Privacy Policy

Last updated: July 18, 2025

Dear visitors, on this page we inform you about how we handle your personal data on the website [name of your website] (hereinafter referred to as the “website”). The protection of your personal data is a priority for us, and therefore we act in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other relevant legal regulations.

1. Personal data controller

The personal data controller is:
GALERIE MEDICAL CENTER, sro, Cyrila Boudy 8, 272 01 Kladno, Company ID 28236521, file C 134 386, Municipal Court Prague
Contact details: info@gmcenter.cz

You can contact us if you have any questions regarding the processing of your personal data.

2. What data do we collect and why?

We collect personal data on our website only to the extent necessary and for clearly defined purposes. Below we explain what data we collect, how we process it and why:

2.1. Contact form (Contact Form 7 with Google reCAPTCHA)

If you fill out the contact form on our website, we collect the following data:

• Name (if required on the form)
• Email address (required)
• Phone number (if required on the form)
• Message or other information provided in the form
• IP address and time of sending (automatically collected for record-keeping purposes)

Google reCAPTCHA : To protect the form from spam, we use the Google reCAPTCHA service, which may collect:

• IP address
• Device and browser information
• User behavior data (e.g. mouse movements, clicks)

Purpose of processing : Processing and handling your request, providing a response or service offer; protecting the form from automated attacks (reCAPTCHA).

Legal basis : Your consent given when submitting the form (Article 6(1)(a) GDPR) or the legitimate interest of the controller in handling the request and protecting the website (Article 6(1)(f) GDPR).

Retention period : We store the data from the contact form for the period necessary to process the request, but no longer than 1 year from the date of submission, unless there is another legal reason for longer storage. The data from reCAPTCHA is only stored for the period necessary for verification.

Recipient of data : The data from the form is not passed on to third parties unless necessary to process the request. The data from reCAPTCHA is processed by Google LLC , which is certified under the EU-US Data Privacy Framework.

2.2. Google Analytics

We use Google Analytics on our website to analyze traffic and user behavior.

Data collected :

• Anonymized data about website behavior (e.g. pages visited, time spent on the website)
• IP address (anonymized before storage)
• Device and browser information (e.g. device type, operating system)

Purpose of processing : Improving the content and functionality of the website based on traffic analysis.

Legal basis : Your consent to the use of cookies, which you grant via the cookie bar when visiting the website (Article 6(1)(a) GDPR).

Retention period : Data is retained for the period specified in the Google Analytics settings, but not more than 26 months, unless otherwise set.

Data recipient : The data is processed by Google LLC , which is certified under the EU-US Data Privacy Framework.

Note : Google Analytics is set to automatically anonymize IP addresses, thereby minimizing the collection of personal data.

2.3. Google Fonts

We use Google Fonts on our website to ensure a consistent font appearance.

Data collected :

• IP address (may be collected when loading fonts)
• Browser and device information (e.g. browser type, operating system)

Purpose of processing : Ensuring an aesthetic and consistent display of fonts on the website.

Legal basis : Legitimate interest of the controller in ensuring a high-quality appearance of the website (Article 6(1)(f) GDPR). If fonts are loaded directly from Google, consent may be required via the cookie bar.

Retention period : Data is processed only for the duration of the session and is not stored for a long time unless otherwise set.

Data recipient : The data is processed by Google LLC , which is certified under the EU-US Data Privacy Framework.

Note : Where possible, Google Fonts are loaded locally to minimize data transfer to third parties.

2.4. Google Maps

We use Google Maps on our website to display interactive maps.

Data collected :

• IP address (anonymized before storage)
• Device and browser information (e.g. device type, operating system)
• Map interaction data (e.g. zooming, panning)

Purpose of processing : Providing an interactive map to display location or other relevant information for visitors.

Legal basis : Your consent to the use of cookies, which you grant via the cookie bar when visiting the website (Article 6(1)(a) GDPR).

Retention period : Data is retained for the period specified in Google Maps settings, usually for the duration of the session or a maximum of 26 months unless otherwise set.

Data recipient : The data is processed by Google LLC , which is certified under the EU-US Data Privacy Framework.

2.5. Embedded YouTube videos

We embed videos from the YouTube platform on our website to provide multimedia content.

Data collected :

• IP address (anonymized before storage)
• Device and browser information (e.g. device type, operating system)
• Video interaction data (e.g., play, pause)

Purpose of processing : Displaying videos for informational or entertainment purposes.

Legal basis : Your consent to the use of cookies, which you grant via the cookie bar when visiting the website (Article 6(1)(a) GDPR).

Retention period : Data is retained for the period specified in YouTube settings, usually for the duration of the session or a maximum of 26 months unless otherwise set.

Data recipient : The data is processed by Google LLC , which is certified under the EU-US Data Privacy Framework.

Note : We use YouTube in "enhanced privacy" mode (nocookie) where possible to minimize the collection of personal data.

3. Cookies

Our website uses cookies to ensure optimal functionality and a better user experience. Cookies are small text files stored on your device. We use the following types of cookies:

• Essential cookies : Necessary for the basic functioning of the website (e.g. technical navigation, reCAPTCHA functionality). These cookies do not require consent.
• Analytical cookies : Used to analyze traffic through Google Analytics. These cookies are only activated with your consent.
• Functionality cookies : Enable the functionality of Google Maps, YouTube videos and loading of Google Fonts (if they are not loaded locally). These cookies are only activated with your consent.

When you first visit the website, we ask you to consent to the use of cookies via a cookie bar. You can withdraw or modify your consent at any time in the cookie settings on our website. For more information about cookies, please see our Cookie Policy .

4. Your rights under GDPR

According to the GDPR, you as a data subject have the following rights:

• Right to information : The right to be informed about what data we collect and how we process it.
• Right of access : You can request a copy of the personal data we process about you.
• Right to rectification : You can request the correction of inaccurate or incomplete data.
• Right to erasure : You can request the erasure of your personal data (“right to be forgotten”).
• Right to restriction of processing : You can request restriction of processing of your data.
• Right to data portability : You can request that your data be transferred to another controller.
• Right to object : You can object to the processing of your data, for example for direct marketing purposes.
• Right to withdraw consent : If you have given consent to the processing of your data, you can withdraw it at any time.

To exercise these rights, please contact us at info@gmcenter.cz. We will process your request without undue delay, no later than 30 days from its receipt.

5. Transfer of data to third parties

We only transfer your personal data to the extent necessary and under conditions that ensure its security:

• Google LLC : For analytical purposes (Google Analytics), form protection (reCAPTCHA), map display (Google Maps), video playback (YouTube) and font loading (Google Fonts). Google ensures IP anonymization and is certified according to the EU-US Data Privacy Framework.

The data from the contact form is not passed on to third parties unless it is necessary to process the request. Your data is not passed on outside the EU unless an adequate level of protection is ensured.

6. Data security

We have taken technical and organizational measures to protect your personal data, including:

• Data encryption in transit (HTTPS).
• Restricting access to data only to authorized persons.
• Regular updates and security of our website and the plugins used.

7. Data retention period

We retain personal data only for the period necessary to fulfill the purpose for which it was collected:

• Data from the contact form : Maximum 1 year from the date of sending the request, unless there is another legal reason for longer retention.
• Data from Google Analytics, Google Maps and YouTube : Maximum 26 months unless otherwise set.
• Data from Google Fonts and reCAPTCHA : Only for the duration of the session, unless otherwise set.

After this period, the data is deleted or anonymized.

8. Contact the supervisory authority

If you feel that the processing of your data is not in accordance with the GDPR, you can file a complaint with the supervisory authority:

Office for Personal Data Protection
Lt. Col. Sochora 27, 170 00 Prague 7, Czech Republic
Website: www.uoou.cz

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the law or our practices. The current version will always be available on this page.