Privacy policy

Last updated 21 September 2026. This policy is written to Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679.

1. Who is responsible for your data

The data controller is:

BRSM s.r.o.

Ocelkova 643/20, Černý Most, 198 00 Praha 9, Czech Republic

Company registration number (IČO)

19063687

VAT number (DIČ)

CZ19063687

Contact for data protection matters

info@zlatoris.online (attention: Lucas Thomas)

We are not required to appoint a data protection officer, and have not appointed one. Data protection requests are handled by the responsible editor at the address above.

2. What we do not do

• We set no cookies of any kind — not necessary ones, not functional ones, not advertising ones.
• We use no analytics. There is no Google Analytics, no Matomo, no server-side analytics product, no pixel and no tag manager.
• We use no advertising or conversion pixel and no remarketing tag.
• We do no fingerprinting: no canvas, font, audio or device profiling.
• We write nothing to your browser's storage — no localStorage, no sessionStorage, no IndexedDB, no service worker, no cache API entries beyond the ordinary HTTP cache.
• We make no third-party requests at all. There are no web fonts, no CDN, no remote images, no embedded video and no social widgets. Every file this site loads comes from zlatoris.online.
• We run no A/B testing, no session recording and no heat mapping.
• We do not sell, rent or share personal data with anyone, and we do not build profiles or take automated decisions about you.

Because we place nothing on your device and read nothing from it, Article 5(3) of the ePrivacy Directive — the rule that requires consent for cookies and similar technologies — does not apply to this site, and there is therefore no consent banner to click. Our cookie policy explains how to verify that claim yourself in about thirty seconds.

3. What is actually processed

3.1 Web server log files

Like any web server, the server that delivers this site records each request it answers. A log entry contains:

• your IP address;
• the date and time of the request;
• the address of the page or file requested and the HTTP status returned;
• the number of bytes sent;
• the browser identification string (user agent) your browser sends;
• the referring address, where your browser sends one.

Purpose

Operating the site securely and reliably: diagnosing faults, and detecting and dealing with attacks and abuse.

Legal basis

Article 6(1)(f) GDPR — our legitimate interest in keeping the site running and secure. We have weighed that interest against your rights: the data is not used to profile or identify you, is not combined with anything else, is not shared, and is deleted quickly.

Retention

Log files are rotated daily and deleted after fourteen days. We do not archive them.

Recipients

Nobody outside BRSM s.r.o. and the provider that operates the server for us under a data processing agreement. Logs are not exported, sold or analysed commercially.

3.2 Email you send us

What

Your email address, your name if you give it, and whatever your message contains.

Purpose

Reading and answering your message.

Legal basis

Article 6(1)(f) GDPR (our legitimate interest in answering correspondence), or Article 6(1)(b) where your message concerns a contract or a pre-contractual step, or Article 6(1)(c) where we are legally required to keep the correspondence.

Retention

For as long as the matter is live, and then for up to twelve months in case you come back to us about it — unless a legal retention obligation requires longer, or you ask us to delete it sooner.

Recipients

Our email provider, acting as a processor. No one else.

3.3 What happens when you click a partner link

Partner links are marked on every page, with a label on the button and a note beneath it. Clicking one takes you to a short internal page on this site, and from there to the advertiser's own site. Three things are worth knowing:

• We add nothing to you. We do not set an identifier, we do not tag you, and we cannot tell who clicked.
• Campaign parameters already in the address are passed on. If you arrived at this site from an advertisement, the address in your browser may contain campaign parameters such as utm_source or a click identifier. The link passes those same parameters on to the advertiser so that the commission can be attributed. Nothing is added that was not already in the address you arrived with, and nothing is stored on our side.
• Once you leave, the advertiser's rules apply. The advertiser will set its own cookies and process your data under its own privacy policy, over which we have no control. Read it there if it matters to you. Our pages send only the origin https://zlatoris.online as the referrer, never the full address of the page you were reading.

We receive commission reports from advertising partners in aggregate — numbers of registrations, not identities. We do not receive your name, email address or account details from an advertiser, and we do not want them.

4. Transfers outside the EU and EEA

We do not transfer personal data outside the European Economic Area. When you follow a partner link to an advertiser, you are visiting that company's own site, and any transfer it makes is governed by its own policy, not by ours.

5. Children

This site is not directed at children and we do not knowingly process children's data. We collect no registration data of any kind.

6. Your rights

Under the GDPR you have the right to:

• obtain confirmation of whether we process data about you, and a copy of it (Article 15);
• have inaccurate data corrected (Article 16);
• have data erased (Article 17);
• have processing restricted (Article 18);
• receive data you gave us in a portable form (Article 20);
• object to processing based on legitimate interest, including on grounds relating to your particular situation (Article 21).

Write to info@zlatoris.online. We answer within one month. There is no charge.

In practice, an access request about a site visit is of limited use: server log entries are not indexed by person, are deleted after fourteen days, and we have no way to connect a log line to you unless you tell us your IP address and the approximate time of your visit. We say this plainly rather than pretending to hold more than we do.

7. Complaints

If you believe we have handled your data unlawfully, you may complain to the Czech supervisory authority:

You may also complain to the supervisory authority of the EU member state where you live or work.

8. Changes to this policy

If we change what we process, we will change this page and update the date at the top. Because the site collects nothing, changes should be rare; if we ever introduced anything that required consent, we would ask for it properly before switching it on, not afterwards.