Privacy Policy

Controller: rcore s.r.o., Company ID (IČO): 09594311, registered office at Lidická 700/19, Veveří, 602 00 Brno, Czech Republic, registered in the Commercial Register kept by the Regional Court in Brno ("we", "us", or the "controller")

Contact for data protection matters: info@rcore.cz

This policy applies to: rcore.cz, maps.rcore.cz, store.rcore.cz, and our Discord server and applications.

Effective date: 11 August 2026

---

1. Introduction

This policy explains what personal data we process, for what purposes, on what legal bases, how long we keep it, and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on Personal Data Processing.

2. What data we process and why

2.1 Newsletter

• Data: e-mail address
• Purpose: sending news and commercial communications
• Legal basis: your consent (Art. 6(1)(a) GDPR)
• Retention: until you withdraw consent (unsubscribe). You can unsubscribe at any time via the link in every e-mail or at info@rcore.cz
• Processor: ECOMAIL.CZ, s.r.o. (Czech Republic)

2.2 Customer support

• Data: e-mail address, Discord ID and username, content of communication (e-mails, messages in Discord support tickets including transcripts)
• Purpose: handling inquiries, providing support, defending against legal claims
• Legal basis: performance of a contract and pre-contractual steps (Art. 6(1)(b) GDPR); our legitimate interest in keeping verifiable records of communication (Art. 6(1)(f) GDPR)
• Retention: ticket transcripts for 24 months after the ticket is closed; e-mail communication for 3 years (general limitation period under Section 629 of the Czech Civil Code)

2.3 Customer reviews

• Data: Discord nickname, avatar, review text
• Purpose: publishing the review next to the relevant product on our websites
• Legal basis: your consent (Art. 6(1)(a) GDPR) – we only publish reviews with the author's permission
• Retention: for as long as the review is published, at most until consent is withdrawn. You can withdraw consent at any time at info@rcore.cz and we will remove the review
• Note: avatars are displayed via Discord's CDN

2.4 Purchases

Sales on maps.rcore.cz and store.rcore.cz are handled by Tebex (Tebex Limited, United Kingdom), which acts as the merchant of record – i.e. the legal seller and an independent controller of personal data related to your purchase, payment, invoicing, and refund handling. That processing is governed by Tebex's privacy policy: https://www.tebex.io/privacy-policy. Login on the stores is also provided by Tebex.

2.5 Analytics

We use Plausible Analytics in a cookie-less configuration. Traffic data is aggregated and anonymous – we do not process personal data of individual visitors through it.

2.6 Website security

• Data: IP address, technical information about your device and browser
• Purpose: protecting forms against spam and abuse (hCaptcha), operational and security server logs
• Legal basis: our legitimate interest in securing our services (Art. 6(1)(f) GDPR)
• Retention: technical logs for a maximum of 12 months
• Processors: Intuition Machines, Inc. (hCaptcha, USA); Railway Corp. (hosting, USA)

3. Recipients and processors

We share personal data only with the following categories of recipients:

• ECOMAIL.CZ, s.r.o. – newsletter delivery (Czech Republic)
• Railway Corp. – website and database hosting (USA)
• Intuition Machines, Inc. – hCaptcha anti-spam protection (USA)
• Discord Inc. – operation of our community server and Discord login (USA); Discord is also an independent controller of data processed within its own platform
• Tebex Limited – independent controller for sales and payments (United Kingdom)

We do not sell personal data or share it with third parties for their marketing purposes.

4. International transfers

Some of our providers are located in the USA. Transfers to the USA are based on the European Commission's adequacy decision for entities certified under the EU–U.S. Data Privacy Framework (Art. 45 GDPR), or alternatively on Standard Contractual Clauses (Art. 46(2)(c) GDPR). The United Kingdom is covered by an adequacy decision under Art. 45 GDPR.

5. Retention overview

After the retention period expires, we delete or anonymise the data.

6. Your rights

Under Art. 15–21 GDPR, you have the right to:

• access your personal data,
• rectification of inaccurate data,
• erasure ("right to be forgotten"),
• restriction of processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR).

To exercise your rights, contact us at info@rcore.cz. We will respond without undue delay, at the latest within one month.

You also have the right to lodge a complaint with a supervisory authority: Úřad pro ochranu osobních údajů (Czech Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz. If you reside in another EU member state, you may also contact your local supervisory authority.

7. Automated decision-making

We do not carry out automated individual decision-making or profiling within the meaning of Art. 22 GDPR.

8. Discord application (bot)

Details of data processing by our Discord application (bot) are set out in a separate document, the Bot Privacy Policy, available at rcore.cz/bot-privacy.

9. Changes to this policy

We may update this policy from time to time. The current version is always available on our websites; we will inform you of material changes.

---

In the event of any discrepancy between language versions of this policy, the Czech version prevails.