CENTURY 21 FIRST CLASS
Privacy notice
Updated 7 October 2026
Controller
First Class Century s.r.o., IČO 06517129, Michalská 432/12, 110 00 Praha, firstclass@century21.cz. Send privacy questions or requests to the email above.
Purposes and legal bases
We process contact and property data to prepare valuations, communicate, save reports and provide requested price monitoring. Limited security and technical data supports service protection, diagnostics and bug resolution. The legal bases are taking steps at your request, legitimate interests, consent where required, and legal obligations.
Data categories and sources
Name, email, phone, contact preference, chat, property parameters and location, valuation results, account state and limited technical context. We never store a raw IP address: only a masked prefix and keyed HMAC correlation hash. Data comes from you and CloudFront infrastructure.
Recipients and transfers
Contracted hosting, email, mapping and AI providers and authorised CENTURY 21 staff may process data. Transfers outside the EEA use appropriate contractual and security safeguards. Mapbox is not loaded without your choice.
Broker referrals
If you open a link shared by a CENTURY 21 broker (the ?ref= parameter), we attach that link’s code to your conversation and any resulting lead. We use it for link statistics and to route your enquiry to that broker — your contact details reach the broker only if you ask to be contacted by a broker. Nothing is stored on your device for this; we only count the total number of link opens. The legal basis is legitimate interest.
Retention
Anonymous unfinished chats and technical context: 90 days. Resolved bugs: 12 months; unresolved bugs: at most 24 months. Leads, completed valuations and inactive accounts: generally 24 months after last activity. Active price monitoring or an open bug may extend this. Only anonymous daily totals remain afterward.
Automated valuation
The valuation is an indicative model output, not an expert appraisal or personalised financial advice. We do not make solely automated decisions that produce legal or similarly significant effects.
Your rights
You can request access, correction, deletion, restriction and portability, object to processing and withdraw consent without affecting earlier processing. You may complain to the Czech Data Protection Authority at uoou.gov.cz.
Security
We use encrypted transport, restricted roles, auditable access, data minimisation and automatic retention periods.