Personal Data Processing Policy
1. Who we are
The controller of your personal data is MovixBox s.r.o., company ID (IČO): 296 75 669, registered office at Bulharská 718/33, Vršovice, 101 00 Prague 10, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 450609 (the “Controller” or “we”).
Contact for personal data questions: privacy@movixbox.cz
2. What data we process
As part of signing up to the waitlist for the upcoming MovixBox app, we process:
- your name, which you provide yourself in the sign-up form,
- your email address, which you provide yourself through the sign-up form,
- technical data related to the sign-up: the IP address from which the registration was submitted, the date and time the form was submitted, and the date and time the registration was confirmed via the link in the verification email (so-called double opt-in).
We do not request or collect any other personal data (phone, address, date of birth, payment details) at this stage.
3. Purposes of processing
We process your personal data for the following purposes:
- a) Maintaining the waitlist - keeping a record of people interested in the MovixBox app before its launch.
- b) Sending launch information - and related communications (launch date, product news, and any pre-launch offers for people on the waitlist). We use your name to personalise the greeting in emails.
- c) Pre-filling your future registration in the MovixBox app - after the app launches, we will transfer your name and email address to the app’s registration system so you can register more easily. An actual user account is created only at the moment you complete registration in the app and accept the app’s terms and conditions.
- d) Demonstrating consent - we keep technical records of the consent granted (date, time, IP, double opt-in confirmation) to the extent necessary to prove consent for the purposes of a possible inspection by the Office for Personal Data Protection (Article 7(1) GDPR).
4. Legal basis for processing
The legal basis for processing your name and email address is your consent under Article 6(1)(a) of the General Data Protection Regulation (GDPR) and Section 7 of Czech Act No. 480/2004 Coll. on certain information society services, as amended (for sending commercial communications).
5. Retention period
We process your personal data for the period:
- until the MovixBox app launches (expected: 2026, or until you withdraw your consent),
- for a maximum of a further 6 months after the app launches, so that you have the opportunity to use your transferred data in the app to register,
- technical records of the consent granted (IP, timestamps) are kept for 3 years from the end of processing, for the purpose of proving consent in the event of an inspection.
After these periods expire, we will securely delete your data.
If you withdraw your consent earlier, we will delete your data without undue delay, with the exception of technical records of the granting and withdrawal of consent, which are necessary to demonstrate compliance with the law.
6. Recipients of personal data (processors)
Your personal data may be made available to the following categories of processors:
- Email platform provider - AC PM, LLC (operator of the Postmark service), based in the USA - for sending the verification email and subsequent waitlist communications.
- Website hosting and cloud infrastructure provider - Google Ireland Limited (or Google LLC), with registered office at Gordon House, Barrow Street, Dublin 4, Ireland - for operating the sign-up form and securely storing data.
- Accounting, tax and legal advisors - only to the extent necessary to fulfil their professional duties.
We have data processing agreements in place with all processors in accordance with Article 28 GDPR.
7. Transfers to third countries
Some of our processors process data outside the European Economic Area (EEA), in particular in the USA:
- Postmark (AC PM, LLC) processes and stores data on servers in the USA.
- Google may, depending on the service configuration, process data both within and outside the EU (the USA and other jurisdictions).
In both cases, transfers take place solely on the basis of Standard Contractual Clauses approved by the European Commission under Article 46(2) GDPR, or other safeguards under Article 46 GDPR. We have data processing agreements (DPAs) in place with all of these processors that include these clauses.
8. Your rights
As a data subject, you have the following rights, which you can exercise at any time by sending an email to privacy@movixbox.cz:
- Right of access - to information on whether we process your personal data, and a copy of that data (Article 15 GDPR).
- Right to rectification - correction of inaccurate or incomplete data (Article 16 GDPR).
- Right to erasure (“right to be forgotten”) - deletion of your data (Article 17 GDPR).
- Right to restriction of processing (Article 18 GDPR).
- Right to data portability - to receive your data in a structured, commonly used and machine-readable format (Article 20 GDPR).
- Right to object to processing (Article 21 GDPR).
- Right to withdraw consent at any time (Article 7(3) GDPR). Withdrawing consent does not affect the lawfulness of processing prior to its withdrawal. You can withdraw consent by clicking the “Unsubscribe” link in the footer of every email you receive from us, or by emailing privacy@movixbox.cz.
- Right to lodge a complaint with the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz).
9. Automated decision-making
We do not use your personal data for automated decision-making within the meaning of Article 22 GDPR, nor for profiling.
10. Cookies
The www.movixbox.cz website uses technical cookies necessary for the form to function and optional analytics cookies (Google Analytics 4) to measure traffic. You can find details in our Cookies Policy at www.movixbox.cz/cookies.
11. Changes to this Policy
We may update this Policy. We will inform you of any material changes by email. The current version is always available at www.movixbox.cz/privacy.
← Back