Home Privacy policy

Privacy policy

What personal data we collect, why, who else sees it, and how to ask us to change or delete it.

Last updated November 2, 2026

In short

You can browse the whole directory without an account. We don't use advertising cookies, and we don't sell your data. Visit statistics run only if you accept them.

We only get personal data from you when you send a correction, create an account or claim a shop.

Who is responsible

The controller of your personal data is Daniel Schiffner, self-employed, Company ID (IČO) 03260526, Na Jílech 2651, 470 06 Česká Lípa, Czech Republic. Email: hi@151cardshops.com.

Because we are based in the EU, we follow the General Data Protection Regulation (GDPR) for all visitors.

What we collect and why

When	What	Why and legal basis
You visit any page	IP address, browser, pages requested, in server logs	To run the site and keep it secure. Legitimate interest.
You accept statistics in the cookie banner	Pages you view, how you reached us, device, browser and approximate location, through Google Analytics cookies	To see which pages help people and improve the site. Consent.
You report a correction	Shop, what's wrong, your message, your email if you give it, whether you work at the shop, IP address and browser	To check and fix the listing and reply to you. Legitimate interest.
You create an account	Name, email and password (stored encrypted)	To give you an account. Contract.
You claim a shop	Your name, phone, message, and how we confirmed you're the owner	To confirm you own the shop and let you manage the listing. Contract.
You suggest a shop or edit a listing	The shop details and photos you send, linked to your account	To publish and keep the listing correct. Contract.
You email us	Your email address and message	To reply. Legitimate interest.

Giving us your email in the correction form is optional. Without an account we can't let you claim a shop.

We don't make automated decisions about you that have legal or similar effects.

Data about shops

The directory itself is business information: shop names, addresses, phone numbers, hours, websites, photos and Google ratings. It comes from shops' public Google Business Profiles and their own websites. Where a shop is run under a person's name, some of this can be personal data.

We publish it because people want to find local shops, and shops benefit from being found. Our legal basis is legitimate interest. Shop owners can claim and correct their listing, ask for photos to be removed, or ask us to remove the listing entirely. Write to us from the shop's email or ask us to call the shop's number, and we remove the listing within 7 days of confirming (see our editorial policy).

Shop photos are stored on our own server, so viewing them doesn't send your data to Google.

Credits: map data © OpenStreetMap contributors, available under the Open Database License. ZIP code locations for searching by ZIP come from GeoNames, licensed under Creative Commons Attribution 4.0. ZIP searches are matched on our own server and are not sent to GeoNames.

Cookies

These cookies are always on, because the site needs them to work:

Sign-in cookies (WordPress) keep you logged in if you have an account.
directorist_js_referrer remembers the page you came from, so the directory can send you back after an action.
Consent cookies (names starting with cmplz_) remember what you chose in the cookie banner.

Statistics, only if you accept them: we use Google Analytics to count visits and see which pages are useful. It sets cookies whose names start with _ga, which last up to 2 years, and Google keeps the reports for 14 months. If you click Deny, Google Analytics doesn't load at all.

You can change your choice at any time with Cookie settings at the bottom of every page. Our cookie policy lists every cookie in detail.

We don't use advertising or social media cookies.

Services that see your data

We use these providers. Each receives only what it needs:

Web hosting: Hostinger, a provider based in the EU, stores the site and its data.
Email: Hostinger Email, from the same provider, handles our mailbox and the emails the site sends.
Google Analytics (Google, USA) receives visit statistics, only if you accept them in the cookie banner.
Google reCAPTCHA (Google, USA) on some account and listing forms, such as adding a shop, to block spam. It reads technical data about your browser and how you use the page, and Google may set its own cookies for this.
Maps: shop maps load tiles from OpenStreetMap and the map library from cdnjs (Cloudflare). They see your IP address when the map appears.
Gravatar (Automattic) may show a profile picture for signed-in users, based on a hashed email.

We don't share your data with anyone else unless the law requires it.

Transfers outside the EU

Some providers above are in the United States. Transfers to them rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.

How long we keep it

Server logs: only for the short time Hostinger keeps them for security and troubleshooting, then they are deleted automatically.
Visit statistics: 14 months in Google Analytics.
Correction reports and emails: up to 2 years, then deleted.
Accounts: until you delete your account.
Claims: while you manage the listing, and 3 years after, as proof of who claimed it.
Backups: our host keeps copies of the site for up to 6 weeks, so data you ask us to delete disappears from them within that time.

Your rights

You can ask us to:

tell you what data we have about you and give you a copy;
correct it or delete it;
limit how we use it, or send it to you in a machine-readable format;
stop using it where we rely on legitimate interest (you can object);
withdraw your consent to statistics at any time, through Cookie settings.

Email hi@151cardshops.com. We reply within one month. If you think we've handled your data wrongly, you can complain to the Czech data protection authority, the Office for Personal Data Protection (ÚOOÚ), or to the authority where you live.

The site is not meant for children under 16, and we don't knowingly collect their data.

For US visitors

We don't sell or share personal information for advertising, and we don't use it for profiling. The rights above apply to you too, whatever state you live in.

Changes

If we change how we use personal data, we'll update this page and the date at the top. Account holders will get an email about important changes.