Privacy & data processing

Effective from 21 September 2026

Who decides about your data

The controller of personal data is PROPLYN CB s.r.o., company ID (IČO) 260 33 828, registered office at Vrbenská 199/25, České Budějovice 4, 370 01 České Budějovice, Czech Republic, entered in the Commercial Register maintained by the Regional Court in České Budějovice, Section C, File 10445.

Contact person for personal data protection: Martin Tošner, martin.tosner@proplyncb.cz.

What data we process, why and for how long

1) Simply viewing a file on the map

An uploaded DXF file is processed on the server in a temporary file and deleted immediately after processing. It is not stored anywhere and nobody has access to it.

2) Sharing a situation

If you click “Share situation”, we store:

• your email address,
• the situation – the processed DXF data and the file name,
• a record of your consent (date and time, version of this text) and the language we write to you in.

Why: to create a sharing link and deliver it to you by email. Legal basis: your consent (Art. 6(1)(a) GDPR). Providing your email is voluntary, but sharing cannot be created without it.

For how long: we first send you a confirmation email. Until you confirm it, the situation is not published and is deleted automatically within 24 hours together with your email. After confirmation the data stays stored until you delete the situation yourself using the link from the email (this removes the situation, the sharing link and your email address), or until you ask us to erase it or withdraw your consent.

Who can see the situation: anyone who knows the sharing link. The link is a long random string that cannot be guessed, but whoever receives it from you can pass it on – so send it only to people you want to show the situation to.

3) Emails we send you

We send you exactly two service emails: the sharing confirmation, and then the sharing link together with a deletion link. We do not use your address for marketing and we do not sell it.

4) Operational records (site security)

To protect the site against abuse (for example link guessing or mass submissions) we record every request to the application: the time, a fingerprint of the IP address, the type of request, the address without secret parts, the outcome and a shortened browser identifier (User-Agent). We do not store the IP address itself – only an irreversible fingerprint (a hash made with a secret key, for IPv6 from the whole subnet) from which it cannot be recovered. The records serve only security and limiting excessive traffic.

Legal basis: our legitimate interest in running the service securely and reliably (Art. 6(1)(f) GDPR). For how long: the records are deleted automatically after 30 days.

What may be in your file

DXF drawings can contain other people's personal data (for example owners' names or contacts in labels). Upload and share only data you are allowed to publish, preferably data without personal information – a shared situation can be viewed by anyone who knows the link. You are responsible for the content of the file you share.

Cookies and third-party services

The site uses a single functional cookie, lang, which remembers the language you chose. It contains no personal data, does not track you, and we do not need your consent to store it.

To display the map and the page, your browser connects directly to third-party services, which thereby learn your IP address and browser details. These are:

• map providers: ČÚZK (Czech Office for Surveying, Mapping and Cadastre – orthophoto, base and cadastral map), Esri and OpenStreetMap,
• libraries and fonts the page needs: unpkg.com, cdnjs.cloudflare.com and Google Fonts,
• when sharing, possibly the “I'm not a robot” check by Cloudflare Turnstile.

These services are independent controllers and follow their own policies; some providers (for example Esri, Google, Cloudflare) are based outside the EU, mainly in the USA. By clicking “Open in the cadastre” you go to the ČÚZK website, whose data processing we are no longer responsible for.

Who we share data with

Data about sharing is processed by our suppliers only on our instructions: the hosting provider whose server runs the application, and the email service provider through which we send emails. We do not pass data to anyone else unless the law requires it. There is no automated decision-making or profiling.

How we protect data

The confirmation and deletion links are stored only as irreversible fingerprints, so nobody (including us) can read them from the database. The application limits the number of requests, watches for abuse, and your email address is verified with a confirmation link so nobody can trigger sharing to someone else's address.

Your rights

You have the right to:

• obtain confirmation of whether we process your data and access to it,
• rectification of inaccurate data,
• erasure (“right to be forgotten”) and restriction of processing,
• data portability for the data you provided to us,
• object to processing based on legitimate interest,
• withdraw your consent at any time, as easily as you gave it (withdrawal does not affect the lawfulness of processing before it).

The quickest way is to delete the situation using the link you received by email. Otherwise write to martin.tosner@proplyncb.cz; we may ask you to confirm from the email address you entered when sharing so that we can verify you. Rights cannot be exercised for the operational records, because we cannot link them to a specific person (we do not have the IP address, only its irreversible fingerprint).

If you believe we handle your data in breach of the law, you have the right to lodge a complaint with the supervisory authority: the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz.

Changes to this text

We may update this text, for example when we extend the application. For each consent we store which version of the text it was given for. The current version is always on this page.