MyGlobdoc
Privacy Policy
PRIVACY POLICY
Personal Data Processing Policy – Globroads Web Application “MyGlobdoc”
Effective date: June 2026
1. Data Controller
The controller of your personal data is Globroads s.r.o., IČO 23530413, with registered office at Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Brno, file no. C 146272 (the “Provider” or “we”).
Contact for data protection matters: [email protected]
2. What Personal Data We Process
2.1 Registration data
- E-mail address (used for login and delivery of the Report link)
2.2 Health and travel data (special category – sensitive data)
As part of the questionnaire, you provide data relating to your health status, medical history, allergies, vaccinations, and planned travel destination. Under Article 9 of Regulation (EU) 2016/679 (GDPR), these constitute special categories of personal data and require your explicit consent before processing.
The information about your passport is processed exclusively for the purpose of correctly identifying and taking into account the safety recommendations issued for individual countries (including travel advisories issued by the respective governments/ministries of the United States, the United Kingdom, Canada, and Australia) and the entry requirements applicable to the relevant country.
2.3 Transaction data
- Payment status (paid / not paid) – we do not store payment card details.
- Date and tier of purchase.
2.4 Technical data
- IP address, browser type, and device information (collected automatically for security and operational purposes).
3. How We Process Your Data – Anonymisation and ID System
3.1 All data you enter into the questionnaire and your resulting Report are associated exclusively with a randomly generated unique identifier (ID). Reports are labelled with this ID only and never display your name, surname, or e-mail address.
3.2 The Provider’s employees and systems do not have the technical capability to read or identify individual data records by linking the ID to a specific natural person.
3.3 Your questionnaire data and Report are automatically and permanently deleted 30 days after the Report is generated. Following deletion, the data cannot be recovered.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Performance of a contract (Art. 6(1)(b) GDPR): processing of your e-mail address and transaction data is necessary to provide the service and deliver the Report.
- Explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR): processing of your health and travel data (special category data) is based on your freely given, specific, informed, and unambiguous consent. You grant this consent during the registration process by actively ticking the relevant consent checkbox. You may withdraw this consent at any time, though doing so will prevent further use of the questionnaire service.
- Legitimate interests (Art. 6(1)(f) GDPR): processing of technical data for security and fraud prevention purposes.
- Use of the Service in its basic free-of-charge version (Free Tier) is conditional upon subscribing to the newsletter, which does not contain any personalised communications and serves solely as an informational channel for users. By using the Service in its free-of-charge version, you hereby express your consent thereto.
5. Explicit Consent to Process Health Data
5.1 Before you complete the questionnaire, you will be asked to provide explicit consent to the processing of your health and travel data for the purpose of generating your personalised travel health Report.
5.2 This consent is obtained during the registration process via a dedicated, clearly labelled checkbox. Granting this consent is voluntary; however, it is a functional prerequisite for using the questionnaire and receiving the Report.
5.3 You may withdraw your consent at any time by contacting the Provider at the e-mail address listed in Section 1. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.
6. Purposes of Processing
We process your personal data for the following purposes:
- Creating and managing your user account.
- Processing the questionnaire and generating the personalised travel health Report.
- Delivering the Report link to your e-mail address.
- Processing payments and issuing receipts.
- Ensuring the security and integrity of the Application.
- Complying with applicable legal obligations.
7. Data Retention
- Health and travel data (questionnaire responses) and the Report: automatically deleted 30 days after the Report is generated.
- Account registration data (e-mail address): retained for the duration of the user account and deleted upon account closure.
- Transaction records: retained for 10 years to comply with Czech accounting and tax legislation.
- Technical/log data: retained for up to 12 months for security purposes.
8. Data Sharing and Third-Party Processors
8.1 We do not sell, rent, or share your personal data with third parties for marketing purposes.
8.2 We may share your data with carefully selected processors who assist in operating the Application, including:
- Payment gateway provider (for processing card transactions).
- E-mail delivery service provider (for sending the Report link).
- Cloud hosting provider (for storing Application data).
8.3 All processors are bound by data processing agreements and are required to implement appropriate technical and organisational safeguards.
8.4 We will update this Privacy Policy with information on the location of our servers and hosting infrastructure as soon as this information becomes available.
9. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR (e.g. Standard Contractual Clauses or an adequacy decision of the European Commission).
10. Your Rights
Under the GDPR, you have the following rights in relation to your personal data:
- Right of access – to obtain confirmation of whether we process your data and to receive a copy.
- Right to rectification – to request correction of inaccurate data.
- Right to erasure (‘right to be forgotten’) – to request deletion of your data where no legal basis for retention exists.
- Right to restriction of processing – to request that we limit processing in certain circumstances.
- Right to data portability – to receive your data in a structured, machine-readable format.
- Right to object – to object to processing based on legitimate interests.
- Right to withdraw consent – at any time, without affecting the lawfulness of prior processing.
- Right to lodge a complaint – with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).
To exercise any of these rights, please contact us at [[email protected]].
11. Cookies and Technical Data
The Application may use essential cookies necessary for its operation (e.g. session management). Non-essential cookies will only be set with your prior consent. Further details are provided in our Cookie Policy [link].
12. Disclaimer – Nature of the Service
The Report generated by the Application is not a medical service, medical advice, or the output of an artificial intelligence system. It is produced by the Provider’s proprietary system based solely on the information you provide. The Provider assumes no liability for any health-related decisions made on the basis of the Report.
13. Amendments to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes via e-mail or a prominent notice in the Application. The current version is always available within the Application and on our website.
14. Contact
Data Controller: Globroads s.r.o.
Address: Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic
E-mail: [email protected]
Website: globroads.com
This Privacy Policy is effective as of June 2026.