English
Čeština
SlovenčinaPrivacy Policy
This Personal Data Protection Policy (hereinafter referred to as “Privacy Policy” or the “Policy”) describes the manner in which we, Dishboard s.r.o., with registered address at Peckova 296/15, Karlín, 186 00 Praha 8, registered in the Commercial Register of the Municipal Court in Prague, (hereinafter referred to as “we”, “our” or “us”) collects, processes and protects your personal data. We undertake to protect your personal data in accordance with applicable data protection laws and regulations, such as the Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data (the “GDPR”).
This Policy applies to the processing of personal data within all services, applications and websites operated by us in which the personal data are processed and that contain this Policy or link thereto. They apply to the processing of personal data of visitors of our website, users of our services and also representatives of our business partners and persons who contact us through our website or otherwise. This Privacy Policy applies when we process personal data as a data controller.
In the event of any conflict between this Privacy Policy and any specific privacy policy applicable to any our product or service, the specific privacy policy shall prevail. We do not require any special categories of data in order to provide our services and do not intentionally collect or process any special categories of such data in connection with the provision of our services.
The provisions of this Privacy Policy are effective as of the above effective date.
I. Which data do we process?
When you create an account on the our website, visit our website, subscribe to our newsletter or create a user account on our application, we may process the following categories of personal data:
- identification data: e.g. name, surname, nickname, date of birth, age, gender, weight
- contact details: e.g. address, phone number, email
- information about whether you have subscribed to the newsletter,
- information about your preferences and behaviour on the website,
- payment details,
- any other information you choose to share with us.
II. How do we process your data?
When you create an account on our website or within dishboard.app (“our application”), we process your data that are necessary to create your account, such as your first name, last name, email, etc. We also process the data required to process your purchase, which may include your contact, identification and payment details.
By creating an account on our application or our website, you enter into a contractual relationship with us. The legal basis for the processing of this personal data is the performance of a contract or pre-contractual relationship within the meaning of Article 6 (1) (b) GDPR.
With respect to the services we provide to you, we will process the information we obtain from the data and information you provide when using the Services. We may also process other information that you provide to us through questionnaires that you may complete. You may withdraw your consent at any time by contacting us at hello@dishboard.io, but withdrawal of this consent will result in us being unable to provide you with the services you have ordered.
We may use your data for marketing purposes, i.e. if you subscribe to our newsletter or other marketing communications. This communication is carried out in accordance with the applicable legal regulations. Advertising and marketing communications will only be sent to you if you have opted in for receiving these communication or you have not refused them, via email on our website or otherwise. The legal basis for the processing of your data for marketing purposes is your consent within the meaning of Article 6 (1) (a) GDPR or Section 7 (3) of Act No. 480/2004 Sb. on certain information society services.
You can withdraw your consent to receive marketing newsletters at any time by unsubscribing. You may also unsubscribe by contacting us directly at hello@dishboard.io. If you unsubscribe, we will only retain the data that is necessary to provide you with the services in accordance with the rules set out in this Policy.
In some cases, legal regulations imposes obligations on us to process your personal data, such as tax and accounting laws, anti-money laundering laws and the provision of certain data to public authorities by law. This means that we may process your personal data to ensure compliance with these obligations. The legal basis for processing such personal data is compliance with legal obligations within the meaning of Article 6 (1) (c) GDPR.
III. Cookies and other monitoring technologies on our website
Our website uses cookies to collect information about persons who visit our website. Cookies are small encrypted text files that are stored on your computer or other device. Cookies help us operate our website and provide important features and functionality on our website. They help us understand how our website is used. At the same time, we use cookies for statistical and analytical purposes, for example to track and monitor from which country, what website and how they were used to visit our website, as well as to enable personalization.
We use the following types of cookies:
- essential (strictly necessary) cookies that are necessary to provide access to our website and to provide the services you have specifically requested, to enable basic website functions such as tagging your data inputs, network management and accessibility; (if these cookies are disabled, our website may not function properly);
- analytic (performance) cookies help us analyse how you move around our website and what content is relevant to our users. Based on this, we are able to track user navigation on our website/application (we track automated events, custom events and event logging and store them in a real-time database). Analytic and performance cookies are also used to measure and improve performance.
- functional cookies allow us to remember choices you have made in the past, such as what language and currency you prefer, remember your name and email, and automatically fill out forms and allow for personalization, such as live chats, videos and the use of social media.
- advertising cookies that help deliver tailored and personalised advertising, such as Google Analytics, Google Tag manager, Facebook Pixel, LinkedIn Insight Tag, TikTok Pixel and UET Tag.
We may collect the following information through cookies: IP address, gender, time zone, browser settings, operating system, website traffic information including URL, searched terms, information about what you have viewed or searched for on our website, website response time, download errors, length of visits to certain pages, information about how you interact with the website (such as scrolling, clicking and hovering).
When you visit our website, you will be informed via the cookie banner located at the bottom of the website that we collect cookies. This banner allows you to manage what cookies we can collect. You can change your settings and withdraw your consent at any time via the privacy settings at the bottom of our website.
If we store data or access data already stored on your end device, such as a computer or mobile device, for analytical, functional or advertising purposes, we do so only with your consent within the meaning of Article 6 (1) (a) GDPR.
When collecting essential cookies, the legal basis for processing these data is a legitimate interest within the meaning of Article 6 (1) f) GDPR. It is not possible to disable these cookies through your privacy settings as our website may not function properly if you disable this type of cookies, however, if you still wish to do so, you can follow the instructions below under Blocking the cookies.
If you do not want us to use cookies, you can withdraw your consent for each type of cookie or re-grant it at any time after you have given it on the page dedicated to managing the cookie consent, which is available in the footer of our website under the title Cookies.
Blocking the cookies
If you do not want cookies to be collected, you can restrict, block or delete them at any time by adjusting your browser configuration. Although each browser has different parameters, the configuration of cookies can usually be found in the “Preferences” or “Tools” menu. If you disable cookies, the functionality of our website may be limited (in the case of essential cookies, you may not be able to access our website).
If you wish to prevent the installation of new cookies or if you wish to delete existing cookies, you can find instructions at the links below. The exact procedure depends on the browser you are using:
For mobile devices, you can limit tracking through your device's privacy settings (by turning off the advertising identifier), see https://www.networkadvertising.org/mobile-choice/.
In addition, you can use a third-party tool to opt out of targeted advertising. Third party opt-out tools available include Digital Advertising Alliance, Network Advertising Initiative and European Interactive Digital Advertising Alliance (Europe only).
To opt out of receiving cross-device web advertising (i.e., tracking a user across devices), you can access your device settings or visit and use the controls described on NAI Mobile Choices.
IV. How long will we process your data?
In general, personal data shall be retained for as long as necessary for the purpose for which they were processed. The period for which we will retain your personal data also depends on the legal basis on which your data are processed. If the processing is based on a legitimate interest, your data will be processed for the duration of our legitimate interest. In the case of data retained on the basis of legal obligations, the retention period is determined by applicable legal regulations. For data processed on the basis of the performance of a contract, the data are processed for the duration of the contractual relationship and for the relevant limitation period. If the processing is based on your consent within the meaning of Article 6 (1) (a) GDPR, your personal data will be deleted after the withdrawal of consent. You can withdraw your consent to the processing of your personal data at any time by sending a message to hello@dishboard.io. Please note that the same data may also be processed on more than one legal basis, in which case your withdrawal of consent or request for erasure of personal data may not result in the complete erasure of your personal data. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.
If you create an account on our website or application, we will process your personal data for the duration of that registration. You can request deletion of your account at any time.
V. Data sharing, processors and transfers to third countries
Your personal data will not be shared with any third party except in the following situations:
- data are necessary for the provision of our services,
- based on your consent,
- entrusting personal data to processors who process personal data on behalf of us,
- we are obliged to provide personal data based on the law or order of a public authority.
Processors
We use the services of verified suppliers (hereinafter referred to as “Processors”) to assist us in providing our services. These Processors process your personal data based on instructions from us. We use the following categories of Processors:
- hosting,
- analytical tools,
- marketing tools,
- IT tools,
- our contractors and other partners who assist us in providing our services
Transfers to third countries
In some cases, we may transfer your data to countries outside the EU/European Economic Area. Such a transfer can only take place if it complies with the GDPR and related applicable laws. This means, for example, that the provider is based in a country for which the European Commission has issued a decision that it provides an adequate level of protection for personal data, or that standard contractual clauses issued by the European Commission and/or other transfer mechanisms are in place that provide adequate safeguards with respect to the protection of your personal data. It may be necessary to apply certain additional measures in order to provide the data subject with a level of protection substantially equivalent to that guaranteed by the GDPR and related applicable laws.
You have the right to receive a copy of the Standard Contractual Clauses (“SCC”) that we have entered into with our Processors who are based outside the EU/EEA and who are used to transfer personal data outside the EU/EEA. If you wish to obtain a copy of the SCC relating to a specific transfer of your personal data, please contact us via hello@dishboard.io.
VI. Data security
We undertake to ensure that your personal data is stored securely. Therefore, we have taken appropriate technical and organizational measures to secure the personal data processed by us. These measures do not relieve you of the obligation to take appropriate measures to secure your personal data. You should, among other things, change your passwords regularly. On the other hand, you should not, among other things, use predictable usernames and/or passwords, share your passwords with others or provide access to your administrator account and/or disclose your personal information to others. We will never ask you for your password in any unsolicited communication. Immediately notify us of any unauthorized use of your administrator account or any other suspected breach of security.
VII. Your rights
Under the GDPR, you are entitled to the following rights:
Right to access
You have the right to be informed about, among other things, what personal data we process about you, for what purposes and who the recipients of your personal data are. If you wish to obtain such information, please contact us via our email hello@dishboard.io. If we process your personal data, we will provide you with the following information:
- purposes of processing such data,
- categories of personal data concerned,
- recipients or categories of recipients of your personal data,
- if possible, the period for which your personal data will be retained or at least the criteria that determine this period,
- existence of the right to require the controller to rectify or erase personal data or to restrict the processing of personal data concerning the data subject or to object to such processing,
- right to lodge a complaint with the supervisory authority,
- information about the source of your personal data that is not obtained directly from you, and
- information about the existence of automated decision-making, including profiling
Right to rectification (right to have the data completed)
You have the right to have any of your incomplete, inaccurate or outdated personal data rectified.
Right to erasure (right to be forgotten)
You have the right to have certain personal data we have collected and processed about you erased without undue delay. Please note that we may be entitled or even obliged to retain some personal data despite your request for erasure. This is particularly the case where we need to process your personal data to comply with legal obligations or to establish, exercise and defend legal claims.
Right to restriction of processing
In cases, such as
- when you dispute the accuracy of the personal data, for a period of time that allows us to verify the accuracy of the personal data,
- the processing is unlawful and you do not consent to the erasure of your personal data and request the restriction of its use,
- we no longer need your data for processing purposes, but your personal data are necessary for the establishment, exercise or defence of legal claims,
- you have objected to processing in connection with profiling until it is verified whether our legitimate grounds override yours,
you can request restriction of processing.
Right to data portability
You have the right to obtain the personal data you provide to us in a structured, commonly used and machine-readable format and to request that it be transferred to another controller, if technically feasible. Please note that the right to data portability only applies to data that you have provided to us and that we process as controller on the basis of your consent or the performance of a contract.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you that is carried out in the public interest or for the purposes of our legitimate interests, including profiling.
The exercise of your rights may be limited where we are required to retain any of your personal data for the purposes of complying with legal obligations, establishing, exercising or defending legal claims or for other compelling reasons set out in applicable data protection legislation.
Right not to be subject to the automated individual decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision:
- is necessary for entering into, or performance of, a contract between you and us;
- is authorised by the law and the law lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- is based on your explicit consent.
We do not make decisions based solely on automated processing that would have significant effects on its users. For the sake of completeness, we note that we use cookies and similar technologies, the use of which may constitute profiling. Information on how to withdraw your consent to the use of cookies or disable cookies can be found in Chapter III. Cookies of this Privacy Policy.
Right to lodge a complaint
If you believe that your data has been processed unlawfully, please contact us and we will try to resolve the issue. Under the GDPR, you have the right to file a complaint with the Úřad pro ochranu osobních údajů, which is located at Pplk. Sochora 27, 170 00 Praha 7.
VIII. Google API Services & Limited Use Disclosure
Dishboard's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we guarantee that data obtained through Google Workspace APIs:
- Will only be used to provide or improve the core user-facing features of our application.
- Will never be used for serving advertisements, including retargeting, personalized, or interest-based advertising.
- Will never be sold to data brokers or information resellers.
IX. Contact details
If you wish to exercise any of your rights set out above, please contact us at hello@dishboard.io.
If you would like to learn more about us, our privacy protection or this Privacy Policy, you may contact us at hello@dishboard.io.
Please help us to keep your information up to date. If you believe that any data processed by us are incorrect, or if you believe that we are not complying with this Privacy Policy, please contact us at hello@dishboard.io.
X. Final provisions
Our website, services and applications are not intended for persons under the age of eighteen (18). If you are under the age of eighteen, please do not provide your personal information to us.
This Privacy Policy may be amended by us at any time. If we change this Privacy Policy, we will post the changes on our website.
Dishboard s.r.o. · Peckova 296/15, Karlín, 186 00 Praha 8, Czech Republic · Download this Privacy Policy as PDF