Cookie policy.

This document describes what upnext.cz stores on, or reads from, your device - cookies as well as other browser storage such as localStorage. Under Section 89(3) of Czech Act No. 127/2005 Coll. on Electronic Communications the two are treated identically: both need your consent unless they are strictly necessary for the site to work.

This page is the authoritative cookie declaration for upnext.cz. If you find an older version elsewhere, this one prevails.

The controller is Fronde s.r.o., company ID 11851945, registered seat Českolipská 394/8, Střížkov, 190 00 Praha 9, correspondence address Michelská 403/13, Michle, 140 00 Praha 4. We run the site under the Upnext brand. For anything about cookies or personal data, write to [email protected].

Without these the site would not work, or we could not evidence how you decided in the cookie banner. They cannot be switched off and need no consent.

We classify NEXT_LOCALEas necessary on purpose: it is written only because you switched the language yourself, it holds that single piece of information, it is never used for profiling, and without it every page load would drop you back to the default language. That matches the exemption for a cookie set at the user's explicit request.

Used to measure traffic: how many people visit, where they come from, and which pages they read. Rybbit runs only after you allow the analytics category in the cookie banner. Google Analytics 4 does load without consent, but until you give it, it neither stores nor reads any cookie and sends only the anonymous ping described below.

Google Analytics 4 (measurement G-PQDM00986F) is operated by Google Ireland Limited as the EU recipient, with Google LLC processing data in the USA. The transfer relies on Google's certification under the EU-US Data Privacy Framework. See the Google privacy policy and how Google uses data from partner sites.

Rybbit is self-hosted on pulse.upvote.cz, a domain operated by Fronde s.r.o.. Its data therefore goes to no third party, but it is not a purely anonymous tool either: it stores a visitor identifier and the related entries listed below in localStorage. Rybbit can also record a session replay (mouse movement, scrolling, clicks and page changes). Input fields are masked in it, passwords and e-mail addresses included - that is a setting on the Rybbit side which we keep switched on, not a property of the site. The rest of the page is recorded as displayed, including the results our tools render from the data you typed into them (an ARES, VIES or ČNB lookup, for instance). The recordings stay on pulse.upvote.cz only and reach no one else. Session replay also starts only after consent to the analytics category.

Used to measure ad campaign performance and for remarketing. They run only after you allow the marketing category in the cookie banner.

• The Meta Pixel (Facebook and Instagram) measures what happened on the site after an ad click. The recipient is Meta Platforms Ireland Limited; data may be transferred to the USA under the EU-US Data Privacy Framework. With the same consent our server sends the same events via the Meta Conversions API, where the e-mail and phone number leave only as a SHA-256 hash.
• Google Ads measures conversions from search and display campaigns. It uses the Conversion Linker and the _gcl_au cookie. The recipient is Google Ireland Limited / Google LLC, with the US transfer relying on the EU-US Data Privacy Framework.
• Sklik (Seznam.cz, a.s.) measures conversions from the Czech ad network and enables retargeting. The data stays in the EU.

The category for cookies that remember your choices beyond the strictly necessary (layout, saved filters and the like). Today upnext.cz stores nothing in this category. It stays in the banner so the functionality_storage and personalization_storage signals are ready for future features and so you can refuse them up front. The language choice does not belong here - NEXT_LOCALE is described under strictly necessary above.

To be precise: before you decide, and also if you refuse measurement, Google Analytics 4 (measurement G-PQDM00986F) loads and sends Google a so-called anonymous ping under Google Consent Mode. It neither stores nor reads any cookie and carries no identifier that would link you across visits. It does carry the page address and title, screen resolution, browser language, basic browser and device information, and your IP address, which Google processes at the network level.

The legal basis for this ping is our legitimate interest under Art. 6(1)(f) GDPR in a basic, non-identifying view of how the site performs. Apart from this ping, nothing is stored on your device without your consent: Rybbit, the Meta Pixel, Google Ads and Sklik write nothing to it and read nothing from it until you allow the matching category.

What differs is who holds each tool shut. Rybbit and the Meta Pixel are switched off by our own cookie banner, before Google Tag Manager can even load them. Google Ads and Sklik we fire from Tag Manager only once you allow the marketing category in the banner. And Google Analytics 4 always loads, but until you allow the analytics category it stays in the no-consent mode described above.

You can allow or refuse the analytics, marketing and preferences categories in the cookie banner. Refusing changes nothing about what you see or can read on the site. Consent lasts 13 months, after which the banner asks again. It also asks again when the purpose of processing changes or a new tool is added.

You can withdraw consent at any time in two ways: the floating cookie icon in the corner of the screen, or the Cookie settings link in the footer of every page. On withdrawal we stop the measurement tools, delete the _ga, _ga_*, _fbp and _fbc cookies, and clear the Rybbit entries from localStorage.

Two items our banner does not delete: the _gcl_au cookie from Google Ads and the sid cookie from Seznam. They stay in your browser until they expire (up to 90 days for _gcl_au) or until you clear them yourself. You can delete those, along with any cookie set by a third party on its own domain, directly in your browser - the instructions are in the next section.

Independently of our banner you can block and delete cookies in the browser itself, usually under Settings - Privacy and security. Step-by-step guides exist for Chrome, Firefox, Safari and Edge. Blocking all cookies may limit parts of the site, for example bot protection on the tools.

For data processed on the basis of consent you have the GDPR rights of access, rectification, erasure, restriction, portability and withdrawal of consent. Exercise them at [email protected]. If our answer does not satisfy you, you may lodge a complaint with the Czech Data Protection Authority, Pplk. Sochora 27, 170 00 Prague 7.

We update this policy whenever we add or remove a tool that stores something on your device. The current version is always on this page. How we handle personal data in general is described in our privacy policy.