AdvertisingThis page carries partner links. If you buy through one, ABAJ CZ s.r.o. is paid a commission by the vendor. It costs you nothing extra and does not change the price. How this site is funded.
ZlatovenConsumer security software, explained

Privacy policy

In force from 21 September 2026. Data controller: ABAJ CZ s.r.o., Čajkovského 1684/29, Žižkov, 130 00 Praha 3, Czech Republic. Contact: info@zlatoven.online.

The short version

This website collects no personal data from you. It sets no cookies, uses no local storage, runs no analytics, carries no advertising pixel, performs no fingerprinting and makes no requests to any third party. There is no contact form, no newsletter and no account. The only personal data we ever hold is what you choose to send us by email, and the technical server log entries described below.

1. Who is responsible

The controller for the purposes of Regulation (EU) 2016/679 (GDPR) is:

ABAJ CZ s.r.o.
Čajkovského 1684/29, Žižkov
130 00 Praha 3, Czech Republic
Company registration number (IČO): 25687492 · VAT: CZ25687492
Email: info@zlatoven.online

Given the scale and nature of the processing described here, we are not required to appoint a data protection officer and have not appointed one. Data protection enquiries go to the address above and are handled by Andrew Wright.

2. What we do not do

Stated explicitly, because most privacy policies describe the opposite:

The cookie policy explains how to confirm all of this yourself in your browser’s developer tools.

3. What is unavoidably processed

3.1 Server log entries

Like every web server, the server that delivers this site records a technical entry for each request. This is a function of operating a server, not a choice to collect data about you.

ItemDetail
DataIP address, date and time, the URL requested, HTTP status code, bytes transferred, referring URL where the browser sends one, and the user-agent string.
PurposeDelivering the pages you request, keeping the server secure and available, and diagnosing faults and abuse.
Legal basisArticle 6(1)(f) GDPR — our legitimate interest in operating and securing the service. We do not use these logs to analyse visitor behaviour, build profiles or produce audience statistics.
RetentionLog files rotate and are deleted in the ordinary course of server operation, normally within 30 days, unless an entry is needed longer to investigate a specific security incident.
RecipientsNobody. The logs stay on the server operated for ABAJ CZ s.r.o. and are not exported to any analytics or advertising service.

3.2 Email you send us

ItemDetail
DataYour email address, your name if you give it, and whatever you write to us.
PurposeReading and answering your message — a correction report, a question, a legal notice or a business enquiry.
Legal basisArticle 6(1)(f) GDPR — our legitimate interest in responding to correspondence, or Article 6(1)(b) where the message concerns a contract or pre-contractual step, or Article 6(1)(c) where we are legally obliged to keep it.
RetentionFor as long as needed to deal with the matter and to keep a record of how a correction was handled, then deleted. Ordinary correspondence is not kept beyond 24 months unless there is a legal reason to keep it.
RecipientsThe email is handled by our email provider, which processes it on our instructions under Article 28 GDPR, within the EU/EEA.

Please do not send us special category data (health, beliefs, and so on) or payment details. We have no use for either and do not want to hold them.

4. Partner links and what happens when you follow one

This site is funded by partner commissions. When you click a link marked “partner link”, you leave this site. What happens next is governed by the advertiser’s and the affiliate network’s privacy policies, not ours, and they will typically set their own cookies to attribute the referral.

Two points of honesty about our side of that:

We have no access to your account, your purchase, your payment details or your subscription with any vendor.

5. External links

This site links to third-party websites — vendors, testing laboratories, EU institutions and public authorities. Nothing is loaded from them: a link is only followed when you click it. Once you do, their policies apply. We set the referrer policy for this site to strict-origin-when-cross-origin, meaning an external site learns only that you came from https://zlatoven.online, not which page you were reading.

6. Transfers outside the EU/EEA

We do not transfer personal data outside the EU/EEA. The website is served from within the EU and our email is handled within the EU/EEA. If you follow an external link, any transfer that then occurs is a matter between you and that site’s operator.

7. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), including the right to object at any time to processing based on our legitimate interest. Exercise any of them by writing to info@zlatoven.online or to ABAJ CZ s.r.o., Čajkovského 1684/29, Žižkov, 130 00 Praha 3, Czech Republic.

We answer within one month. There is no charge. Because we hold almost nothing, an access request will usually establish that we hold nothing about you at all — we cannot identify you from a server log entry without additional information, and we will not attempt to.

You also have the right to lodge a complaint with a supervisory authority: the Úřad pro ochranu osobních údajů (Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz), or the authority in your own member state.

8. Security

The site is served over HTTPS only, with HTTP Strict Transport Security enabled. It is a static website: there is no database, no login, no user-generated content and no form endpoint, which removes most of the categories of risk a site like this would otherwise carry.

9. Children

This site is aimed at a general adult audience and knowingly collects no data from anyone, children included.

10. Changes

If this policy changes, the version in force will be published here with a new date. If the change were ever to involve starting to collect data, we would say so prominently rather than amending this page quietly.