Privacy Policy

Effective date: October 6, 2026

This policy explains what personal information is handled when you visit coravend.online ("Coravend") or email us, why, for how long, who else receives it and what rights you have. It is written for readers in Canada and also covers the European Union's General Data Protection Regulation (GDPR), because the publisher is established in the Czech Republic.

1. Who is responsible for your information

Dubelyne s.r.o. publishes Coravend and decides how personal information connected with the site is handled. Questions about privacy, including requests to exercise your rights, go to the email address above. That address is monitored by the person at Dubelyne s.r.o. who is accountable for privacy compliance.

2. What is collected

Very little, and nothing through the site itself.

• Nothing through the pages. Coravend has no forms, no accounts, no newsletter, no comments and no chat. It runs no analytics, advertising or tracking scripts.
• No cookies. The site sets no cookies and uses no browser storage. See the Cookie Policy.
• Server logs. Like almost every website, the server that delivers Coravend's pages automatically records basic technical details of each request: the IP address it came from, the browser's user-agent string, the address of the page requested, and the date and time. These logs are kept by our hosting provider.
• Emails you send us. If you email info@coravend.online, we receive your email address, your name if you include it, the message and anything you choose to attach.

Coravend makes no external requests for fonts, images or scripts, so no other company receives information about your visit from the pages themselves.

When you follow an affiliate link on Coravend, you leave our site. The website you arrive at, and the affiliate network behind the link, handle information under their own privacy policies. We do not send them any personal information about you; they receive what your browser sends to any site you visit.

3. Why it is used

• Server logs are used to keep the site running and secure: to deliver pages, to diagnose errors, and to detect and block abuse such as attacks or excessive automated requests. They are not used to build profiles of visitors or for marketing.
• Emails are used to read and reply to your message, to make corrections you request, and to keep a record of what was agreed.

We do not sell personal information, use it for advertising or combine it with information from other sources.

4. Legal basis and consent

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), organizations may collect, use and disclose personal information only for purposes a reasonable person would consider appropriate. Recording technical request data to deliver and secure a website, and using an email to reply to its sender, are purposes of that kind, and the collection is limited to what those purposes need. By emailing us you consent to our using your message to respond to it.

Under the GDPR, server logs are processed on the basis of our legitimate interest in operating a secure, working website (Article 6(1)(f)). Emails are processed on the basis of our legitimate interest in answering correspondence and, where your message relates to a request you are making of us, to take steps at your request (Article 6(1)(b)). We do not rely on consent for any processing connected with the pages, because the site sets no cookies and runs no optional tracking.

5. How long it is kept

• Server logs: no longer than 30 days, after which they are deleted. A specific log entry may be kept longer only if it is needed to investigate a particular security incident, and only until that investigation is closed.
• Emails: up to 24 months after our last exchange with you, then deleted, unless a longer period is required by law (for example, for accounting records of business correspondence).

6. Who else receives it

Only one other organization handles personal information connected with Coravend: our hosting provider, which stores the site and its server logs on our behalf under a contract that limits its use of the data to providing the service. Our email service provider stores the messages you send us, also on our behalf.

We do not use analytics companies, advertising networks, font services, content delivery networks or social media plug-ins. We would disclose information to a public authority only where the law requires it.

7. Information processed outside Canada

Coravend is published from the Czech Republic, and the information described above is stored and processed outside Canada, in the European Union and by service providers acting for us. This means that personal information connected with your visit or your email is transferred to recipients outside Canada, where it is subject to the laws of those jurisdictions and may be accessible to their courts and authorities. The Office of the Privacy Commissioner of Canada expects organizations to be open about such transfers, and we remain responsible for the information while it is processed by our providers on our behalf.

8. How it is protected

• The whole site is served over HTTPS, so pages and requests are encrypted in transit.
• Access to server logs and to the contact mailbox is limited to the publisher and protected by unique passwords and multi-factor authentication where the provider supports it.
• The site is static: there is no database of visitors and no login, which removes most of the ways a website can leak personal information.
• Logs are deleted on the schedule in section 5, which limits what could be exposed.

9. Your rights

In Canada, you have the right to ask whether we hold personal information about you, to access it, and to ask us to correct it if it is inaccurate or incomplete. You can also withdraw consent to our use of your email correspondence, subject to legal requirements. Email info@coravend.online and we will reply within 30 days. Because server logs record only an IP address and similar details, we may need you to tell us the approximate time and the IP address you used in order to find any entries.

If you are not satisfied with our response, you can file a complaint with the Office of the Privacy Commissioner of Canada.

Under the GDPR, you have the right to access your personal data, to have it rectified, to have it erased, to restrict its processing, to receive it in a portable format where processing is based on contract, and to object to processing based on legitimate interests. You may also lodge a complaint with a supervisory authority. In the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů); you may also complain to the authority in the EU country where you live or work.

10. If a breach occurs

If a breach of security safeguards involving personal information we control creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you as soon as feasible, as PIPEDA requires, and we will keep a record of the breach. Where the GDPR applies, we will notify the Czech Office for Personal Data Protection within 72 hours of becoming aware of a breach that is likely to result in a risk to people's rights, and inform affected people directly where the risk is high.

11. Children

Coravend is written for adults and is not directed at anyone under 16. The site collects nothing from children, or from anyone else, through its pages. If you believe a child has emailed us personal information, contact us and we will delete it.

12. Changes to this policy

If we change how personal information is handled, we will update this page before the change takes effect and change the effective date at the top. Significant changes, such as introducing any cookie or third-party service, will also be noted on the homepage for at least 30 days. Previous versions are available on request.

13. Contact

For any question about this policy, email info@coravend.online or write to Dubelyne s.r.o., Na dolinách 1272/41, Nusle, 140 00 Praha 4, Czech Republic.