Home / Privacy policy

Privacy policy

Valid from 6 October 2026

The Czech version is binding; the Ukrainian, Russian and English versions are informative translations.

1. Controller

777 PRODUCTION s.r.o., Company ID (IČO) 22247742, registered office at Kaprova 42/14, Staré Město, 110 00 Prague 1, entered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 413173. We are not VAT registered.
Contact: [email protected], [email protected], phone/WhatsApp +420 776 617 928

2. What data we process and why

  • Enquiries and questions (name, e-mail, phone, content of the message) — so that we can reply and prepare a quotation. Legal basis: steps prior to entering into a contract (Article 6(1)(b) GDPR).
  • Orders and contracts (identification and billing details, property details) — performance of the contract and bookkeeping. Legal basis: performance of a contract and legal obligation (points (b) and (c)).
  • Sale of products and online guides (name, e-mail, billing details, order number and guide access details) — performance of the contract, bookkeeping and protection of rights to the content (Article 6(1)(b), (c) and (f) GDPR).
  • Real estate brokerage — data to the extent required by Act No. 39/2020 Coll. on Real Estate Brokerage and Act No. 253/2008 Coll. on Anti-Money Laundering. Legal basis: legal obligation (point (c)).

Providing data is voluntary; without it, however, we cannot reply to an enquiry or conclude and perform a contract. We do not carry out automated decision-making or profiling — the system only checks that an order has been paid and complies with the terms and conditions.

3. How long we keep data

Enquiries that did not lead to cooperation: at most 1 year. Accounting documents (e.g. invoices): 5 years from the end of the accounting period to which they relate (Section 31 of Act No. 563/1991 Coll., on Accounting), or longer if tax rules require. Contracts and related correspondence: for the term of the contract and then for the limitation period (3 years, Section 629 of the Civil Code), so that we can assert or defend our claims. Data under the Anti-Money Laundering Act: 10 years.

4. Who we share data with

Only to processors who help us run our business (e-mail and web hosting providers, accountant, invoicing and order system) and to public authorities where required by law. We do not sell data.

Product orders, invoices and payment matching are handled by SimpleShop.cz, operated by Redbit s.r.o. (Czech Republic), as our processor.

The website, delivery of messages from website forms, spam protection of forms (Cloudflare Turnstile) and e-mail forwarding on our domain are provided by Cloudflare, Inc. (USA). Confirmations of receipt of a withdrawal from a contract and e-mails of the Tradespeople and Requests service are sent by Sendinblue SAS (Brevo brand, Paris, France) as our processor. If you write to us via WhatsApp, messages are also processed by WhatsApp Ireland Ltd. (Meta group) under its own terms. We receive payments to an account at ČSOB, a. s., which processes payment data as an independent controller. When transferring data outside the EU, we rely on safeguards under Chapter V GDPR (in particular the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework).

5. Cookies and browser storage

The website uses no analytics or advertising cookies and no audience measurement tools, and it loads fonts from our own server. That is why we do not show a cookie banner. If this changes in the future, we will ask for your consent in advance.

Website forms are protected against bots by Cloudflare Turnstile. When a form is submitted, it processes technical data about the browser and device (e.g. IP address and browser signals) needed to tell a human from a bot. Legal basis: legitimate interest in protecting the website and your communication from abuse (Article 6(1)(f) GDPR); these are technical means necessary for the service you requested, so no consent is needed. Cloudflare processes this data as our processor and partly as an independent controller under its Turnstile privacy policy.

Once an online guide is unlocked, we store a technical cookie in your browser that remembers the purchased access (until it expires, at most 12 months), and ticked checklist items are stored only on your device. The purchased service would not work without them, so no consent is needed.

In the Tradespeople and Requests service we store a technical cookie after you sign in that keeps you signed in. If you close an important notice on the website, the browser remembers until the window is closed that you have already seen it. No consent is needed because this is technical storage necessary for the service you requested (Section 89(3) of Act No. 127/2005 Coll.).

6. Your rights

You have the right of access to your data, rectification, erasure, restriction of processing and data portability. Just write to [email protected]. You can lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), uoou.gov.cz.

Right to object: You may object at any time to processing based on our legitimate interest (Article 6(1)(f) GDPR) by writing to [email protected]. We will then stop processing the data unless we demonstrate compelling legitimate grounds (Article 21 GDPR).