Privacy Policy (GDPR)

Effective from 24 September 2026

1. Who is the controller of your personal data

The controller of your personal data is TAF Estate s.r.o., Company ID (IČO) 21140367, with its registered office at Jankovcova 1037/49, Holešovice, 170 00 Prague 7, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 397315 (“TAF Estate” or “we”).

If you have any questions about the protection of your personal data, contact us by e-mail at gdpr@taf-estate.cz, by phone at +420 608 144 426 or by post at our registered office. We have not appointed a data protection officer as we are not legally required to do so.

2. Which websites this policy covers

This policy applies to www.taf-estate.cz and to the websites of our projects that link to it, in particular www.ukrajinska9.cz, www.milicova25.cz, www.plzenska32.cz, www.lucemburska23.cz, www.liborova11.cz, www.vrsovicka44.cz and www.pripotocni27.cz.

Units in individual projects may be sold by a project company within the TAF Estate group that owns the building. If your enquiry concerns such a property, we will pass your data to that company so that it can negotiate the purchase with you. That company is then a separate controller of the data needed to conclude and perform the purchase agreement, and we will give you its details no later than during contract negotiations.

3. What data we process

• Identification and contact details – first name, last name, e-mail and, optionally, phone number, which you provide via a form, by e-mail or by phone.
• Content of communication – the text of your message and details of the property you are interested in or are offering us to buy.
• E-mail for our newsletter – if you subscribe to our newsletter.
• Website usage data – IP address, cookie identifiers, device and browser type, pages visited and interactions with the website. We only collect analytics and marketing data with your consent.

4. Purposes, legal bases and retention periods

• Responding to your enquiry and negotiating the purchase, sale or buyout of a property (including arranging viewings). Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with prospective clients (Art. 6(1)(f) GDPR). Retention: 2 years from the last contact.
• Concluding and performing contracts and complying with legal obligations, in particular accounting and tax obligations. Legal basis: Art. 6(1)(b) and (c) GDPR. Retention: for the duration of the contract and thereafter for the period required by law (usually 10 years for accounting and tax records).
• Sending news about our projects (newsletter). Legal basis: your consent (Art. 6(1)(a) GDPR). Retention: until you unsubscribe. You can unsubscribe at any time via the link in every e-mail or by writing to gdpr@taf-estate.cz.
• Protecting the website and forms against spam and abuse (Google reCAPTCHA, hosting security). Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: only as long as strictly necessary.
• Measuring traffic and improving the website (Google Analytics, Microsoft Clarity). Legal basis: your consent given in the cookie banner (Art. 6(1)(a) GDPR). Retention: until you withdraw consent, at most for the period stated in the Cookie Policy.
• Measuring and targeting advertising (Meta Pixel, Seznam Sklik, Google advertising tools). Legal basis: your consent (Art. 6(1)(a) GDPR). Retention: until you withdraw consent, at most for the period stated in the Cookie Policy.
• Protecting our legal claims. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: for the duration of the applicable limitation periods.

Providing your data is voluntary, but without your contact details we cannot reply to you or prepare a contract. We do not carry out automated decision-making with legal effects. Only with your consent may marketing tools tailor the ads you see based on your activity on the website.

5. Who we share your data with

We do not sell your data. We only share it, to the extent necessary, with the following recipients:

• project companies within the TAF Estate group and cooperating real estate agents, if your enquiry concerns their property;
• processors that operate our websites and services for us: Webflow, Inc. (website and form hosting), Cloudflare, Inc. (website security and delivery), Celonis, s.r.o. – Make service (automated forwarding of form enquiries), Ecomail.cz s.r.o. (newsletter delivery), Google Ireland Ltd. and Google LLC (Google Analytics, Google Tag Manager, Google reCAPTCHA, Google advertising tools), Microsoft Ireland Operations Ltd. and Microsoft Corporation (Microsoft Clarity), Meta Platforms Ireland Ltd. (Meta Pixel), Seznam.cz, a.s. (Sklik), IPinfo, Inc. (detecting the country for the phone prefix in forms), the provider of our cookie consent tool, and IT and marketing service providers that manage our websites and campaigns;
• lawyers, notaries, banks and other parties whose involvement is necessary for the transfer of a property;
• public authorities where required by law.

6. Transfers outside the EU

Some of the providers listed above (in particular Google, Microsoft, Meta, Webflow, Cloudflare and IPinfo) may also process data in the USA. Such transfers are based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or, for providers not certified under it, on standard contractual clauses approved by the European Commission.

7. Cookies

We only use analytics and marketing cookies with your consent. You can find the list of cookies and how to change your settings in our Cookie Policy.

8. Your rights

• the right of access to your personal data (Art. 15 GDPR);
• the right to rectification of inaccurate data (Art. 16 GDPR);
• the right to erasure (Art. 17 GDPR);
• the right to restriction of processing (Art. 18 GDPR);
• the right to data portability (Art. 20 GDPR);
• the right to object to processing based on legitimate interest, including direct marketing (Art. 21 GDPR);
• the right to withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal;
• the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

You can exercise your rights by e-mail at gdpr@taf-estate.cz or by post at our registered office. We will respond without undue delay and within one month at the latest.

9. Data security

We protect your data with appropriate technical and organisational measures against misuse, loss or unauthorised access. Access is limited to people who need it for their work and are bound by confidentiality.

10. Changes to this policy

We may update this policy, for example when the tools we use or the law change. The current version is always published on this page.