Privacy & cookies
1. Controller
Cerebri Media s.r.o., Anglická 336/21, 120 00 Praha 2, Czech Republic, ID No. (IČO) 22650849, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 419639 (“we”). You can contact us via the contact e-mail shown on this website: 
2. What we process and why
Server logs. When you visit the website, our hosting server records technical data (IP address, date and time, requested page, browser and device information). We use it to operate and secure the website on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Logs are kept only as long as necessary for this purpose and are then deleted.
E-mail communication. If you contact us by e-mail, we process your e-mail address, name and the content of your message to reply and handle your request (Art. 6(1)(b) or (f) GDPR). We keep the correspondence only as long as needed for that purpose or required by law. The website has no contact or other forms.
Analytics (only with your consent). We use Google Analytics 4 to understand how the website is used. It runs in Google Consent Mode v2: by default all analytics and advertising storage is denied and the Google Analytics script is loaded only after you click “Accept” (Art. 6(1)(a) GDPR and § 89(3) of Act No. 127/2005 Coll., on Electronic Communications). Google Analytics then uses your IP address to derive approximate location (Google Analytics 4 does not log or store IP addresses), an online identifier, and data about your device and visits. Data in Google Analytics is retained for no longer than 14 months.
3. Cookies and local storage
_ga, _ga_<ID> – Google Analytics cookies used to distinguish visitors; set only after consent; expire after up to 2 years.
cm_consent – stored in your browser’s local storage to remember your cookie choice; strictly necessary, no consent required.
We do not use advertising or social media cookies.
4. Recipients and transfers
Google Ireland Limited acts as our processor for Google Analytics. Data may be transferred to Google LLC in the USA; such transfers rely on the EU-US Data Privacy Framework, under which Google LLC is certified, and on standard contractual clauses. Server logs are processed by our hosting provider (processor). We do not sell personal data.
5. Your rights
You have the right to access your personal data, to rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. You can withdraw your consent to analytics at any time via the link in the footer; withdrawal does not affect the lawfulness of processing before it. To exercise your rights, contact us via the contact e-mail shown on this website. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz).
Effective date: 4 November 2026