Legal information

Terms, Privacy & GDPR

The complete legal documents for Najato.cz. Choose a document on the left. The text is a template — we recommend a review by your lawyer before going live.

Operator: Jakub Houžvička – Najato.cz, IČO 737 59 210
Documents
Contact

Privacy Policy

Effective from 12 July 2026

This policy describes what personal data we collect when you use Najato.cz, the purposes for which we process it, how long we keep it, and what rights you have. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing.

1. Data controller

The controller of your personal data is a self-employed individual (sole trader):

Name: Jakub Houžvička – Najato.cz
Company ID (IČO): 737 59 210
Registered address: M. Koněva 120, Jičín, Czech Republic
Contact e-mail: podpora@najato.cz

No Data Protection Officer (DPO) has been appointed, as the nature and scope of processing does not require it. For data-protection matters, contact us at podpora@najato.cz.

2. What data we process

Depending on how you use the service, we process in particular:

Account data: name, e-mail address, password (stored only as a cryptographic hash), chosen language and any consents granted.
Sign-in data via Google or Apple: name, e-mail, a unique account identifier and, where applicable, a profile picture.
Data you enter into the app: properties and units, tenants and their contacts, leases, payments and meter readings. This data may contain personal data of third parties (see “Data about tenants and other persons”).
Operational and technical data: IP address, browser and device information, access logs, and sign-in cookies necessary for the service to function.

3. Purposes and legal bases

Providing the service and managing your account — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Securing the service, preventing misuse and resolving disputes — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Sending news and tips by e-mail — legal basis: consent (Art. 6(1)(a) GDPR), where given; you may withdraw consent at any time.
Compliance with legal obligations (e.g. accounting and tax, if they arise) — legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Data about tenants and other persons

Data about tenants and other third parties that you enter into the app is processed by us as a processor on your behalf — you are the controller of that data. You are responsible for having an appropriate legal basis for its processing and for duly informing those individuals. On our side, processing takes place only to the extent necessary to provide the service and according to your instructions; the processing terms are set out in the “Data Processing (GDPR)” document.

5. Recipients and processors

We do not share personal data with third parties for their own purposes. However, we use vetted processors that provide us with sub-services:

Brevo (Sendinblue) — sending transactional and, where applicable, marketing e-mails.
Google and Apple — identity verification when signing in with those accounts (OAuth).
Hosting and database provider: Vashosting.cz — running the app and storing data within the EU.

We have data-processing agreements in place with our processors. Data is processed within the EU/EEA; any transfer to a third country only takes place with appropriate safeguards under the GDPR.

6. Retention period

We keep your account data and the data you enter for as long as your account exists. After the account is closed, we erase or anonymise it within a reasonable period, unless the law requires longer retention (e.g. accounting and tax records). You can also request erasure earlier — see your rights.

7. Your rights

In relation to your personal data you have the right to:

access your data and obtain a copy,
rectify inaccurate data and complete incomplete data,
erasure (the “right to be forgotten”),
restrict processing,
data portability,
object to processing based on legitimate interest,
withdraw a granted consent at any time (withdrawal does not affect the lawfulness of prior processing).

You can exercise your rights at podpora@najato.cz. You also have the right to lodge a complaint with the supervisory authority — the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.

8. Cookies and local storage

We use only strictly necessary (technical) cookies required for sign-in and session persistence. In your browser’s local storage we keep your preferences, such as the chosen language. We do not use third-party advertising or analytics cookies that would require consent.

9. Security

We take appropriate technical and organisational measures to protect your data: passwords are stored only as a cryptographic hash, data is transmitted over an encrypted connection (HTTPS), and access to data is limited to what is necessary.

10. Changes to this policy

We may update this policy; the current version is always available on this page. We will notify you of material changes by appropriate means. The effective date is shown in the header.

11. Contact

For any questions about personal data protection, contact us at podpora@najato.cz.