Privacy policy

Last updated: 8 October 2026

1. Data controller

GEOLINE, spol. s r.o.
Company ID: 44264992
VAT ID: CZ44264992
Registered office: V Planinách 163/3, Dolní Měcholupy, 111 01 Prague 10, Czech Republic
Place of business (postal address): Na Křivce 1374/96, 101 00 Prague 10, Michle, Czech Republic
Entered in the Commercial Register kept by the Municipal Court in Prague, section C, file 5083

Contact for data protection matters:
E-mail: info@geoline.cz
Phone: +420 603 429 587

2. What personal data we process

In providing our services and running this website we process the following categories of personal data:

Identification data : first name, surname, title, company
Contact data : email address, telephone number, address
Contact form data : the content of your message and the service you selected
Billing data : company ID, VAT ID and billing address (for business clients)
Technical data : IP address, browser type, analytics data from Google Analytics and PostHog (with your consent only)

3. Purposes of processing and legal basis

We process personal data on the following legal bases under Article 6(1) of the GDPR:

Performance of a contract (Article 6(1)(b)): handling your enquiry, delivering survey services, communicating with you
Compliance with a legal obligation (Article 6(1)(c)): bookkeeping, tax records and statutory archiving
Legitimate interest (Article 6(1)(f)): defending legal claims and managing client relationships
Souhlas (Article 6(1)(a)): analytics cookies and measurement of website use (Google Analytics, PostHog)

4. Cookies, Google Analytics a PostHog

Our website uses cookies, small text files stored in your browser. We distinguish the following categories:

Essential cookies

These cookies are required for the website to work. They do not need consent and cannot be switched off.

Name	Purpose	Typ	Platnost
geoline_consent	Stores your cookie preferences	localStorage	12 months

Analytics cookies

These cookies are loaded only with your explicit consent. They help us understand how visitors use the site so that we can improve its content and how it works.

We use Google Analytics 4 , operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The data is processed on servers in the EU/EEA.

Name	Purpose	Poskytovatel	Platnost
_ga	Distinguishes unique users	Google	2 roky
_ga_*	Keeps session state	Google	2 roky
ph_* (localStorage)	Random visitor and session identifier	PostHog	until consent is withdrawn or expires (12 months)
ph_* (sessionStorage)	Distinguishes the browser window and session	PostHog	until the window is closed

Implementujeme Google Consent Mode v2 in what is known as advanced mode. This means the Google Analytics script is always present on the page, but until you give consent it stores no cookies or other identifiers on your device. In that state only an anonymous page-view signal is sent, with nothing that could identify you or track you across visits. Google uses these signals in aggregated form only; they do not serve to identify or track anyone across visits. Only once you give consent are the cookies listed in the table above activated and the measurement becomes complete. You can withdraw consent at any time (see section 5).

PostHog

With your consent we also use PostHog. It shows us where people click, how far they read, where they leave and how quickly pages load. We use that to make the site easier to find your way around. Without consent PostHog is not loaded at all and stores nothing on your device.

PostHog processes:

Pages visited, clicks and scroll depth
Device type, browser, operating system and window size
Approximate location (country, city) estimated from the IP address; PostHog does not store the IP address itself
Page load speed and errors the page reports in the browser
A recording of movement through the page (cursor movement, scrolling and clicks); the contents of completed form fields are not recorded
A random visitor and session identifier (the ph_* entries in the table above)

We do not link this data to your name or email address. The legal basis is your consent under Article 6(1)(a) of the GDPR, as with Google Analytics. We keep page recordings for no more than 90 days and other data for no more than 7 years.

The processor is PostHog Inc. (2261 Market Street #4008, San Francisco, CA 94114, USA). It stores the data on servers in the EU (Germany). Traffic goes through our subdomain t6g.geoline.cz, which Cloudflare provides for PostHog. PostHog may exceptionally process data in the USA (support, sub-processors); any such transfer is covered by the EU-U.S. Data Privacy Framework and the EU standard contractual clauses.

Our own cookie-free traffic measurement

Vedle Google Analytics provozujeme our own simple measurement on our server. On your device it writes nothing and reads nothing : no cookies, no identifiers, which is why we do not need your consent for it. What is recorded is the page visited, the referring address, the device type (mobile or desktop) and the name of the event (for example, opening the enquiry form).

Your IP address is not stored. It only goes into a one-way fingerprint computed with a random key that changes every day; we delete keys older than two days, so after that a visit cannot be traced back to an IP address or linked across days. The data stays on our server and we do not pass it on to anyone. The legal basis is our legitimate interest in measuring traffic and how the site performs, under Article 6(1)(f) of the GDPR; we keep the data for 14 months. You have the right to object to this processing (see section 8).

The map on the Contact page

On the Contact page we offer a Google Maps map. It loads only after you click it yourself. Until then no request goes to Google's servers. Once the map has loaded, Google processes your IP address and device data in line with its privacy policy. We give the address of both offices in the text as well, so you do not have to load the map.

Marketing cookies

We use no marketing or advertising cookies and no advertising systems. Google's advertising features (ad_storage, ad_user_data, ad_personalization) are permanently switched off in our measurement and cannot be enabled. Should that ever change, we will tell you in advance and ask for your separate consent.

5. Managing cookies

You can change or withdraw your cookie consent at any time by clicking the button in the footer of every page. When consent is withdrawn, the PostHog entries (ph_*) are deleted from your browser. If you dismiss the banner by clicking outside it, we treat that as choosing essential cookies only.

You can also manage cookies directly in your browser settings. Instructions for individual browsers:

6. How long we keep data

Contact forms : for as long as it takes to handle the enquiry, up to 3 years
Contract data : for the term of the contract and 10 years after it ends (statutory archiving)
Accounting records : 10 years (Accounting Act)
Tax records : 10 years (VAT Act)
Analytics data : anonymised after 14 months (Google Analytics setting)
Data PostHog : page recordings no more than 90 days, other data no more than 7 years
Our own traffic measurement records : 14 months; the daily key used for the fingerprint, 2 days
Souhlas s cookies : 12 months from the date given

7. Passing data to third parties

We may pass your personal data to the following categories of recipient:

Google Ireland Limited : operator of Google Analytics (with consent only) and Google Maps (only if you load the map on the Contact page yourself)
PostHog Inc. : operator of the PostHog analytics service (with consent only), storing data in the EU
Accounting and legal service providers : to the extent needed to meet statutory obligations
Public authorities : where required by law (the tax authority, the Cadastre of Real Estate administration)

We do not sell your data. It may leave the EU/EEA only exceptionally, with the processors Google and PostHog (see section 4), under the EU-U.S. Data Privacy Framework and the EU standard contractual clauses.

8. Your rights

As a data subject you have the following rights under the GDPR:

Right of access (Article 15): you have the right to obtain confirmation of whether we process your personal data and to access it
Right to rectification (Article 16): you have the right to have inaccurate data corrected
Right to erasure (Article 17): you have the right to ask for your data to be erased once the purpose of processing has ended
Right to restriction of processing (Article 18): you have the right to ask for processing to be restricted in certain circumstances
Right to data portability (Article 20): you have the right to receive your data in a structured format
Right to object (Article 21): you have the right to object to processing based on legitimate interest
Right to withdraw consent : you can withdraw consent you have given (for example to analytics cookies) at any time, without affecting the lawfulness of processing before the withdrawal

To exercise your rights, contact us at info@geoline.cz. We will respond to your request within 30 days.

9. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:

The Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Praha 7
Web: www.uoou.cz
E-mail: posta@uoou.cz
Phone: +420 234 665 111

10. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. The website is secured with HTTPS.