Skip to content
fortuna-promo.cz Go to site

How We Handle Personal Data

Effective from 13 Oct 2026, reviewed 28 Oct 2026

Go to siteQuick links
Quick links
  1. Contacting the Controller
  2. What We Process About Visitors
  3. Why and on What Basis We Process Data
  4. Who Can Access the Data
  5. Protecting Data Transferred Outside the EU
  6. What Rights You Have as a Data Subject
  7. Making a Request and Response Times
  8. Lodging a Complaint
  9. Encryption and Other Safeguards
  10. Cookie Files
  11. Validity and Changes of the Policy

Contacting the Controller

Questions about how personal data are processed, as well as requests by which you exercise your rights, should be sent to contact@fortuna-promo.cz. They are dealt with by the controller, namely the operator of fortuna-promo.cz, which is responsible for data processing on this website.

What We Process About Visitors

Personal data are processed to the extent needed to operate, secure and analyse fortuna-promo.cz, or to answer an enquiry sent by email. Data concerning gambling, identity verification or payments fall outside this scope, and the website does not process data of Fortuna players at all.

What exactly is processed

  • Access information: page URLs, time of access, operating system, browser, device type and IP address, used for operation, protection and analytics.
  • Cookies: see the separate section on cookies.
  • Messages sent to contact@fortuna-promo.cz: your email address, the text and any signature.

Why and on What Basis We Process Data

Our processing of personal data follows Regulation (EU) 2016/679 (GDPR), Act No. 110/2019 Coll., on the processing of personal data, and, for cookies, § 89 of Act No. 127/2005 Coll., on electronic communications.

Website operation and security

Legal basis: the controller's legitimate interest under Art. 6(1)(f) GDPR. Data are kept for 12 months at most, or as technical capabilities allow.

Analytical and marketing cookies

Legal basis: your consent under Art. 6(1)(a) GDPR. They are kept until you withdraw consent or according to your browser settings.

Replying to an email enquiry

Legal basis: performance of a contract or legitimate interest under Art. 6(1)(b) or (f) GDPR. Data are held while the enquiry is being handled, but no longer than 6 months.

Who Can Access the Data

Two types of recipient may gain access to personal data, and only in connection with running the website and providing analytical services. Hosting and CDN providers make sure the pages work, remain available and are safe. Web analytics providers process visitor statistics that are used to optimise how the website functions. Where these providers are not publicly identifiable on the website, their names are not given. Without a legal basis, data are not passed on to third parties or unverified entities.

Protecting Data Transferred Outside the EU

Standard contractual clauses under Art. 46 GDPR are the instrument that ensures an adequate level of protection when data are transferred to third countries. They apply where we use an analytics tool whose provider is based outside the European Union or the European Economic Area; personal data then go to a third country. Without any service outside the EU/EEA, the transfer does not happen.

What Rights You Have as a Data Subject

Act No. 110/2019 Coll. and the GDPR grant you the following rights:

  1. Withdrawing consent. Where processing is based on your consent, you can withdraw it. The lawfulness of earlier processing is not affected.
  2. Objection. You may raise one against processing based on legitimate interest (Art. 21 GDPR).
  3. Portability. If processing is automated and based on consent or a contract, you can rely on the right under Art. 20 GDPR.
  4. Restriction of processing under Art. 18 GDPR.
  5. Erasure, also called the “right to be forgotten”, under the conditions laid down in Art. 17 GDPR.
  6. Rectification of inaccurate data (Art. 16 GDPR).
  7. Access to the data we process (Art. 15 GDPR).

Making a Request and Response Times

Where to write: the email address contact@fortuna-promo.cz.

When we reply: without undue delay, within 30 days of receiving the request at the latest.

When it may take longer: for complex requests or a higher number of them, the period can be extended by up to two further months, and you will be informed.

Lodging a Complaint

When: if you believe that the law has been breached in the processing of your personal data.
With whom: the supervisory authority, i.e. the Office for Personal Data Protection.
Where to find it: Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.

Encryption and Other Safeguards

  • Encrypted transmission: the connection between the user's device and the server is protected by the HTTPS/TLS protocol.
  • Protected access: access to the data is guarded by organisational and technical measures matching the state of the art.
  • Regular checks: the controller assesses its security settings and reduces the risk of unauthorised access and misuse.

Validity and Changes of the Policy

Can this policy change? Yes, when the law changes or when we change how we process personal data.

How will I find out? The controller will point out significant changes on the website. We nevertheless suggest reading the policy again on occasion.

“The Ministry of Finance warns: Participation in gambling may lead to addiction.” 18+

Explore the site