Privacy Policy

The controller of personal data is Be OFF.line s.r.o., Company ID 236 16 661, with its registered office at Mladoboleslavská 3321, 276 01 Mělník, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, file no. C 430208/MSPH.

Contact for personal data matters: veronika@off-line.cz.

We have not appointed a data protection officer — the law does not require us to. Ing. Veronika Mrázová is responsible.

Processing is governed by Regulation (EU) 2016/679 (GDPR) and by Act No. 110/2019 Coll.

You can decline the news when you register and unsubscribe at any time using the link in every e-mail or by writing to our contact address. You can object to processing based on legitimate interest — see section 12.

The Starting Map is a questionnaire for your own self-reflection within the programme. It is not a diagnostic tool, it does not assess your health and its output is not an expert opinion.

The questionnaire is deliberately designed so that it does not collect health data or other special categories of personal data under Article 9 GDPR. It asks how often ordinary everyday situations happen, not about diagnoses, treatment, mental state or their causes.

Your answers are seen by you and by us. We do not publish them, we do not share them with other participants and we do not use them to compare you with anyone.

We do not collect any data from your device — not screen time, not a list of apps, nothing of the sort. If you track such data yourself during the programme, it stays with you alone.

The Starting Map output is produced automatically: based on how often you gave each answer, it identifies which situation recurs most for you and shows you the text belonging to it.

This is not automated decision-making with legal or similarly significant effects within the meaning of Article 22 GDPR. The result has no bearing on the price, on admission to the programme or on anything else — it is just your own answers put in order and shown back to you.

The questionnaire gives you space to write in your own words what you have been putting off and what you want to remember.

We do not publish these texts. We may use them as inspiration when creating content, but only in a form from which you cannot be identified, and only if you do not tell us not to — a message is enough.

When you register for a hike we only ask for what we cannot organise it without: your contact details, payment details and confirmation that you know how demanding the route is.

Health. We deliberately do not collect data about your health — the form does not ask about it. If you have a limitation we should know about, tell the hike coordinator directly. We do not write it down anywhere.

Injury. If an injury happened on a hike, we would write a brief record of what happened and what we did, and where needed pass the necessary details to the emergency services. The record serves to protect your health and to handle any claims, including an insurance claim.

List of participants. We keep a record of who took part in the hike as evidence of how the event went, in case of an injury or dispute.

Minors. A participant under 18 is registered by their legal guardian. We therefore also process the guardian’s name and contact details, and consents, for example to photographs, are given by the guardian.

Coordinators. The list of participants and their contact details are seen only by the coordinator of the hike in question. If the hike is led by someone outside our company, they are bound by confidentiality and may use the data only for that hike.

We share data only with those without whom we could not run the programme and the events:

We do not share data with anyone else and we do not sell it.

Some of the processors listed process data outside the European Union. Such transfers take place on the basis of an adequacy decision (the EU-US Data Privacy Framework) or on the basis of standard contractual clauses under Article 46 GDPR.

You pay by transfer in your own banking app, so there is no payment gateway between us and you. Payment details reach us from the bank statement.

Joining the OFF.line community is voluntary and it runs on WhatsApp. Once you enter the group, its operator also processes your data under its own terms, and in that respect we are no longer the controller. Other members of the group will also see your phone number.

We may also share data with the emergency services where this is necessary to protect your health, and with public authorities where the law requires it.

You have access to the Říjen jinak members’ area until 30 November 2026. Once it closes we will delete or anonymise your account and the data associated with it, except for data we have to keep under section 3. Registering for hikes does not require the members’ area.

We may take photographs on hikes and at other events. We use reportage photographs documenting an event as a whole to promote OFF.line on the basis of legitimate interest.

If we wanted to use a photograph in which you are the main subject, we would ask for your consent. For participants under 18, consent is given by their legal guardian.

At any time — on the spot, in advance or afterwards — you can tell us that you do not want to be photographed or that you do not want a particular photo used. We will respect that and take the photo down.

Necessary cookies are required for the site to work — they remember your choice in the cookie bar and keep you signed in to the administration. We set them without consent, because without them the site would not function.

Analytics cookies (Google Analytics 4 and Microsoft Clarity) are only stored once you give consent in the cookie bar. We do not use marketing or advertising cookies. The full list with lifetimes is in the Cookie policy, where consent can be changed or withdrawn at any time; if you refuse, we also delete the ones already stored.

When you sign in to the members’ area we process your e-mail address, a hash of the one-time code, the IP address the request came from and your browser identification. This serves to sign you in and to stop anyone getting into someone else’s mailbox by guessing. Neither the code nor the sign-in secret is stored in readable form, only as a hash — anyone who got hold of the database could not sign in with it.

We do not track opens or clicks in the programme e-mails.

You have the right:

• of access — to know what data we hold about you and to receive a copy of it,
• to rectification when something is wrong,
• to erasure, where we no longer need the data and are not obliged to keep it,
• to restriction of processing,
• to portability of data you gave us and that we process automatically on the basis of a contract or consent,
• to object to processing based on legitimate interest — for the news, just say so and we stop immediately,
• to withdraw consent if you gave it; withdrawal does not affect the lawfulness of processing before it,
• to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.

Write to us at veronika@off-line.cz. We will get back to you within one month; in complex cases the deadline may be extended, but we will let you know.

We protect data with appropriate technical and organisational measures — access is limited to the people who need it for their work and accounts are protected by strong passwords and two-factor authentication.

We may update this policy. The latest version is always at off-line.cz/ochrana-osobnich-udaju. We will let you know by e-mail about material changes.

This policy is effective from 6 October 2026. It replaces the version effective from 14 September 2026.