Privacy and cookies

Who is responsible

The controller of personal data on Polisa is the person who runs this independent project, based in Prague, Czech Republic, contact kontakt@polisapro.com. Polisa follows the EU General Data Protection Regulation and the Czech Act on the Processing of Personal Data (No. 110/2019 Coll.).

When you visit

Polisa has no user accounts and does not ask who you are. Pages are static files.

• Hosting. The web host (Cloudflare Pages (Cloudflare, Inc.)) processes your IP address and browser details to deliver pages and protect against abuse, normally keeping server logs for a short period. The legal basis is our legitimate interest in running a secure and reachable site (GDPR Art. 6(1)(f)). Cloudflare, Inc. is a US company and serves pages from the data centre nearest to you, which can be outside the EU; it is certified under the EU–US Data Privacy Framework and its data processing addendum contains the EU standard contractual clauses for transfers outside the EU.
• Error reports. Your browser may send Cloudflare a short report when a connection to Polisa fails (Network Error Logging, through the NEL and Report-To headers Cloudflare adds); it holds the address requested and the error, not who you are.
• Fonts. Fonts are served from Polisa's own server.
• Statistics. We count visits with Cloudflare Web Analytics. It sets no cookies, keeps nothing in your browser and does not identify you; Cloudflare processes each request, including your IP address, in passing and discards it, and shows us only totals: page views, referring sites, countries, browsers and device types. We also count downloads of the data files (CSV and Excel): for each one we keep only the day, the file, the country, whether it came from a browser or a script, and the site that linked to it, never your IP address or anything else that identifies you. The legal basis is our legitimate interest in knowing how the site is used (GDPR Art. 6(1)(f)).
• Data downloads are plain files on the same host; a download is logged like any page view, nothing more. Table exports are built in your browser.

Cookies

Polisa sets no cookies and does not track you, so there is no cookie banner. A few display choices are kept in your browser and never sent anywhere: the colour theme, the basis on which growth is shown, the insurers you compare, the insurers and markets you follow, your recent searches, the view of the home page and the width of table columns. Clearing the site's data in your browser removes them. The address bar keeps your selection on some pages (for example the insurers you compare) so that you can share a link; that stays in the link and is not sent to us.

Newsletter

The sign-up forms are not live yet: nothing you type in them is sent or stored. When they are, this is how they work:

• What: your email address, the date you signed up and confirmed, and whether you opened the emails.
• Why and on what basis: to send the quarterly newsletter, based on your consent (GDPR Art. 6(1)(a)). You confirm by clicking a link in a first email (double opt-in).
• Who handles it: once the newsletter is live, MailerLite (UAB MailerLite, Vilnius, Lithuania), as our processor under a data processing agreement. We do not sell or share the list.
• How long: until you unsubscribe (a link is in every email); unconfirmed sign-ups are deleted after 30 days.
• Where: the list is stored by the email service in the EU (MailerLite is a Lithuanian company), and Polisa is run from the Czech Republic, so the data stays in the EU.
• Giving your email is voluntary; without it you simply do not get the emails. No automated decisions are made about you.

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, to take a copy, and withdraw consent at any time, by writing to kontakt@polisapro.com. We answer within one month. You can also complain to a data protection authority: in the Czech Republic the Office for Personal Data Protection (uoou.gov.cz), or the authority in your own EU country.