Effective from:
Version: website-2026-10-18
1. Who is responsible
Petite Tap s.r.o., Company ID 25332741, Stochovská 686/68, 161 00 Praha 6 - Ruzyně, Czech Republic, is the controller for personal data handled through this website and its email enquiries. The company is registered with the Municipal Court in Prague, file C 205218. For privacy matters, email privacy@naidoo.app or write to our registered address.
This notice covers browsing naidoo.app, appearance preferences and correspondence about Naidoo or a possible pilot. The website has no app registration, payment or participant-matching functions. The app’s location, profiling, chat and subscription processing needs separate app privacy information before registration or external testing; the product Privacy page explains that intended experience.
2. Visiting the website
To deliver a page, our hosting infrastructure receives technical information such as your IP address, request time, requested URL, browser information and response status. Operational or security logs may contain this information when needed to diagnose faults, prevent abuse or investigate an incident.
The legal basis is our legitimate interest in providing a reliable, secure website (Article 6(1)(f) GDPR). We do not use this information to build advertising profiles, identify nearby people or track you across other websites.
3. Email enquiries and pilot discussions
If you email us, we receive your address, name if supplied, message, attachments and the information you choose to include, such as your organisation, proposed event and approximate audience. We use it to respond, assess a request and manage the resulting correspondence. The published support and privacy addresses forward to the founder’s inbox so the enquiry can be handled.
For steps you ask us to take before entering a contract with you, the basis is Article 6(1)(b) GDPR. For general questions and business correspondence, including contact people acting for an organisation, the basis is our legitimate interest in answering enquiries and managing business relationships (Article 6(1)(f)). For requests about data-protection rights, the basis is our legal obligations (Article 6(1)(c)).
Providing information by email is voluntary. Without a reply address and enough context, we may be unable to answer or assess a pilot. We do not require guest lists, private participant preferences, passwords or verification codes. An enquiry is not consent to marketing, and this website does not operate a newsletter signup.
4. Cookies and browser storage
The website does not set advertising or analytics cookies and does not load advertising pixels or third-party analytics. Fonts, illustrations and website assets are served by the website itself.
When you choose an appearance, your browser stores that choice in local storage under “liquid-glass-mode”. It contains the selected appearance, not your name or an advertising identifier. It is used only to provide the display setting you requested. The preference stays in your browser and our website does not transmit it to us or use it for tracking. The language is part of the URL; we do not need a language-tracking cookie.
The appearance setting remains until you change it or clear this website’s browser data; local storage has no automatic expiry. Choose System to remove the stored preference and follow your device setting, or clear the stored value in your browser. The website remains readable if storage is blocked. No consent banner is used because the site has no optional tracking technologies.
5. Who can receive information
Access is limited to people authorised to handle the website, correspondence or a legal request, and to service providers needed for website hosting, technical administration, email delivery and mailbox storage. Professional advisers or public authorities may receive relevant information where needed to handle a legal matter or comply with law. We do not sell enquiry data or give website visitors’ details to event or venue partners for marketing.
Email passes through your chosen provider and our email delivery and mailbox services. Depending on the provider and support arrangements, processing can involve countries outside the European Economic Area. Any transfer we arrange must have a valid GDPR mechanism, such as an applicable adequacy decision or standard contractual clauses with the necessary safeguards. Contact privacy@naidoo.app for the recipients and transfer safeguards relevant to your correspondence and how to obtain a copy.
6. How long information is kept
Enquiry correspondence is kept for the time needed to answer the request and manage any ongoing discussion. When that purpose ends, we review whether it is still needed and delete information no longer necessary. Relevant records may be retained for a legal obligation or to establish, exercise or defend a legal claim, limited to the applicable obligation or claim period.
Operational and security logs are kept only as needed for troubleshooting, security and incident investigation, then removed or rotated. An incident may require relevant records to be retained until its resolution or a related legal requirement ends. Log rotation limits storage size; it is not a promise of a fixed number of days. App-specific seven-day presence, AI-history and database-backup periods do not describe website logs or email.
The appearance preference stays in your browser until changed or cleared, as explained above.
7. Your rights and how to use them
Subject to the conditions in the GDPR, you can request access to your personal data, correction, erasure, restriction of processing and a portable copy where portability applies. You can object to processing based on legitimate interests, including the interests described above. If processing is based on consent, you can withdraw it at any time without affecting earlier lawful processing.
Email privacy@naidoo.app, preferably from the address used for your enquiry, and explain your request. We may ask for proportionate information to confirm your identity; do not send identity documents unless we specifically explain why they are needed. We respond without undue delay and no later than one month after receiving your request. If the GDPR permits an extension for a complex or numerous request, we will tell you within that first month and explain why; the extension is no more than two further months.
You can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, at uoou.gov.cz, or to a supervisory authority in the EU/EEA country where you live, work or believe an infringement occurred. You do not have to contact us first.
8. Automated decisions and changes
This website does not make automated decisions with legal or similarly significant effects and does not profile visitors for matching or advertising. It has no functions for collecting GPS location, Bluetooth identifiers, dating preferences or chat messages.
We will update this notice if the website’s processing changes and identify the new date and version. Any future optional tracking or marketing signup needs its own appropriate information and choices before it starts.