Privacy policy

This policy explains what DIVISTAR s.r.o. does with personal data in connection with navoris.online. It is short, because we have deliberately built the site so that there is very little to explain.

1. Who is responsible

The data controller is:

We have not appointed a Data Protection Officer; we are not required to. Data protection questions go to info@navoris.online and are handled by the responsible editor.

2. What we do not do

• We set no cookies, of any category, including so-called necessary ones.
• We use no analytics — no Google Analytics, no Matomo, no server-side analytics product, no pageview counter.
• We run no advertising or conversion pixels and no remarketing tags.
• We do no device or browser fingerprinting.
• We write nothing to localStorage, sessionStorage or IndexedDB.
• We make no third-party requests. There are no web fonts from a font service, no content delivery network, no embedded video, no social buttons and no remote images. Everything the page loads comes from navoris.online.
• We operate no contact form and no newsletter, so there is nothing to sign up to and no list.
• We never sell, rent or share personal data, and we do not transfer any to a third country.

3. Server logs — the only automatic processing

Like every web server, ours records each request it answers. A log line contains your IP address, the date and time, the address requested, the HTTP status, the number of bytes sent, the referring page if your browser sends one, and your browser's user-agent string.

Purpose: operating the service, diagnosing faults, and protecting the server against abuse such as automated attacks. Legal basis: our legitimate interest in running and securing the site (Article 6(1)(f) GDPR). We consider this proportionate because the data is not combined with anything else, is not used to profile anyone, is never used for advertising and is never disclosed for commercial purposes.

Retention: log files rotate daily and are deleted after 14 days, unless a specific line is preserved longer because it forms part of an investigation into an attack or a legal claim.

4. Email

If you write to info@navoris.online we necessarily receive your email address, your message and whatever else you put in it. We use that only to answer you and, where relevant, to correct an article.

Legal basis: our legitimate interest in responding to correspondence, or the performance of a legal obligation where the message concerns your data protection rights. Retention: we keep correspondence for as long as needed to deal with the matter and any follow-up, normally no longer than 24 months, then delete it. Email is not a secure medium; please do not send us sensitive personal data, passwords or payment details.

5. Links to other companies

When you follow a partner link or any other external link, you leave this site and arrive at a site we do not control. From that moment the destination's own privacy policy applies, and that site may well set cookies and track you — most commercial sites do. We have no access to what happens there, we receive no personal data back, and we are told only aggregate commission figures by the affiliate programme, containing no information that identifies you.

Your browser may send this site's address to the destination as a referrer. We set a strict-origin-when-cross-origin referrer policy, so what is passed across origins is the domain name only, never the full page address.

6. Your rights

Under the GDPR you have the right of access to your personal data, and rights to rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing rests on consent you may withdraw it at any time — although we ask for no consent, because we rely on none.

In practice there is very little to exercise these rights against. We hold no account for you and nothing that identifies you by name. To ask about server logs we would need the IP address and the approximate time; without those we cannot locate the records, and we will not collect further identifying information in order to search for them (Article 11 GDPR).

Requests: info@navoris.online. We reply within one month.

7. Complaints

If you believe we have handled your data unlawfully you may complain to a supervisory authority. Ours is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic. You may also complain to the authority in your own EU member state or place of work.

8. Children

This site is aimed at a general adult audience. We do not knowingly collect data from children, and since we collect nothing beyond server logs, there is no profile of any reader of any age.

9. Automated decision-making

None. We carry out no profiling and no automated decision-making producing legal or similarly significant effects.

10. Security

The site is served only over HTTPS, with HTTP Strict Transport Security enabled. Server software is kept patched. Because we store no reader data, a breach of this site could not expose reader accounts, passwords or payment information — there are none.

11. Changes

If we change how we handle data, this page changes and the date at the top changes with it. If we ever introduced anything requiring consent, we would ask for it before it ran — not afterwards.