bananzamed

Privacy policy

How we handle the data you share with us via the website, forms or email. Information under Art. 13 GDPR and Czech Act No. 110/2019 Coll.

Effective from 28 September 2026

Data controller

The data controller is Bananza Agency s.r.o., Company ID 17366372, VAT ID CZ17366372, registered office at 5. května 1007/3, Nusle (Prague 4), 140 00 Prague, registered in the Commercial Register kept by the Municipal Court in Prague under file number C 370475.

For data protection matters, contact us by email at info@bananza.cz or by phone at +420 777 439 640. We have not appointed a Data Protection Officer because we are not required to under Art. 37 GDPR.

What data we process

We only process data that you enter in a form yourself or send us by email or phone:

  • first and last name,
  • email and phone,
  • your clinic’s website address,
  • the content of your message.

Each time you visit the website, the server automatically records technical data: IP address, date and time of access, page address and browser type. We need it to keep the website secure and running.

We don’t collect patient health data or any other special categories of data under Art. 9 GDPR through the website. Please don’t include such data in the forms.

Why we process data and on what legal basis

Replying to enquiries and preparing the audit
Legal basis: taking steps prior to entering into a contract at your request, Art. 6(1)(b) GDPR.
Concluding and performing a contract
Art. 6(1)(b) GDPR.
Accounting and tax obligations
Compliance with a legal obligation, Art. 6(1)(c) GDPR, in particular the Accounting Act and the VAT Act.
Defence of legal claims, website security
Legitimate interest, Art. 6(1)(f) GDPR.
Commercial communications and analytics or advertising cookies
Your consent, Art. 6(1)(a) GDPR. You can withdraw consent at any time.

Providing data is voluntary. Without contact details, however, we can’t reply to you or prepare the audit.

How long we keep data

  • Enquiries that didn’t lead to cooperation: 12 months from the last contact.
  • Contract data: for the duration of the contract and then for the limitation period, no longer than 4 years.
  • Accounting records: 10 years under the Accounting Act.
  • Server logs with IP addresses: 14 days.
  • Data processed on the basis of consent: until consent is withdrawn.

Who we share data with

We don’t sell data. We only share it with processors who handle technical operations for us, under a data processing agreement:

  • website hosting provider: Hetzner Online GmbH, Germany,
  • email provider: Active24,
  • enquiry and contact management tool: Notion.

If you consent to cookies, visit data is also processed by Google (Analytics, Ads) and Meta Platforms (Meta Pixel).

Transfers outside the EU

We run the website and our mailbox in the European Union. We record form enquiries in Notion, a tool by Notion Labs, Inc., which processes data in the USA. If you consent to cookies, Google and Meta may also process data in the USA. In these cases, the transfer relies on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses.

Your rights

In connection with processing, you have the right:

of access
to find out what data we process about you,
to rectification
of inaccurate or incomplete data,
to erasure
if we no longer need the data or you have withdrawn consent,
to restriction of processing
for example while your objection is being resolved,
to data portability
to receive the data in a machine-readable format,
to object
to processing based on legitimate interest,
to withdraw consent
at any time, without affecting processing before withdrawal.

Send your request to info@bananza.cz. We’ll reply without undue delay, within one month at the latest.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

Cookies

We use the technical cookies the website needs to work without asking for consent. We only store analytics and advertising cookies if you actively agree to them in the cookie bar. You give consent separately for each purpose and can change it at any time in cookie settings.

Necessary
website operation, storing your cookie choice. No consent needed.
Analytics
Google Analytics: how you use the website. With consent.
Marketing
Google Ads, Meta Pixel: ad measurement and targeting. With consent.

The specific records the website stores:

bzCookies
this website, browser storage: your cookie choice. Until cleared in the browser.
_ga, _ga_*
Google Analytics: telling visitors and visits apart. 2 years, only with consent.
_gcl_au
Google Ads: measuring ad conversions. 90 days, only with consent.
_fbp
Meta Pixel: ad measurement and targeting. 90 days, only with consent.

Automated decision-making

We don’t carry out automated decision-making or profiling with legal effects on you.