Skip to content
Mediversemediverse

Privacy policy

Effective from 17 September 2026

This policy describes how the Mediverse companies process the personal data of website visitors and of persons who contact them through the contact form.

1. Controllers of personal data

The joint controllers of personal data are:

Mediverse s.r.o.
Company ID (IČO): 172 55 597
with its registered office at Dismanova 2624/2, Stodůlky, 158 00 Prague 13, Czech Republic

and

Mediverse Slovakia, s.r.o.
Company ID (IČO): 31 388 141
with its registered office at Devínska Nová Ves 1348, 841 07 Bratislava - mestská časť Devínska Nová Ves, Slovak Republic

hereinafter jointly referred to as "Mediverse" or the "controllers".

Both companies may have access to personal data obtained through the website and may use it for the purposes set out in this policy.

In matters of personal data protection, you can contact the controllers at the following email address: company@mediverse-cee.com

The controllers do not have a designated data protection officer.

2. What personal data we process

Through the contact form, we may process in particular:

  • first name and surname,
  • company name,
  • email address,
  • message content,
  • information relating to the handling of the request and subsequent communication,
  • information on the giving or withdrawal of consent to receive commercial offers,
  • basic technical data associated with visiting the website or submitting the form, for example IP address, date and time of access or information about the device and browser used.

The contact form is not intended for sharing data on health status, diagnosis, treatment, medical records or any other sensitive personal data. Do not send such information through the form.

3. Purposes and legal bases for processing

Handling contact requests

We process personal data for the purpose of:

  • receiving and handling your query or enquiry,
  • contacting you in connection with your request,
  • preparing an offer and the related business negotiations.

The legal basis is the taking of steps at your request prior to entering into a contract or, where applicable, the controllers' legitimate interest in handling queries and business enquiries.

Keeping records of business communication

We may record the data in internal systems and in the CRM system for the purpose of:

  • keeping track of enquiries and business communication,
  • following up on previous dealings,
  • ensuring continuity of communication between the Czech and the Slovak company,
  • protecting the controllers' legal claims.

The legal basis is the controllers' legitimate interest in keeping proper business records, ensuring effective communication and protecting their rights.

Sending commercial offers

If you give us separate consent, we may also use your email address to send commercial offers relating to Mediverse services.

The legal basis for this processing is your consent.

Giving consent is voluntary and is not a condition for submitting the contact form or for handling your request. You can withdraw your consent at any time via the link provided in the commercial communication or by sending an email to company@mediverse-cee.com.

The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Compliance with legal obligations and protection of rights

To the extent necessary, we may also process personal data for the purpose of:

  • complying with obligations laid down by law,
  • keeping the necessary documentation,
  • demonstrating that consent was given or withdrawn,
  • establishing, exercising or defending legal claims.

The legal basis is compliance with the controllers' legal obligations and their legitimate interest in protecting their own rights.

4. Retention period for personal data

We retain personal data only for as long as necessary for the purpose for which it was obtained.

We retain data relating to a contact enquiry and business communication for as long as the request is being handled and thereafter, as a rule, for no longer than 3 years from the last relevant communication.

If a contractual or long-term business relationship arises, the data may be retained for its duration and thereafter for the period required by law or necessary to protect legal claims.

We retain data processed for sending commercial offers on the basis of consent for 5 years from the date consent was given, but no longer than until it is withdrawn.

To the extent necessary, we may retain information needed to prove that consent was given or withdrawn even after it has been withdrawn, where this is necessary to comply with legal obligations or to protect our rights.

Once the relevant period has expired, we will erase or anonymise the personal data or restrict its processing, unless its further retention is required by law.

5. Recipients of personal data

To the extent necessary, the following in particular may have access to personal data:

  • employees and associates of the Mediverse companies,
  • providers of the technical operation and administration of the website,
  • providers of server, email and communication infrastructure,
  • the provider of the Pipedrive CRM system,
  • the provider of the cookie consent management tool (CookieScript, operated by Rebrand Ltd.),
  • providers of traffic measurement, tag management and marketing tools, in particular Google Ireland Limited (Google Tag Manager, Google Analytics, Google Ads), Meta Platforms Ireland Limited and Microsoft Ireland Operations Limited (Microsoft Clarity),
  • the provider of the Rybbit traffic measurement tool, which is operated on our technical supplier's own infrastructure in the European Union,
  • providers of IT support and security,
  • accounting, legal, tax or other professional advisers,
  • public authorities, where disclosure is required by law.

The technical operation of the website is provided by an external supplier on a server located in the Federal Republic of Germany. The content of contact forms is not stored in the website database. After submission, it is forwarded to a Mediverse email inbox and may subsequently be entered manually into the Pipedrive CRM system.

Suppliers who process personal data on behalf of the controllers are obliged to protect it and to use it only to the extent necessary to provide the agreed services.

6. Transfers of data outside the European Union

In the normal operation of the website, data from the contact form is transmitted via a server located in the Federal Republic of Germany. The Rybbit traffic measurement tool is operated on infrastructure in the European Union.

The traffic measurement and marketing tools listed in Section 5, in particular the services of Google, Meta and Microsoft, may transfer personal data to their parent companies in the United States of America. These companies are certified under the EU-US Data Privacy Framework, or the transfer takes place on the basis of standard contractual clauses. These tools are activated only if you give your consent to this via the cookie banner.

However, some providers of the information, CRM, email or technical services we use may also use infrastructure or subcontractors outside the European Union or the European Economic Area.

Where such a transfer takes place, it is carried out only in accordance with the GDPR, in particular on the basis of an adequacy decision of the European Commission, standard contractual clauses or another permissible mechanism.

7. Voluntary provision of data

Providing data through the contact form is voluntary.

However, fields marked as mandatory must be completed so that we can accept the form, identify your request and respond to it. If they are not provided, it may not be possible to handle the request.

Consent to receiving future commercial offers is entirely voluntary and is not a condition for handling the request.

8. Your rights

Depending on the circumstances, you have the right to:

  • request information about the processing of your personal data,
  • access your personal data,
  • request the rectification of inaccurate data or the completion of incomplete data,
  • request the erasure of personal data,
  • request restriction of processing,
  • receive data in a structured and machine-readable format, where the right to data portability applies,
  • object to processing based on legitimate interest,
  • withdraw any consent you have given at any time,
  • lodge a complaint with the competent supervisory authority.

You can exercise your rights by email: company@mediverse-cee.com

Before handling a request, we may require reasonable verification of the requester's identity in order to prevent unauthorised disclosure or erasure of data.

We will respond to a request without undue delay, as a rule within one month of its receipt at the latest. In more complex cases, this period may be extended in accordance with the GDPR.

9. Complaint to a supervisory authority

If you believe that your personal data is being processed in breach of the law, you can lodge a complaint, in particular, with:

  • the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), if the processing concerns the Czech company or your activities in the Czech Republic,
  • or the Office for Personal Data Protection of the Slovak Republic, if the processing concerns the Slovak company or your activities in Slovakia.

This does not affect the right to contact another competent supervisory authority under the GDPR.

10. Automated decision-making

When processing data obtained through the contact form, we do not carry out automated individual decision-making that would produce legal or similarly significant effects for you.

11. Cookies

We use the CookieScript tool to manage cookie consents. On your first visit, a cookie banner is displayed in which you can allow or reject individual categories of cookies.

Cookies are divided into the following categories:

  • necessary - ensure the basic functioning and security of the website and store the choice you make in the cookie banner; they are always used and cannot be switched off,
  • functional - allow your preferences, such as language, to be remembered,
  • performance and analytics - are used to measure traffic and behaviour on the website (Google Analytics, Microsoft Clarity, Rybbit),
  • marketing - are used to measure the effectiveness of advertising and to display relevant advertising (Google Ads, Meta).

Optional cookies are activated only after you give consent for the relevant category. Until consent is given, Google's measurement and advertising tools run in Google Consent Mode with the default setting "denied", i.e. without storing cookies and without processing data for advertising purposes.

You can change or withdraw your consent at any time via the Cookie settings link in the website footer. Withdrawing consent is as easy as giving it.

More detailed information about the cookies used, their providers, purpose and duration is provided directly in the cookie banner settings.

12. Security of personal data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Only persons who need it to perform their work or contractual duties have access to personal data.

13. Changes to this policy

We may update this policy as appropriate, in particular if there is a change in legislation, the systems we use, our suppliers or the way personal data is processed.

The current version will always be published on this website together with its effective date.