Privacy policy

1. Controller of personal data

The controller of personal data is the company ROON s.r.o., with its registered office at Letců 1003/8, Hradec Králové, 500 02, IČO: 27558771, DIČ CZ27558771, entered in the Commercial Register kept by the Regional Court in Hradec Králové, section C, insert 25963.

Contact details of the controller:

  • E-mail: admin@stopyvsrdci.cz
  • Phone: +420 777 122 715
  • Address: Letců 1003/8, Hradec Králové, 500 02

2. What data we process and why

2.1 Data you provide to us

We process personal data that you provide to us in connection with using our services:

  • Registration data: first name, surname, e-mail address, password (in encrypted form)
  • Memorial data: names, dates of birth and death, photographs and other information about deceased persons
  • GPS coordinates: the exact position of the place of final rest for the navigation features
  • Data for animating photographs: photographs of deceased persons used to create animations with AI technology
  • Payment data: the information needed to make the payment
  • Communication data: the content of the messages you send us

2.2 Data we obtain automatically

When you visit our website we automatically obtain:

  • Device data: IP address, browser type, browser version, operating system
  • Activity data: pages visited, time of the visit, length of the visit

2.3 Purposes of the processing

We process your personal data for the following purposes:

  • Providing the services: so that we can provide you with our services for creating and managing memorials
  • Improving the services: for analysing, testing and improving our services
  • Communication: so that we can inform you about changes or answer your questions
  • Marketing: if you have given your consent, for sending marketing communications
  • Meeting legal obligations: so that we comply with our statutory duties
  • Managing animation credits: for keeping a record of credits purchased and used

3. Legal basis for the processing

We process your personal data on the following legal grounds:

  • Performance of a contract: for providing our services at your request
  • Legitimate interest: for the purposes of improving our services, ensuring security and analytical purposes
  • Consent: for marketing purposes and for the use of cookies (other than necessary ones)
  • Meeting legal obligations: for accounting and tax purposes

We stress that data about deceased persons (names, photographs, dates of birth and death) is not considered personal data within the meaning of the GDPR, as it relates only to people who have died. Even so, we treat this data with the utmost care and respect.

4. How long we keep the data

We keep your personal data for as long as is necessary to fulfil the purposes set out in this policy:

  • Data connected with the user account is kept for as long as your account exists
  • Memorial data is kept for the duration of the memorial service (10 years from activation, with the option of extension)
  • GPS coordinates are kept for the duration of the service; you can remove this data yourself at any time in the settings
  • Photographs used for animations are processed once and are not kept long term outside your memorial
  • Data about animation credits is kept for as long as your account exists
  • Data connected with payments is kept for the period required by tax legislation (usually 10 years)
  • Communication data is kept for 3 years from the last communication

5. Recipients of personal data

We may share your personal data with the following categories of recipient:

  • Service providers (hosting services, payment gateways, analytical tools)
  • The carrier DPD for the purpose of delivering physical QR codes (name, surname, address and phone only)
  • The GoPay payment gateway for the purpose of processing payments
  • Public authorities where there is a statutory obligation

We have data processing agreements in place with all service providers, ensuring adequate protection of your data.

For the photograph animation service we use a third-party API. In this process only the photograph itself is passed on, without any other personal data. The API provider has no information about whom the photograph belongs to.

Animation credits are managed solely within our website and no personal data is passed to third parties in this connection.

6. Your rights

In connection with the processing of your personal data you have the following rights:

  • The right of access: you have the right to obtain information about what personal data we process about you
  • The right to rectification: you have the right to have inaccurate personal data corrected
  • The right to erasure: you have the right to have personal data erased under certain conditions
  • The right to restriction of processing: you have the right to request restriction of processing under certain conditions
  • The right to data portability: you have the right to obtain the data in a structured format
  • The right to object: you have the right to object to processing based on legitimate interest
  • The right to withdraw consent: you have the right to withdraw consent at any time (for marketing purposes, for example)
  • The right to lodge a complaint: you have the right to lodge a complaint with the Office for Personal Data Protection

To exercise these rights, please contact us at the e-mail address: admin@stopyvsrdci.cz

7. Cookies and similar technologies

Our website uses cookies and similar technologies to provide, improve and protect our services. Cookies are small text files that are stored in your browser.

7.1 The types of cookies we use

  • Necessary cookies: these are essential for the website to work and cannot be turned off.
  • Analytical cookies: these help us understand how visitors use our pages. We use Google Analytics.
  • Marketing cookies: these serve to display relevant and personalised advertising. We use the Facebook Pixel.

7.2 Managing cookies

When you first visit our website we ask for your consent to the use of cookies. You can change your preferences at any time by clicking the button below.

You can also manage cookies in your browser:

Please note that refusing cookies may affect how our pages work.

8. GPS navigation and location services

  • Entering GPS coordinates is entirely voluntary and is not a condition for creating a memorial
  • You can remove the GPS coordinates yourself at any time in the settings of your account
  • GPS coordinates are kept only within our system and are not passed to third parties (except for display on map data)
  • The legal basis for processing GPS coordinates is the performance of a contract

9. Animating photographs with AI

  • Only the photograph itself is used to create the animation, without any other personal data
  • The AI service provider has no information about whom the photograph belongs to, nor any other data about the user
  • Photographs are processed once and are not kept long term outside your memorial
  • Photographs of deceased persons are not covered by the protection of personal data under the GDPR
  • Animation credits are managed solely within our website
  • The legal basis for this processing is the performance of a contract

Although data about deceased persons is not covered by the GDPR, we treat it with the utmost care and respect.

10. Changes to this policy

We may update this privacy policy from time to time. The current version is always available on this page. In the event of significant changes we will inform you through a notice on our website or by e-mail.

Last updated: 1. 1. 2025: 30.08.2026