal data |
LocalStorage settings |
cookiesConsent : consent (“accepted”)cookieSettings : JSON with cookie categorieslanguage : two‑letter language code
|
Consent (Art. 6(1)(a) GDPR) |
Analytical data | Loading external script Analytics.js for anonymous statistics |
Legitimate interest (Art. 6(1)(f) GDPR) |
Embedded services | YouTube, Spotify, Instagram, OpenStreetMap – metadata and content | Consent (Art. 6(1)(a) GDPR) |
WaveSurfer.js | Audio visualization parameters | Technically necessary (Art. 6(1)(f) GDPR) |
4. Recipients and International Transfers
- Script developers (Analytics.js, WaveSurfer.js)
- Google LLC (YouTube embed API)
- Spotify AB (Spotify embed API)
- Meta Platforms, Inc. (Instagram embed API)
- OpenStreetMap Foundation
- Hostinger (hosting services)
- CDNs and external sources: unpkg.com (Leaflet), fonts.gstatic.com (Google Fonts)
- Public authorities (only if legally required)
Some services transfer data outside the EEA. Standard EU contractual clauses are in place for these transfers.
5. Data Retention Period
- Anonymous logs: indefinite (not personal data).
- Consent and settings: until you delete them from localStorage (permanent, no auto-expiry).
- Embedded content data: for the duration of page display, then released.
6. Your GDPR Rights
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent (without affecting prior processing)
To exercise your rights, contact us at agency@miroslavstern.com.
7. Policy Updates
We may update this policy to reflect changes in legislation or services. Any changes will be marked with a new “Last updated” date and a brief summary of amendments.