M2C Next
csskende

Legal

Privacy Policy

Information on the processing of personal data under Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR).

Dear visitors to the M2C Group website, thank you for your interest in our activities and services. This policy explains what information is collected when you visit our website, why it is processed and how it is used.

1. Basic information and the data controller

The controller of personal data obtained through visits to this website is Mark2 Corporation Czech a.s., a joint-stock company, company ID 25719751, VAT ID CZ25719751, with its registered office at Vladislavova 1390/17, Nové Město, 110 00 Prague 1, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section B, File 5692.

Mark2 Corporation Czech a.s. is part of the M2C Group. This name is used as the commercial and marketing designation of companies affiliated within the M2C group.

Given the scope of our activities, we have appointed a Data Protection Officer. Contact: cz.dpo@m2c.eu.

2. Personal data processed

When you visit the website, technical connection data may be temporarily processed by the web servers and hosting services. Your name, address and other contact details are not collected through ordinary browsing unless you provide them, for example through the newsletter form.

  • Date and time of the visit and pages visited.
  • Browser, operating system and device information.
  • The referring website and technical connection information, including the IP address required to deliver the website.

Individual services may process additional information, as explained below for newsletter requests, hosting analytics and YouTube.

3. Legal basis and purposes

Personal data required for website security, technical administration and stable operation is processed on the basis of the controller's legitimate interests under Article 6(1)(f) GDPR. Optional YouTube media is loaded on the basis of your consent under Article 6(1)(a) GDPR and applicable rules on access to information on your device. General browser settings alone do not activate YouTube on this website; you must confirm the external-media choice in the cookie settings.

4. Retention periods

Personal data is retained only for as long as necessary for the relevant processing purpose and any applicable legal obligations. Your cookie choice is valid for 180 days, as described in section 8. This is not a retention period for hosting analytics, emails or information processed by YouTube. No exact retention period for the hosting provider's analytics is stated in the documentation available to us; the lifetime of a visit identifier must not be interpreted as a data-retention period.

5. Recipients and international processing

Contracted service providers may process data to operate and secure the website, administer IT systems and deliver email. The website is provided through Lovable's hosting services. Hosting-related data processing is separate from the external-media choice in the cookie settings. Provider information: https://lovable.dev/privacy.

If you allow YouTube, Google receives technical and video-use information. Data may be processed outside the EU, including in the United States. Details about YouTube are provided in section 10. The source corporate policy's general statement about no third-country transfers therefore does not apply to these external media.

6. Security

Personal data is processed in accordance with the GDPR. Appropriate organisational and technical measures are used to protect data against unauthorised access, loss and misuse. The website uses encrypted communication through HTTPS.

7. Your rights

Subject to the conditions laid down in the GDPR, you have the following rights:

  • Access to your personal data.
  • Rectification or erasure of your data.
  • Restriction of processing.
  • Objection to processing based on legitimate interests.
  • Data portability.
  • Not to be subject to a decision based solely on automated processing, where the GDPR provides this right.
  • Withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal.

You may exercise your rights by contacting the Data Protection Officer at cz.dpo@m2c.eu or by writing to the controller's address above.

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

8. Cookies, browser storage and languages

The website stores your privacy choice in Local Storage, not in a cookie or a central consent database. Local Storage entries are not automatically sent with every request to the server. The entry m2c-next-cookie-consent contains version (the settings version), externalMedia (true when external media is allowed, false when it is rejected) and savedAt (the time you confirmed your choice). It contains no names, company details, email addresses or analytics identifiers.

The choice is valid for 180 days from confirmation. Expired, invalid or unsupported entries are ignored when the website loads, and YouTube remains disabled until a new consent is given. Necessary storage of your choice remains active. If browser storage is blocked, your confirmed choice applies only to the current visit; on the next page load, external media starts disabled and the notice is shown again.

Accept all permits YouTube; Reject optional leaves it disabled. In Cookie settings, the external-media switch changes the effective choice only after you select Save preferences. Opening or closing settings does not itself change consent. You can reopen settings from the footer on any page and withdraw by rejecting optional services, or by switching external media off and saving.

Withdrawing consent removes the YouTube player and prevents it from being loaded again while external media is disabled. It does not recall information already sent to Google or delete cookies or storage previously set by the provider. You can manage those through your browser and Google's settings. Changes to the stored choice in another open tab on the same domain are reflected in this tab. Expiry is checked when the website loads, not by automatically refreshing a page that remains open.

Your choice applies to the current browser and website domain, not to every device or domain. You can delete it by clearing website data. Hosting services may also use technically necessary security or delivery cookies; these are separate from the external-media choice. Restricting browser storage may affect the ability to remember your settings.

Language is determined by the address: / for Czech, /sk for Slovak, /en for English and /de for German. Article and legal pages use the relevant language prefix. The website does not create a separate language-preference storage entry.

9. Visitor analytics and technical diagnostics

The application has no separately configured Google Analytics, Google Tag Manager, Sklik retargeting, advertising pixels or session-recording integration. The references to Google Analytics and Sklik in the source M2C corporate policy do not describe services configured in this M2C Next application.

The published website also includes scripts supplied by the hosting provider Lovable for visitor measurement and event processing. The cookie settings control YouTube only; they do not enable or disable this hosting measurement.

Lovable describes its visitor analytics as cookieless, without analytics identifiers stored in the visitor's browser. Its documentation lists visits, page views, visit duration, bounce rate, referrers, countries and device types. A random visit identifier is discarded at the end of the visit, and sign-in is not used to link visits to a person. The script and reporting address use the website's own domain. Hosting services may also process technical error information for diagnostics. These statements about analytics do not mean that hosting involves no personal-data processing. Provider documentation: https://docs.lovable.dev/features/analytics.

10. YouTube and local fonts

Videos are provided by YouTube (Google). For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The player is embedded through youtube-nocookie.com in privacy-enhanced mode. Before you allow external media, no YouTube player is loaded; a locally rendered notice appears instead. Opening cookie settings from that notice does not load YouTube.

After consent, connecting to YouTube may transmit your IP address, browser and device information, information about the page and video usage, including before playback starts. Privacy-enhanced mode does not mean that no personal data is processed. When using the player, YouTube may use cookies or other storage technologies. If you are signed in to Google, the provider may be able to associate information with your account. Data may be processed outside the EU, including in the United States.

You can withdraw external-media consent through the footer as described in section 8. For information about Google's processing, retention and your rights, see https://policies.google.com/privacy.

The website uses the Montserrat font, served as a bundled website asset. Loading this font does not connect your browser to Google's font servers.

11. Newsletter requests

The newsletter form requests your name, company and email address. On submission, these details are processed to send your request by email to a.timarova@m2c.eu, with your email address used as the reply address. The application does not write these form submissions to its database. The details are nevertheless processed for email delivery and received in the recipient's mailbox; no claim is made that email providers or the recipient retain no data.

Newsletter requests are separate from consent to external media. To exercise your data-protection rights or withdraw consent to receiving updates, contact the Data Protection Officer or the newsletter contact above.

12. External websites and social networks

Links to third-party websites or social networks redirect you to those services. Their operators may process personal data when you use them. Their privacy notices govern that processing; the controller does not control the content or data processing of external websites.