Privacy policy

Who we are

This website, midware.cz, is operated by the controller of your personal data:

We process personal data in line with Regulation (EU) 2016/679 (the GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.

Visiting this website

This website uses no cookies, no analytics, no advertising or tracking tools, and it has no forms or user accounts. We do not build profiles of visitors.

To deliver the pages and protect them against abuse, our hosting provider Cloudflare processes technical data that every browser sends — such as your IP address, browser type, the page requested and the time of the request. This processing rests on our legitimate interest in running a secure website (Article 6(1)(f) GDPR). These logs are kept by Cloudflare for a short time and are not used by us to identify you.

When you email us

If you write to us, we process your email address, your name if you give it, and the content of your message, so that we can reply and handle your request. The legal basis is our legitimate interest in answering enquiries, or steps taken at your request before entering into a contract (Article 6(1)(b) and (f) GDPR).

We keep correspondence only as long as needed to deal with it and any follow-up, typically no longer than three years, unless the law requires us to keep it longer. Our email is hosted by Google (Google Workspace).

Our products

Our ventures — STAZ, NYC Express and Eye of the Herd — have their own websites and apps. Each describes how it handles personal data (for example orders, feedback sent from an app, or email alerts) in its own privacy information, shown in the product or on its website. Where a venture is operated by a separate company, that company is the controller of the data it processes. The NYC Express app has its own privacy policy.

Who processes data for us

• Cloudflare, Inc. — website hosting, content delivery and security.
• Google Ireland Limited / Google LLC — email.

Both may process data outside the European Economic Area. Such transfers are covered by the EU–U.S. Data Privacy Framework and/or the European Commission’s standard contractual clauses. We do not sell personal data and do not share it with anyone else, unless the law requires us to.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. To use any of these rights, write to info@midware.cz; we will reply within one month.

You may also lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

Changes

If we change how we handle personal data, we will update this page and the date at the top.