Privacy policy
Mis à jour 2026-09-28
Les documents juridiques sont publiés en anglais. La version anglaise fait foi.
1. Controller
OREGO productions s.r.o., Světova 523/1, Libeň, 180 00 Praha 8, Czech Republic, Company ID 24208825. Contact for privacy matters: watchbi@oregoproduction.cz. We have not appointed a data protection officer; the thresholds of Article 37 GDPR are not met.
2. What we process and why
WatchBI has no user accounts. The site can be used without providing any personal data. We process the following categories:
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Serving the website and protecting it from abuse | IP address, user agent, requested URL, referrer, time – in server and security logs of our hosting provider (Cloudflare) | Legitimate interest, Art. 6(1)(f) GDPR (operation and security of the service) | Logs are kept by Cloudflare for a short period, typically up to 30 days; we do not store request logs ourselves |
| Audience measurement (only if you consent in the cookie banner) | Pages viewed, clicks and scrolling, anonymised session recordings with masked text, approximate location derived from a truncated IP address, device and browser type, referring site; identifiers set by the analytics tool | Consent, Art. 6(1)(a) GDPR and section 89(3) of the Czech Electronic Communications Act | Up to 14 months from collection, then aggregated or deleted; consent can be withdrawn at any time |
| Marketing measurement (only if you consent) | Clicks on retailer offers and affiliate links, page from which the click was made | Consent, Art. 6(1)(a) GDPR | Up to 14 months |
| Answering e-mails and requests (including rights-holder notices) | Name, e-mail address, content of the message | Legitimate interest, Art. 6(1)(f), or performance of a contract or pre-contractual steps, Art. 6(1)(b) | Until the matter is closed, then up to 3 years for legal defence |
| Site preferences | Chosen currency, stored in your browser (localStorage); chosen language, in the URL | Not personal data; strictly necessary for the function you requested | Until you clear your browser data |
3. Cookies and similar technologies
Details of every cookie and storage item, their purpose and lifetime are in the Cookie policy. Analytics and marketing tools are loaded only after you consent in the banner; your choice is stored in a first-party cookie and can be changed under “Cookie settings” in the footer.
4. Recipients and processors
We share personal data only with providers who process it on our behalf under Article 28 GDPR contracts:
- Cloudflare, Inc., 101 Townsend St, San Francisco, USA – content delivery, security, tag management (Zaraz), cookieless web analytics. Transfers to the USA rely on the EU-US Data Privacy Framework and the Standard Contractual Clauses; most requests from the EU are served from Cloudflare's European data centres.
- Supabase, Inc. – database hosting in Frankfurt am Main, Germany (AWS eu-central-1). The database holds watch and price data; it receives no personal data from visitors other than transient connection logs.
- Microsoft Ireland Operations Ltd. – Microsoft Clarity, only if you consent to audience measurement: page views, clicks, scrolling and anonymised session recordings in which text is masked before it leaves your browser; used to see how the catalog and encyclopedia are used. Data is processed in the EU and the USA under the EU-US Data Privacy Framework and Standard Contractual Clauses; retained by Microsoft for up to 13 months.
- Google Ireland Ltd. – Google Analytics 4, only if you consent to audience measurement and only once the tool is enabled on the site; IP addresses are truncated before they reach Google.
- Apify Technologies s.r.o., Prague – runs the automated collection of retailer data. It processes no visitor data.
Retailers you visit through our links are independent controllers; their privacy policies apply from the moment you leave watchbi.com. We do not sell personal data and do not share it for cross-context behavioural advertising (in the sense of the California Consumer Privacy Act).
5. Your rights
Under Articles 15 to 22 GDPR you have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest. Consent can be withdrawn at any time with effect for the future; use “Cookie settings” in the footer or write to us.
Requests: watchbi@oregoproduction.cz. We respond within one month. You also have the right to lodge a complaint with a supervisory authority, in the Czech Republic the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz), or with the authority of the EU country where you live or work. Visitors from the United Kingdom may contact the Information Commissioner's Office.
6. Automated decision-making, children
We make no decisions with legal effect based on automated processing and do not profile visitors. The site is not directed at children and we knowingly collect no data from persons under 16.
7. Security
All traffic is encrypted (TLS). Access to infrastructure is limited to authorised persons with individual credentials and two-factor authentication. Databases are read-only for the public site; write access is restricted to the collection pipeline.
8. Changes
This policy may be updated when the service or the law changes. The current version and its date are published at this address.