Privacy Policy

Last updated: 26/02/2026

1. Who processes your personal data

The data controller is:

Pavel Sklenář
Company ID (IČO): 75910934
Registered address: Krty č.p. 10, 270 33 Krty u Jesenice, Czech Republic
Email: info@hudbox.cz

(the “Controller”)

The Controller operates the online platform Hudbox available at https://hudbox.cz (the “Service”).

2. What personal data we process

A) Data provided by the user (typically when registering and using an account):

  • email address,
  • username,
  • profile information you choose to provide,
  • content uploaded or shared by the user (e.g., texts, music, photos, videos, messages, and other communications within the Service).

B) Data generated when using the Service (technical and operational data):

  • IP address,
  • device and browser information,
  • activity logs (e.g., logins, basic interactions and security-related events).

C) Data from cookies and similar technologies:

  • website visit and usage information,
  • technical device information,
  • statistical/analytics information.

Analytics may be provided in particular through Google Analytics (depending on the Service configuration and your consent where required).

3. Purposes of processing

We process personal data primarily to:

  • create and manage user accounts,
  • enable communication and interactions between users,
  • operate, administer, and secure the Service,
  • personalize content and user experience (where available),
  • send newsletters and marketing communications (based on consent where required),
  • comply with legal obligations,
  • protect the Controller’s legitimate interests (especially fraud prevention, abuse prevention, and security).

4. Legal bases (GDPR)

Depending on the specific context, processing is carried out on the basis of:

  • performance of a contract (Art. 6(1)(b) GDPR) – providing account functionality and the Service,
  • consent (Art. 6(1)(a) GDPR) – e.g., newsletters, optional cookies/analytics where required,
  • legitimate interests (Art. 6(1)(f) GDPR) – security, abuse prevention, and protection of the Service,
  • compliance with legal obligations (Art. 6(1)(c) GDPR) – e.g., accounting and tax requirements.

5. Children under 15

The Service may also be used by persons under 15 years of age.

Processing of a child’s personal data is permitted only on the basis of:

  • consent of a legal guardian, or
  • a school project under school supervision and in accordance with school rules.

If the Controller becomes aware that a child’s data has been processed without appropriate consent, the Controller may restrict or delete the account and take reasonable corrective steps.

6. Data retention

  • Account data: for as long as the account exists; after deletion, certain data may be retained for a reasonable period (e.g., dispute resolution or security) and/or anonymized.
  • Payment and invoicing data: for the periods required by applicable laws (especially accounting and tax laws).
  • Technical and security logs: for a reasonable period necessary for operating and securing the Service.

After the retention periods expire, data is securely deleted or anonymized unless the law requires otherwise.

7. Recipients and processors

Personal data may be shared with the following categories of recipients/processors to the extent necessary:

  • hosting and infrastructure providers,
  • analytics providers (e.g., Google Analytics),
  • payment service providers/payment gateways (e.g., Stripe, PayPal) if you use paid features.

Hudbox does not store payment card details; payment data is processed by the relevant payment service providers.

8. Transfers outside the EU/EEA

Where personal data is transferred outside the EU/EEA (e.g., for certain providers such as Google, Stripe, or PayPal), such transfers are carried out only with appropriate safeguards in accordance with the GDPR (e.g., Standard Contractual Clauses or other recognized mechanisms).

9. Cookies

We use cookies and similar technologies primarily to:

  • ensure website functionality and authentication,
  • remember settings,
  • measure traffic and improve the Service (analytics) where enabled.

Optional cookies (e.g., analytics/marketing) are used only based on consent where required by law.

10. Your rights

Under the GDPR, you have the following rights in particular:

  • right of access,
  • right to rectification,
  • right to erasure (“right to be forgotten”),
  • right to restriction of processing,
  • right to object,
  • right to data portability,
  • right to withdraw consent (where processing is based on consent).

To exercise your rights, contact: info@hudbox.cz

11. Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority:
Czech Data Protection Authority (ÚOOÚ) – www.uoou.cz

12. Security

The Controller implements appropriate technical and organizational measures to protect personal data. However, absolute security of data transmission or storage cannot be guaranteed due to the nature of the internet.

13. Changes to this policy

This policy may be updated from time to time. The current version is always available on the Hudbox website.

14. Contact

Questions regarding privacy and personal data protection: info@hudbox.cz