Privacy policy

In force since 21 September 2026Responsible editor: Lisa Thomas

1. Data controller

The controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 (GDPR) is:

• Publisher / operatorAyvag Plus s.r.o.
• Legal formSpolečnost s ručením omezeným (s.r.o.) — private limited company under Czech law
• Registered addressModrého 996/11, Vysočany
  190 00 Praha 9
  Czech Republic
• Company number (IČO)28494024
• VAT number (DIČ)CZ28494024
• E-mailinfo@boricva.online
• Websitehttps://boricva.online
• Director of publicationLisa Thomas
• Responsible editorLisa Thomas

Ayvag Plus s.r.o. has not appointed a data protection officer, as it is not required to do so under Article 37 GDPR. Data protection enquiries reach the responsible editor at info@boricva.online.

2. What this site collects: nothing

To be precise about what “nothing” means here:

• No cookies of any kind, first-party or third-party, essential or otherwise.
• No local storage. No localStorage, no sessionStorage, no IndexedDB, no Web SQL, no cache-based identifier.
• No analytics. No Google Analytics, no Matomo, no self-hosted analytics, no server-side page-view counter tied to visitors.
• No advertising or conversion pixels. No Meta pixel, no Microsoft UET tag, no Google Ads remarketing tag, no affiliate-network tracking script.
• No fingerprinting. Nothing on this site reads your canvas, your fonts, your audio stack, your screen configuration or your hardware in order to identify you.
• No third-party requests. No web fonts, no CDN, no remote images, no embedded video, no social widget, no external JavaScript. Every file your browser loads comes from this domain.
• No forms. There is deliberately no contact form and no newsletter sign-up, because either would collect data.

The consequence is that no consent banner appears, because under Article 5(3) of Directive 2002/58/EC (the ePrivacy Directive) consent is required for storing or accessing information on your device — and we do neither. Section 4 of the cookie policy explains how to confirm this for yourself in about thirty seconds.

3. Server log files

Like any web server, the machine serving this site writes a technical access log. Each request records the requesting IP address, the date and time, the path requested, the HTTP status code, the number of bytes sent, the referring URL where the browser sends one, and the user-agent string.

• Purpose: operating and securing the server, diagnosing faults, and detecting and mitigating attacks and abuse.
• Legal basis: Article 6(1)(f) GDPR, the legitimate interest of Ayvag Plus s.r.o. in operating a functioning and secure website. We consider this interest not to be overridden by your rights, because the data is not used to profile, identify or track you and is not combined with any other source.
• Retention: log files are rotated and deleted on a short cycle, and in any event within 30 days, unless a specific entry has to be retained longer in connection with a security incident.
• Recipients: none. Log data is not shared, sold, exported to any analytics tool or transferred to any third country.

An IP address can constitute personal data. We do not attempt to link one to a person, and we have no means of doing so.

4. E-mail correspondence

If you write to info@boricva.online, we process your e-mail address, your name if you give it, and whatever you put in the message.

• Purpose: reading and answering your message.
• Legal basis: Article 6(1)(f) GDPR (our legitimate interest in responding to enquiries) and, where your message concerns a possible contract, Article 6(1)(b) GDPR.
• Retention: for as long as needed to deal with the matter, and then deleted, subject to any statutory retention obligation that may apply to business correspondence under Czech law.
• Recipients: the e-mail provider that operates our mailbox, acting as a processor under Article 28 GDPR.

5. Outbound partner links

Some links on this site are affiliate links, always marked partner link. Following one takes you, through a short redirect page on this domain, to the vendor or its affiliate network.

What happens on this site: the redirect page sets no cookie and stores nothing. A small script may copy campaign parameters that were already in the address you arrived with (for example utm_source, gclid or msclkid) onto the outgoing address, so the advertiser can attribute the click. That script reads only the current URL and writes nothing anywhere.

What happens after you leave: the destination is not us, and this policy stops at our boundary. The vendor and its affiliate network will very likely set their own cookies and process your data under their own policies, over which Ayvag Plus s.r.o. has no control. Read the privacy policy of whichever site you land on. Your browser sends a referrer of strict-origin-when-cross-origin, meaning that cross-site destinations receive only https://boricva.online and not the specific page you were reading.

6. Recipients, transfers and automated decision-making

We do not transfer personal data to any third country or international organisation. We do not carry out profiling or automated individual decision-making within the meaning of Article 22 GDPR. We do not sell, rent or otherwise make personal data available to anyone for their own purposes.

7. Your rights

Under the GDPR you have the right to request access to your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). Where processing is based on consent you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)) — though on this site there is no consent-based processing to withdraw.

Exercise any of these by writing to info@boricva.online. We answer within one month as required by Article 12(3). In practice, for a visitor who has not e-mailed us, we hold nothing beyond short-lived server logs and can rarely identify which entries relate to you.

You also have the right to lodge a complaint with a supervisory authority (Art. 77). The competent authority for Ayvag Plus s.r.o. is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz). You may alternatively complain to the supervisory authority of your own member state.

8. Children

This site is not directed at children and we do not knowingly process the personal data of anyone under 16.

9. Security

The site is served exclusively over HTTPS with HTTP Strict Transport Security enabled. Because no personal data is collected through the site, there is no visitor database to breach.

10. Changes

If this policy changes, the date at the top of the page changes with it. A change that meant we began collecting data would be announced prominently on the site before it took effect, and a lawful basis would be established first.