Privacy policy

Effective from 2 October 2026

Who processes your data

Vojtěch Žoha, Company ID (IČO) 73557005, Lniště 1, 374 01 Slavče
vzoha@volny.cz

What data and why

  • Account: email, password (stored only as a hash, never readable), language, sign-up date, time of email confirmation, the day of your last visit and where you came from to sign up (e.g. a Facebook link or a button on the website). Used to sign you in and run your account; the last visit and sign-up origin feed aggregate statistics on whether the app helps people and where they hear about it.
  • Sites: name, location, altitude and the forest flow flag. The location is used to fetch the weather forecast and compute recommendations.
  • Hives and hive log: hives, logged tasks, notes and the weather on the day of each task. Recommendations are based on them.
  • Phone notifications: if you turn them on, your browser’s push service address and the keys that encrypt notifications.
  • Weekly summary email: sent to your account email; turn it off in Settings or via the link in the email.
  • Messages to the author and reasons for skipped advice: the message text, its label, the advice you are writing about, the page you are writing from, language and browser type; for skipped advice, the reason if you choose one. Used to reply, fix bugs and improve the advice. I reply from my own mailbox.
  • Security: your IP address, briefly, to limit sign-in and sign-up attempts; server logs (IP address, time, page visited, browser type) for security and aggregate visitor statistics; kept for 12 months.

I process this data because it is needed to provide the service you asked for (Art. 6(1)(b) GDPR). Security and aggregate statistics rest on my legitimate interest in running the service safely and improving it (Art. 6(1)(f) GDPR). Statistics use counts and activity dates only — no site locations, log contents or notes.

All members of an apiary see its sites, hives and hive log. The apiary founder sees members’ emails.

Who I share data with

  • Hosting: a web hosting provider with servers in the EU — stores the database and runs the app.
  • Emails: sent by a specialised email delivery service from a data centre in the EU; it receives the email address and the email content. The provider may be based outside the EU (USA) — the transfer is then protected by EU standard contractual clauses. I will name the provider on request.
  • Weather forecast: the Norwegian Meteorological Institute (MET Norway) receives only site coordinates rounded to about 10 m, without your email or any link to you. Norway is part of the EEA.
  • Phone notifications: delivered through your browser’s push service (Google, Mozilla, Apple or Microsoft). Notification content is encrypted; the service sees only the device address and delivery time. It may be based outside the EU (USA, EU–US Data Privacy Framework).

I do not share or sell data to anyone else. The app has no advertising and no third-party tracking.

Cookies and storage on your phone

In the app, only what is necessary: sign-in (remembered for 90 days) and form protection. A hive log entry made without signal stays on your phone until it is sent. No consent is needed for these.

Website www.beelendar.com

On the website I measure traffic with Google Analytics (Google Ireland Ltd.), only if you allow it in the banner (consent, Art. 6(1)(a) GDPR). Google then receives the pages you visit, where you came from, browser and device type and approximate country; it does not store your IP address. The website sets the cookies _ga and _ga_*. Data is kept for 14 months and may be transferred to the USA (EU–US Data Privacy Framework). You can withdraw consent at any time via “Cookie settings” in the website footer. Without consent, nothing is measured.

How long

As long as your account exists. You delete your account in Settings; your messages to the author are deleted with it. If you are the last member of the apiary, its sites, hives and hive log are deleted with it; otherwise they stay with the other members and your entries remain without a name. Data disappears from hosting backups as they are regularly overwritten.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. Write to vzoha@volny.cz; I reply within a month. You can lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz ) or your local supervisory authority.