Viacurso

Privacy policy

This is an informative translation. The binding version is always the Czech wording of this document; in the event of any discrepancy, the Czech version prevails.

Below we would like to acquaint you with our privacy policy (the "Policy"), which concerns the personal data you entrust to us.

This personal data processing Policy relates to the following self-employed natural person:

Dominik Žlebek, Company ID (IČO): 14244896, registered address Hlavní 62, 273 42 Stehelčeves, Czech Republic, registered in the Czech Trade Licensing Register

(the "Provider").

Viacurso is the trade name under which the Provider offers the application outside the Czech language; in Czech the same application is offered under the name Můj dispečink. Viacurso is not a separate legal entity — the controller is always Dominik Žlebek, Company ID (IČO) 14244896.

In all circumstances the Provider places emphasis on personal data being processed in accordance with applicable law and with respect for the rights of everyone involved.

1. The Provider as controller of personal data

A controller determines the purposes and means of processing personal data and is fully responsible for the processing it carries out.

In relation to the processing of personal data, the Provider is a controller of personal data under Act No. 110/2019 Coll., on the processing of personal data, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation, the "Regulation"). The Provider processes your personal data in particular in connection with the provision and administration of the Viacurso application — a dispatch system for taxi companies and senior transport, offered in Czech under the name Můj dispečink — available on the website www.mujdispecink.cz (the "application").

Processing of personal data means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Personal data may be any information relating to an identified or identifiable natural person (the "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

As a controller we process personal data that you provide to us yourself — in particular:

  • identification details of persons (first name, surname or business

name, company ID or VAT ID);

  • details of the entity (taxi company, municipality or firm) in which

the persons work;

  • contact email address, postal address or registered address;
  • telephone number;
  • billing and banking details of the service's customers;
  • details you provide in the enquiry form at www.mujdispecink.cz or in

any other communication with us (including the approximate size of your operation and the content of your message);

  • sign-in credentials of the user accounts of the application's

customers (passwords are stored solely in a secure, unreadable form).

Where we do not have consent to the processing of personal data, we process personal data only where the processing can be based on another legal ground — usually where it is necessary for the performance of a contract, for compliance with a legal obligation (accounting and tax regulations, for example), or on the grounds of a legitimate interest (protection of forms against misuse, for example).

If you contact us through the enquiry form at www.mujdispecink.cz/en/kontakt, we will use the personal data you attach to your message solely to handle your enquiry and for the related business communication, and not for any other purpose. Submitting the form also includes your IP address, which we retain in order to protect the form against misuse. The content of the submitted form is delivered to you and to us by email to the Provider's contact address; the email message is technically processed by the provider of the Provider's email account (a sub-processor — see Article 3).

We may also process your personal data on the basis of consent you have given, for example to receive information about new features in the service. Giving consent is voluntary, is not a condition for the provision of our services, and can be withdrawn at any time by sending a message to the email address given below. We take a sober approach to sending such communications and you can decline any message immediately.

2. The Provider as processor of personal data

Within the application itself, our customers (taxi operators, municipalities and towns) keep the personal data of their clients and employees — for example names, phone numbers, addresses, notes about transport, or the position of vehicles when sharing is switched on. In relation to this data, the customer is the controller (the taxi operator) and the Provider is only the processor: it stores, backs up and makes the data available to the customer's authorised users, and does not use it for any purpose of its own.

With every customer we conclude a data processing agreement under Article 28 of the Regulation, which sets out in detail the obligations of both parties, the technical and organisational measures, and the procedure on termination of the service (handover of data and its erasure).

3. Recipients and processors of personal data

We do not sell personal data to anyone and do not pass it on for third-party marketing purposes. The data is stored on a server in the Czech Republic; the technical operation of the server is provided by Roští.cz (a sub-processor — hosting, servers in the Czech Republic). Delivery of emails (enquiry confirmations, operational notifications) is provided by the provider of the Provider's email account (a sub-processor — email communication); only the email address, the header and the content of the message concerned are passed on, not the data stored in the application. Subscription payments for the service are made by bank transfer to the Provider's account held with a bank in the Czech Republic; in doing so the bank processes the usual payment data (the payer's account number, the amount, the reference number) as a separate controller. In relation to payments the Provider records only the data needed to match the payment and issue a document (the Customer's billing details, the date and the amount of the payment). The application does not use any foreign analytics or advertising services. No personal data is transferred to third countries.

The Provider sends Customers operational emails necessary for administering the service: email address verification, user invitations, proforma invoices and proofs of payment, payment reminders, notifications about the end of the trial period or an unpaid subscription, and warnings before data is deleted. These are not commercial communications; the legal basis is performance of the contract.

The only exception is the display of map data in the application: the map loads tiles from the servers of the OpenStreetMap project, to which the browser's IP address is technically passed. The public website www.mujdispecink.cz loads nothing at all from third-party servers.

Performance of the contract may involve an obligation to share data with the tax administration or other public authorities — where we do so, we are complying with obligations arising from legal regulations.

We always make sure that personal data is handled only by those who need it in order to carry out their work, and we bind our suppliers to comply with the obligations arising from this Policy and the Regulation.

4. Compliance with the basic principles

When we handle personal data we always respect the basic principles:

The principle of lawfulness, fairness and transparency:

  • we do not process personal data without a legal ground for doing so;
  • we do not conceal the ways in which we process data — data subjects

have the right to know what is happening with their personal data;

  • our procedures are fair: we proceed as we would wish other controllers

to handle our own personal data.

The principle of purpose limitation:

  • we collect personal data for specified, explicit and legitimate

purposes and do not further process it in a manner incompatible with those purposes.

The principle of data minimisation:

  • we process only the data we genuinely need — which is why only the

name and email are required in the enquiry form;

  • during processing we check whether we are missing a piece of personal

data or, conversely, holding one we do not need.

The principle of accuracy:

  • we take care that all data corresponds to reality, and we will correct

inaccurate data on request.

The principle of storage limitation:

  • we do not keep personal data forever, only for the necessary period;
  • when we no longer need personal data we delete it — in the application

operational records are deleted automatically (see point 5).

The principle of integrity and confidentiality:

  • we secure processing both organisationally and technically: encrypted

transmission (HTTPS), role-based access permissions enforced by the server, an audit record of access, passwords stored using a modern one-way method (argon2), daily encrypted backups with verified restoration, and personal data is not written into operational logs.

5. How long personal data is processed

We process and retain personal data for as long as is necessary, and no longer.

  • Enquiries from the website are retained for a maximum of 2 years

from submission, after which they are deleted automatically.

  • Details of the service's customers (contract, billing) are

retained for the duration of the contract and for a further 3 years after it ends (the general limitation period); data for which accounting and tax regulations require it is retained for the period laid down by those regulations.

  • Data in the application (in the role of processor) is retained for

the duration of the service; operational records are deleted automatically (vehicle positions after 24 hours, call records after 90 days, audit records after 1 year). When the service ends, we hand the data over to the customer and delete it.

6. Cookies

The public website www.mujdispecink.cz uses no tracking cookies, no analytics and no advertising technologies — which is why you will not find a cookie banner on it; there is nothing to consent to. The application stores a single, technically necessary cookie used to sign the user in; without it the application cannot work.

7. The data subject and their rights

A data subject has the right to know as much as possible about the processing of their personal data. In practice this means that every data subject has the right to:

Have access to personal data

  • on request we will state whether we process the personal data of a

particular data subject;

  • if we do, the data subject may ask what data we process, in what way,

and where it came from.

Correct or complete their data

  • if a data subject finds that we process incorrect data, they may

request a correction and we will comply.

Request erasure of their data

  • if we no longer need the personal data, we will comply with a request

for erasure;

  • if we cannot comply with the request (because a statutory retention

period is running, for example), we will explain everything to the data subject.

Restrict the processing of their personal data

  • if a dispute arises about the processing, we will restrict the

processing until everything is clarified.

Transfer their data elsewhere

  • we process personal data electronically, so a data subject may request

that the data be transferred to another controller in a machine-readable format.

Object to the processing

  • if you do not agree with processing based on our legitimate interest,

you may raise an objection; if we cannot demonstrate the legitimate interest, we will end the processing.

We will deal with a data subject's request free of charge within thirty days. If the request is complex, we may extend the period by a further thirty days. If requests are repetitive or manifestly excessive, we may charge a reasonable fee — but we would always inform you of this in advance.

If anything is unclear, you can contact us at any time at info@viacurso.com. We will gladly explain everything in more detail.

If you are a client of a taxi company that uses the application and you wish to exercise your rights in relation to the data kept in the application, please contact that taxi company directly (it is the controller of your data) — we will gladly help it handle your request on its instructions.

8. Third-party websites

The website www.mujdispecink.cz may contain hypertext links to third-party websites (documentation of open-source tools, for example). We have no control over the privacy policies and procedures of third parties and bear no responsibility for them.

9. Supervision of processing and personal data protection

Compliance with the rights and obligations of everyone involved is supervised by the Office for Personal Data Protection, Company ID: 708 37 627, registered address Pplk. Sochora 27, 170 00 Prague 7, which you can contact by email at posta@uoou.gov.cz or by data message to data box qkbaa2n. Further information about its supervisory activity is available at https://uoou.gov.cz/. You may also seek judicial protection under Article 79 of the Regulation.

10. Changes to the privacy policy

If the legal regulation of personal data processing changes, or its interpretation changes as a result of the practice of the Office for Personal Data Protection or of the courts, we may change, update or amend this Policy. The current wording is always available on this page.

We last amended this Policy on 21 July 2026.

11. Conclusion

By submitting the enquiry form, by registering, or by signing in to the Viacurso application, you confirm that you have read this Policy.