Legal

Personal data

The site collects exactly what is needed to answer a request and to show a review. Below is what that is, why, and how to have it deleted. Processing follows the GDPR (EU Regulation 2016/679).

Version of 23 August 2026.

Who processes the data

Tetiana Antoch, real estate broker in prague. Place of business — Прага, Чехия.

Write with any question about your data: info@refa-group.cz or by messenger: @AntochTetiana, @antoch.tatiana.

What is collected

Request form. Name and phone are required; email and message are optional. The page the request was sent from is stored with it, and the property if the request came from its page.

Review form. Name, rating and the text of the review. A contact is optional and is never shown on the site.

Spam protection. A hash of the IP address — a one-way digest the address cannot be recovered from. It only limits how many requests and reviews come from one address.

Reviews from Sreality. Public reviews of the agency are carried over from sreality.cz exactly as their authors left them: name, rating, text, date.

There are no analytics counters, advertising pixels or third-party scripts on the site. Public pages set no cookies — the login to the working area is for the broker only and does not concern visitors.

Why and on what grounds

Answering a request. To get in touch and discuss your case. Grounds — steps taken at your request before a possible contract, Article 6(1)(b) GDPR.

Publishing a review. A review appears on the site with the name you gave. Grounds — your consent, Article 6(1)(a) GDPR: by sending a review you agree to it being published. Consent can be withdrawn at any time.

Spam protection. Legitimate interest — keeping the forms usable, Article 6(1)(f) GDPR.

How long it is kept

Requests — up to three years from the last contact: that is roughly how long a search and a deal take. Reviews — while they are shown on the site. Address hashes — no longer than a year.

On your request everything is deleted sooner — no reasons needed, with no effect on services already provided.

Who it is shared with

Data is never sold or passed to third parties for advertising. Technically it is stored by the providers that keep the site running:

  • Hetzner Online GmbH (Germany) — the web server;
  • Supabase on Amazon Web Services infrastructure in the EU — database and photos.

Both providers operate within the European Union; data is not transferred outside the EU.

Your rights

Under the GDPR you may:

  • find out what data about you is held and get a copy of it;
  • have inaccurate data corrected;
  • ask for it to be erased;
  • restrict the processing or object to it;
  • withdraw consent to a review being published;
  • receive the data in a machine-readable form.

Just write to info@refa-group.cz. You will get an answer within a month.

If the answer does not satisfy you, you may complain to the supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

Personal data — Татьяна Анточ