Privacy Policy
Privacy and Cookies Policy
Effective date: 2026-06-04 | Version: 1.0
Data controller
The data controller for the personal data processed through this website is bwin. You can contact our Data Protection Officer at dpo@bwin-hra.cz for any questions or concerns regarding data protection.
What data we process
We process the following categories of personal data:
- Identification data
- Contact details
- Transactional data
- Data required for AML and KYC procedures
- Cookies and behavioural data
Purposes and legal bases
| Purpose | GDPR Article 6 Basis | Retention Period |
|---|---|---|
| Providing services | Contractual necessity (Art. 6(1)(b)) | 10 years for AML |
| Legal compliance | Legal obligation (Art. 6(1)(c)) | 5 years for accounting |
| Marketing | Consent (Art. 6(1)(a)) | Until consent withdrawn |
| Fraud prevention | Legitimate interest (Art. 6(1)(f)) | 10 years for AML |
Retention periods
We retain personal data as follows:
- For AML purposes, data is retained for 10 years.
- Accounting records are kept for 5 years.
- Marketing data is retained until consent is withdrawn.
Recipients of personal data
Your data may be shared with the following recipients:
- Payment service providers
- KYC service providers
- Ministry of Finance of the Czech Republic (MF ČR)
- Financial Analytical Office (FAÚ)
- Courts and other legal authorities
Transfers to third countries
If applicable, we use standard contractual clauses (SCCs) to ensure adequate protection when transferring data to third countries.
Your rights as a data subject
Under GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent
- Right to not be subject to automated decision-making
How to exercise your rights
To exercise your rights, please contact our Data Protection Officer at dpo@bwin-hra.cz. We will respond within 30 days.
Complaint to the Office for Personal Data Protection (Úřad pro ochranu osobních údajů - ÚOOÚ)
If you believe your rights have been violated, you can file a complaint with the Office for Personal Data Protection at Pplk. Sochora 27, 170 00 Praha 7, or visit uoou.cz.
Data security
We take data security seriously and implement encryption and two-factor authentication (2FA) to protect your information.
Cookies
What cookies are
Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie.
Categories of cookies
- Strictly necessary cookies
- Functional cookies
- Analytics cookies
- Marketing cookies
Cookie table
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| PHPSESSID | Internal | Session management | Session | Strictly necessary |
| _ga | Analytics | 2 years | Analytics | |
| _gid | Analytics | 24 hours | Analytics | |
| _fbp | Marketing | 3 months | Marketing | |
| cf_clearance | Cloudflare | Security | 30 minutes | Functional |
| cookieConsent | Internal | Consent management | 1 year | Functional |
| language | Internal | Language preference | 1 year | Functional |
| sl_session | Internal | Session tracking | Session | Strictly necessary |
Third-party cookies
We use third-party cookies from providers such as Google Analytics (GA ID: G-70N6PFP6D9) and Cloudflare.
Consent management
We require your consent for non-essential cookies, which you can manage through our cookie banner.
Browser controls
You can manage your cookie preferences through your browser settings:
Changes to this policy
We may update this policy from time to time. Any changes will be communicated with a 14-day notice before they take effect.
Contact the Data Protection Officer (DPO)
If you have any questions regarding this policy, please contact our DPO at dpo@bwin-hra.cz.