Privacy policy

[ Effective date: 29 October 2026 ]

This policy explains what personal data Loonie collects when you visit loonie.cz or get in touch, why we collect it, who we share it with and what control you have over it.

The short version: we collect as little as we can, analytics and advertising cookies only run if you say yes, and you can change your mind at any time.

Who is responsible

The controller of your personal data is Loonie s.r.o., IČO 18033253, Velké Kunratické 24, 148 00 Praha 4, Czech Republic (“Loonie”, “we”, “us”). Our second studio is at Seilbruckstrasse 2, 7206 Landquart, Switzerland.

For anything related to privacy, write to info@loonie.cz. We have not appointed a data protection officer. Your message goes straight to the people responsible.

What we collect and why

When you contact us

If you fill in one of our forms or write to us, we process your email address and what you enter or choose to share: your name, website, budget range, preferred start date, company or project details, and which page and ad campaign (UTM tags) brought you to the form. We use it to reply, prepare your audit, and discuss a possible collaboration.

  • Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
  • Retention: while we are in touch, then up to 24 months after our last contact. If we work together, contract and invoicing records are kept for as long as Czech accounting and tax law requires.

Tips and news by email: only if you tick the box

If you tick the box in one of our forms, we occasionally send you tips and news from Loonie. Every email has an unsubscribe link.

  • Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Retention: until you unsubscribe or withdraw your consent.

When you browse the site

Our hosting provider automatically records the technical data needed to deliver the site and keep it secure: IP address, browser and device type, the page requested, the referring page and the time of access.

  • Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).
  • Retention: only as long as needed for security and troubleshooting, then deleted automatically.

Analytics and advertising: only with your consent

With your consent, we use Google Analytics to understand how the site is used and the Meta Pixel to measure and improve our advertising on Facebook and Instagram. Both are described in detail below.

  • Legal basis: your consent (Art. 6(1)(a) GDPR and § 89(3) of Czech Act No. 127/2005 Coll., on Electronic Communications).
  • You can withdraw your consent at any time in Cookie settings. Withdrawal does not affect processing that took place before.

Cookies

Cookies are small files stored in your browser. Without asking, we only set the one that is strictly necessary to remember your choice. Everything else waits for your decision in the cookie banner, which you can reopen at any time via Cookie settings in the footer.

CookieProviderPurposeCategoryDuration
loonie_consentLoonieRemembers your cookie choiceNecessary12 months
_gaGoogleDistinguishes visitors for statisticsAnalytics2 years
_ga_*GoogleKeeps the session state for statisticsAnalytics2 years
_fbpMetaRecognises the browser for ad measurement and remarketingMarketing3 months
_fbcMetaStores the click ID when you arrive from a Meta adMarketing3 months

Google Analytics

Google Analytics 4 is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us, in aggregate, how many people visit, which pages they read, where they come from and which devices they use. It records a pseudonymous identifier, the pages you view, your interactions, your approximate location (city level) and device and browser information. Google Analytics 4 does not log or store IP addresses.

Google Analytics is not loaded at all until you allow analytics cookies, and we pass your choice on through Google Consent Mode. We keep Analytics data for 14 months.

Data may be transferred to Google LLC in the USA, which is certified under the EU–U.S. Data Privacy Framework. Read more in How Google uses information from sites that use its services and the Google Privacy Policy. You can also block Google Analytics on every site with Google’s opt-out browser add-on.

Meta Pixel

The Meta Pixel is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. It lets us see whether our ads on Facebook and Instagram work, show our ads to people who have visited the site (remarketing) and reach people with similar interests. It records the pages you view and actions on the site, together with browser and device data and the cookies listed above. If you have a Facebook or Instagram account, Meta can link this data to it.

Loonie and Meta are joint controllers (Art. 26 GDPR) for collecting this data and sending it to Meta, under Meta’s Controller Addendum. What Meta does with the data afterwards is Meta’s responsibility, as described in the Meta Privacy Policy. You can exercise your rights regarding that processing directly with Meta.

The Pixel only loads after you allow marketing cookies. You can switch it off at any time in Cookie settings and control the ads you see in your Meta ad preferences. Data may be transferred to Meta Platforms, Inc. in the USA, which is certified under the EU–U.S. Data Privacy Framework.

Who we share data with

We never sell personal data. We share it only with providers who help us run the studio, under contracts that oblige them to protect it:

  • Hosting: Vercel Inc. (USA), which delivers this website.
  • The email, communication and project-management tools we use to receive and answer enquiries.
  • Make (form automation) and Brevo (Sendinblue SAS, France: email and contact management), which receive what you send through our forms.
  • Cal.com, Inc. (USA), if you book a call with us through our booking page.
  • Google and Meta, as described above, if you consent.
  • Public authorities, where the law requires it.

If you follow a link to our Instagram or any other site, that site’s own privacy policy applies.

Transfers outside the EU

Some of our providers are based in the USA. We only transfer data where an adequate level of protection is ensured: through the EU–U.S. Data Privacy Framework or the European Commission’s standard contractual clauses. Switzerland, home of our second studio, is recognised by the European Commission as providing an adequate level of protection.

Your rights

You have the right to:

  • access the data we hold about you and receive a copy,
  • have it corrected or deleted,
  • restrict its processing, or object to processing based on our legitimate interests,
  • receive it in a portable format,
  • withdraw your consent at any time, with effect for the future.

Write to info@loonie.cz and we will reply within one month. You can also lodge a complaint with the Czech data protection authority, the Úřad pro ochranu osobních údajů (Pplk. Sochora 27, 170 00 Praha 7), or with the authority where you live or work. In Switzerland, that is the Federal Data Protection and Information Commissioner.

We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.

Security

We protect your data with appropriate technical and organisational measures: encrypted connections (HTTPS), access only for the people who need it, and providers that meet recognised security standards.

Children

This site is meant for businesses and is not directed at children. We do not knowingly collect data from anyone under 15.

Changes to this policy

We update this policy when our services or the law change. The current version is always on this page, with its effective date at the top. If a change affects a consent you have given, we will ask you again.

Contact

Questions about this policy or your data? Write to info@loonie.cz or by post to Loonie s.r.o., Velké Kunratické 24, 148 00 Praha 4, Czech Republic.