Privacy policy

This site is built to collect nothing. This policy explains exactly what that means, and is honest about the little that is unavoidable.

1. Who is the controller

• PublisherConsortexa s.r.o.
• Registered addressTigridova 1501/6, Michle, 140 00 Praha 4
• Company number28476891
• VAT numberCZ28476891
• Director of publicationAshley Jackson
• Contactinfo@novatova.online
• Websitehttps://novatova.online/

Consortexa s.r.o. is the data controller for the processing described below, within the meaning of Article 4(7) of Regulation (EU) 2016/679 (GDPR). We are not required to appoint a Data Protection Officer; data protection enquiries go to info@novatova.online.

2. What we do not do

• We set no cookies of any kind — not functional, not analytical, not advertising.
• We use no localStorage, sessionStorage or IndexedDB. The site’s only script does not touch browser storage.
• We run no analytics — no Google Analytics, no Matomo, no self-hosted alternative, no server-side analytics product.
• We embed no advertising or conversion pixels, and no social media widgets.
• We attempt no device fingerprinting.
• We load no third-party resources. Fonts are the ones already on your device; the stylesheet, the script and every image are served from this domain. Loading this page causes your browser to contact no server other than ours.
• We operate no contact form, newsletter, account system or comment section, so there is nothing on the site that could collect data from you.

You do not have to take our word for any of this. The cookie policy explains how to verify it yourself in about thirty seconds using your browser’s developer tools.

3. What is processed, and on what basis

3.1 Web server access logs

Like essentially every web server on the internet, the server that delivers this site writes an access log. Each entry contains the IP address of the requesting device, the date and time, the address of the page requested, the HTTP status returned, the number of bytes sent, the referring page if your browser sent one, and the browser user-agent string. An IP address is personal data under the GDPR, so we account for it here.

• Purpose: operating the site, diagnosing faults, and detecting and mitigating abuse such as automated scanning or denial-of-service traffic.
• Legal basis: Article 6(1)(f) GDPR — our legitimate interest in running a secure and functioning website. We consider this interest not to be overridden by your rights, because the data is not used to build any profile, is never combined with other sources, and is never used for marketing.
• Retention: log files are rotated and deleted on the server’s standard schedule; we do not archive them, export them, or analyse them except when investigating a specific fault or security incident.
• Not used for: analytics, audience measurement, advertising attribution or profiling of any kind.

3.2 E-mail you send us

If you write to info@novatova.online, we process your e-mail address, your name if you give it, and the content of your message.

• Purpose: reading and answering your message, and keeping a record of corrections requested and made.
• Legal basis: Article 6(1)(f) GDPR — our legitimate interest in responding to correspondence; or Article 6(1)(b) where your message concerns a contractual or pre-contractual matter; or Article 6(1)(c) where we must retain it to comply with a legal obligation.
• Retention: for as long as needed to deal with the matter, and afterwards only where a statutory retention period applies.
• Please do not send us special categories of personal data (health, political opinions, and so on). We have no use for them.

3.3 What happens when you follow a partner link

Commercial links on this site pass through an internal address on this domain (/c/...) and then send your browser to the advertiser or to the advertiser’s affiliate network. Two things are worth being precise about:

• What we pass on. If you arrived at this site with campaign parameters already in the address bar (for example utm_source, msclkid or gclid), our script copies those same parameters onto the outbound link so the advertiser can attribute the visit. It creates nothing new, reads no identifier from your device and stores nothing.
• What happens next is not ours. Once you leave this domain you are on the advertiser’s site, under the advertiser’s privacy policy, and the advertiser or its network will typically set its own cookies for attribution. We have no control over that and no access to it. Read their notice before you buy.
• What we receive back. Commission statements from the advertiser, which tell us how many qualifying purchases occurred. They do not identify individual customers to us, and we never receive your name, your address or your payment details.

4. Recipients of data

We do not sell, rent, share or otherwise disclose personal data. The only third party involved is our hosting provider, which operates the server on our instructions as a processor under Article 28 GDPR and which necessarily has access to the server logs described above. Our e-mail is delivered through a commercial mail provider acting in the same capacity. We may disclose data where we are legally compelled to do so.

5. International transfers

The site is hosted in the European Union and we do not transfer personal data outside the European Economic Area. Note that following an outbound partner link may take you to a service operated outside the EEA; from that point the operator of that service is the controller, not us.

6. Automated decision-making

There is none. We carry out no profiling and no automated decision-making within the meaning of Article 22 GDPR.

7. Children

This site is aimed at an adult general audience. We do not knowingly process any personal data relating to children, and there is no mechanism on the site through which a child could submit any.

8. Your rights

Under Articles 15 to 22 GDPR you have the right to request access to your personal data, its rectification or erasure, restriction of processing, and portability where applicable, and you have the right to object at any time to processing based on our legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting the lawfulness of what preceded the withdrawal.

To exercise any of these rights, write to info@novatova.online or to Consortexa s.r.o. at Tigridova 1501/6, Michle, 140 00 Praha 4. We will respond within one month as required by Article 12(3) GDPR. In practice, because we hold so little, the main thing we can act on is a server log entry or an e-mail thread — and to find a log entry we would need the approximate date, time and IP address.

You also have the right to lodge a complaint with a supervisory authority. Ours is the Czech Office for Personal Data Protection: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, Czech Republic — uoou.gov.cz. You may also complain to the supervisory authority of your own EU member state or place of work.

9. Security

The site is served over HTTPS with HTTP Strict Transport Security enabled. It is a set of static files: there is no database, no login, no user-generated content and no server-side application code, which removes most of the ways a website leaks data.

10. Changes to this policy

If we ever change how the site works in a way that affects this policy — for example by introducing any form of measurement — we will update this page, change the date at the top, and implement the consent mechanism that the change would require before the change goes live, not after.