Najato.czBack to site
CSEN
Legal information

Terms, Privacy & GDPR

The complete legal documents for Najato.cz. Choose a document on the left. The text is a template — we recommend a review by your lawyer before going live.

Operator: Jakub Houžvička – Najato.cz, IČO 737 59 210
Documents
Contact

Data Processing (GDPR)

Effective from 12 July 2026

This document governs the processing of third-party personal data (in particular tenants and leads) that you enter into Najato.cz. In this respect you are the controller and the operator (Jakub Houžvička – Najato.cz) is the processor under Art. 28 GDPR. Accepting the Terms of Service also concludes this data-processing agreement.

1. Roles of the parties

As a user you are the controller of the personal data you enter into the service about your tenants, leads and other persons. The operator is the processor, processing that data solely to provide the service and on your instructions.

2. Subject and duration

The operator processes personal data only to provide the service (records of properties, leases, payments, metering and related documents) and for the duration of your account, or for the period necessary to complete processing and meet legal obligations.

3. Categories of subjects and data

Tenants and leads: name, contact details, contract data, payments, meter readings, communication and documents.
Where applicable, other persons you enter in the course of property management.

4. Processor obligations

Process personal data only on your documented instructions, unless otherwise required by EU or Czech law.
Ensure that persons authorised to process the data are bound by confidentiality.
Adopt appropriate technical and organisational security measures (Art. 32 GDPR): encrypted transport (HTTPS), passwords stored only as a hash, access control and backups.
Assist you with data-subject requests and with notifying any personal-data breach.
On termination of the service, erase or return the personal data at your choice, unless retention is required by law.

5. Sub-processors

You grant general authorisation to engage the sub-processors listed in the Privacy Policy (in particular the hosting provider, the e-mail gateway and the sign-in providers). We will inform you of any intended change and you may object to it. Equivalent data-protection obligations are agreed with sub-processors.

6. Data location and transfers outside the EU

Personal data is processed within the EU/EEA. Transfers to third countries do not generally take place; should they occur, they will be safeguarded under Chapter V of the GDPR.

7. Security breaches

In the event of a personal-data breach, the operator will inform you without undue delay after becoming aware of it and provide the cooperation needed for any notification to the supervisory authority and the data subjects.

8. Data subject rights

Data subjects (tenants, leads) exercise their rights with you as the controller. The operator will provide you with reasonable technical assistance to handle them. Direct queries to podpora@najato.cz.