Cookie Policy

Cookies are small text files that are stored on your device (computer, tablet, smartphone) when you visit a website. Cookies allow websites to recognise your device and store certain information about your preferences or past actions.

In addition to cookies, we may also use other similar technologies, such as:

• Local Storage – storing data in the browser

• Session Storage – temporarily storing data during a session

• Pixel tags (web beacons) – small images used for tracking

• JavaScript – for collecting information about website usage

For the purposes of this Policy, we will refer to all of these technologies collectively as "cookies".

We use the following types of cookies:

2.1 Necessary cookies

These cookies are essential for the website to function properly and cannot be turned off. They provide basic functions such as website navigation, access to secure areas of the site, and remembering your cookie preferences and other basic settings.

• Purpose: Ensuring the technical functionality of the website, security, remembering your cookie preferences

• Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

• Retention period: Up to 12 months or until deleted by the user

• Can be declined: No (they are necessary for the website to function)

2.2 Analytics cookies

These cookies help us understand how visitors use our website; they collect statistical data on traffic, the most visited pages, time spent on the site, and similar information. Using Microsoft Clarity, we also record how visitors interact with the pages (mouse movement, scrolling, clicks) in the form of anonymised session recordings and heatmaps. This information helps us improve the functionality and user experience of our website.

• Purpose: Analysing website traffic, analysing user behaviour (session recordings, heatmaps), improving user experience, optimising content

• Legal basis: Your consent (Art. 6(1)(a) GDPR)

• Retention period: Up to 26 months (Google Analytics), up to 13 months (Microsoft Clarity)

• Can be declined: Yes (you can decline them in the cookie settings)

• Third parties: Google LLC (Google Analytics), Microsoft Corporation (Microsoft Clarity)

2.3 Cookieless analytics (Vercel Web Analytics)

For aggregated traffic statistics we also use the Vercel Web Analytics service provided by Vercel Inc. This service does not store any cookies or other identifiers on your device – it distinguishes visits using a short-lived anonymous hash of the incoming request, which is automatically deleted within 24 hours. Only aggregated data is recorded (pages viewed, country, device type and browser), from which no individual visitor can be identified or tracked across websites.

• Purpose: Aggregated website traffic statistics

• Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

• Cookies: None

• Third parties: Vercel Inc. (more at https://vercel.com/docs/analytics/privacy-policy)

2.4 Protection of forms against bots (Cloudflare Turnstile)

To protect the contact form against automated (robotic) submissions, we use the Cloudflare Turnstile service provided by Cloudflare, Inc. In the default configuration we use, this service does not store any cookies on your device; during verification it only processes technical browser signals and your IP address.

• Purpose: Website security, protecting forms against spam and misuse

• Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

• Cookies: None (in the default configuration we use)

• Third parties: Cloudflare, Inc. (more at https://www.cloudflare.com/turnstile-privacy-policy/)

3.1 Necessary cookies

Name: staybrand-cookie-preferences

• Purpose: Storing your cookie preferences

• Type: Local Storage

• Retention period: Up to 12 months

• Provider: Codity s.r.o.

Name: staybrand-cookie-consent

• Purpose: Recording whether you have given consent to the use of cookies

• Type: Local Storage

• Retention period: Up to 12 months

• Provider: Codity s.r.o.

Name: NEXT_LOCALE

• Purpose: Remembering your selected language version of the website

• Type: HTTP Cookie

• Retention period: Until the end of the browser session

• Provider: Codity s.r.o.

Name: staybrand-theme

• Purpose: Remembering your selected website appearance (light/dark mode)

• Type: Local Storage

• Retention period: Until deleted by the user

• Provider: Codity s.r.o.

3.2 Analytics cookies (Google Analytics)

Name: _ga

• Purpose: Distinguishing between individual users

• Type: HTTP Cookie

• Retention period: 2 years

• Provider: Google LLC

• Domain: .staybrand.io

Name: _ga_[ID]

• Purpose: Maintaining session state

• Type: HTTP Cookie

• Retention period: 2 years

• Provider: Google LLC

• Domain: .staybrand.io

Name: _gid

• Purpose: Distinguishing between individual users

• Type: HTTP Cookie

• Retention period: 24 hours

• Provider: Google LLC

• Domain: .staybrand.io

Name: _gat (if used)

• Purpose: Throttling the request rate

• Type: HTTP Cookie

• Retention period: 1 minute

• Provider: Google LLC

• Domain: .staybrand.io

3.3 Analytics cookies (Microsoft Clarity)

Name: _clck

• Purpose: Storing the Clarity user identifier and settings unique to this website

• Type: HTTP Cookie

• Retention period: 12 months

• Provider: Microsoft Corporation

• Domain: .staybrand.io

Name: _clsk

• Purpose: Linking multiple page views into a single session recording

• Type: HTTP Cookie

• Retention period: 24 hours

• Provider: Microsoft Corporation

• Domain: .staybrand.io

Name: CLID

• Purpose: Identifying the first time a visitor is recorded by Clarity

• Type: HTTP Cookie

• Retention period: 12 months

• Provider: Microsoft Corporation

• Domain: clarity.ms

Name: MUID, MR, SM, ANONCHK

• Purpose: Technical Microsoft cookies used to distinguish browsers and synchronise identifiers across Microsoft domains

• Type: HTTP Cookie

• Retention period: 10 minutes to 13 months (depending on the specific cookie)

• Provider: Microsoft Corporation

• Domain: clarity.ms / bing.com

4.1 Google Analytics

We use the Google Analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to analyse traffic on our website.

Google Analytics uses cookies to analyse how visitors use our website. The information generated by cookies about your use of our website (including your IP address) may be transmitted to and stored on Google's servers in the USA.

Google may use this information to evaluate your use of our website, compile reports on website activity for the website operator, and provide other services relating to website activity and internet usage.

For more information on how Google uses your data, see Google's Privacy Policy: https://policies.google.com/privacy

You can also opt out of the use of cookies by Google by downloading and installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

4.2 Microsoft Clarity

We use the Microsoft Clarity service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA) to analyse visitor behaviour on our website.

Microsoft Clarity records how visitors interact with the pages — mouse movement, scrolling and clicks — and creates anonymised session recordings and heatmaps from this data. Sensitive data (e.g. form content) is automatically masked in the recordings. We use this information solely to improve the usability and content of the website.

Clarity only starts running once you have given consent to analytics cookies, and we pass your consent to it via its Consent API. If you withdraw your consent, Clarity deletes its cookies and stops recording the session.

For more information on how Microsoft processes your data, see Microsoft's Privacy Statement: https://privacy.microsoft.com/privacystatement

4.3 Vercel Web Analytics

We use the Vercel Web Analytics service provided by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA) for aggregated traffic statistics of our website.

Vercel Web Analytics does not store any cookies and does not collect personal identifiers that could be used to track visitors across websites or between individual days. It distinguishes visits using an anonymous hash created from the incoming request, which is automatically deleted within 24 hours. Only aggregated data is recorded: the page viewed, the referring page, country, operating system, browser and device type.

Because the service does not store any information on your device, it is not subject to consent for analytics cookies.

For more information about privacy in Vercel Web Analytics, see: https://vercel.com/docs/analytics/privacy-policy

4.4 Transfer of data to third countries

Since Google Analytics, Microsoft Clarity and Vercel Web Analytics may transfer data to the USA, we rely on the European Commission's adequacy decision (the EU-U.S. Data Privacy Framework, under which Google LLC, Microsoft Corporation and Vercel Inc. are certified) and on standard contractual clauses approved by the European Commission to ensure an adequate level of protection for your personal data.

5.1 Necessary cookies

The processing of personal data through necessary cookies is based on our legitimate interest (Art. 6(1)(f) GDPR) in ensuring the technical functionality and security of our website.

5.2 Analytics cookies

The processing of personal data through analytics cookies is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time by changing your cookie settings in your browser or using our cookie banner.

In connection with the processing of your personal data through cookies, you have the following rights:

• Right of access to data (Art. 15 GDPR) – you have the right to obtain information about what personal data we process about you

• Right to rectification (Art. 16 GDPR) – you have the right to request the correction of inaccurate data

• Right to erasure (Art. 17 GDPR) – you have the right to request the deletion of your data (the "right to be forgotten")

• Right to restriction of processing (Art. 18 GDPR) – you have the right to request that the processing of your data be restricted

• Right to data portability (Art. 20 GDPR) – you have the right to receive your data in a structured format

• Right to object (Art. 21 GDPR) – you have the right to object to the processing of your data

• Right to withdraw consent (Art. 7(3) GDPR) – you have the right to withdraw your consent to the processing of data for marketing purposes at any time

• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) – you have the right to lodge a complaint with the Office for Personal Data Protection

To exercise your rights, contact us at the email address: info@staybrand.io or in writing at: Codity s.r.o., Plzeňská 3352/156, Smíchov, 150 00 Prague 5, Czech Republic.

7.1 Managing cookies through our website

The first time you visit our website, a cookie banner will appear where you can:

• Accept all cookies

• Reject all non-essential cookies

• Customise your cookie settings according to your preferences

Your preferences are stored in your browser's Local Storage and will be respected on subsequent visits.

7.2 Managing cookies through your browser

Most browsers accept cookies automatically. However, you can set your browser to refuse cookies or to notify you when a website wants to store a cookie. Below you will find links to instructions for managing cookies in the most widely used browsers:

• Google Chrome: https://support.google.com/chrome/answer/95647

• Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox

• Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

• Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac

• Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that blocking or deleting cookies may affect the functionality of our website, and some features may not be available.

Personal data collected through cookies is retained only for as long as necessary to fulfil the purpose for which it was collected, or for the period laid down by law.

• Necessary cookies: retained for the duration of the session, or for a maximum of 12 months

• Analytics cookies: retained for a maximum of 26 months (Google Analytics), or a maximum of 13 months (Microsoft Clarity)

• Cookieless analytics (Vercel Web Analytics): the anonymous visit hash is deleted within 24 hours; data is further retained only in aggregated form

Once the retention period has expired, personal data is automatically deleted or anonymised.

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:

• Encryption of data in transit (HTTPS)

• Restricting access to personal data to authorised persons only

• Regular review and updating of security measures

• The use of secure servers and data centres

Despite these measures, we cannot guarantee the absolute security of data transmitted over the internet.

Our website is not intended for persons under the age of 16. We do not knowingly collect personal data from children. If we discover that we have collected personal data from a child under 16 without the consent of a parent or legal guardian, we will delete this data without undue delay.

We may update this Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. The date of the last update is shown in the header of this Policy.

We recommend that you check this Policy regularly to stay informed about how we use cookies. If there are significant changes to our use of analytics cookies, we will ask you to renew your consent via our cookie banner.

In the event of significant changes, we will inform you via our website or by email.

If you have any questions, comments or requests regarding this Policy or our use of cookies, you can contact us at:

Codity s.r.o.

Plzeňská 3352/156

150 00 Prague 5 – Smíchov

Czech Republic

Email: info@staybrand.io

Office for Personal Data Protection

Pplk. Sochora 27

170 00 Prague 7

Czech Republic

Website: https://www.uoou.cz

Email: posta@uoou.cz

Phone: +420 234 665 111

This Policy forms part of our Terms and Conditions and Privacy Policy. We recommend that you also read these documents for a full understanding of how we process your personal data.

This Policy has been prepared in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR)

• Act No. 110/2019 Coll., on the Processing of Personal Data

• Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in electronic communications (the ePrivacy Directive)

This Policy is effective from the date of its publication on our website.