Privacy Policy

Effective date: 18 May 2026, Version: 2.0

This Privacy Policy describes how Global Business Vision s.r.o. (the "Operator", "we", "us"), operator of the website audiolivescore.com and the AudioLiveScore mobile applications (the "Service"), collects, uses and protects information about visitors and users of the Service.

This Policy is issued in accordance with Regulation (EU) 2016/679 (GDPR), Act No. 110/2019 Coll. on the Processing of Personal Data and other applicable laws of the Czech Republic.

We aim to keep data processing to the minimum necessary to operate the Service, ensure its security and improve it over time.

1. Data controller

Global Business Vision s.r.o. Voskovcova 1130/30, Hlubočepy, 152 00 Prague 5, Czech Republic Company ID (IČO): 24826537 VAT ID (DIČ): CZ24826537 Czech Data Box ID: acs2jwj Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 177942.

Contact for privacy matters: info@gbvision.cz

We have not appointed a Data Protection Officer (DPO) as we are not required to do so under Article 37 GDPR. All communication on data protection matters is handled through the contact above.

2. Data we process

We process the following limited categories of data:

2.1 Server-side data

When you access the Service, our servers automatically receive and log a limited set of technical information:

IP address: collected for security purposes (such as abuse prevention, rate limiting and incident investigation) and for aggregated metrics about traffic to the Service.
Browser data: information sent by your browser as part of standard HTTP requests, such as user-agent string and similar technical headers. Used for security and aggregated metrics.
Preferred language: the language in which you use the Service, used to provide correctly localised content and for aggregated metrics about user preferences.

This data is processed on the legal basis of our legitimate interest (Art. 6(1)(f) GDPR) in operating, securing and improving the Service.

2.2 Cookies

We use only the following cookies. We do not use advertising, profiling or third-party analytics cookies.

| Cookie | Purpose | Type | Duration | |--------|---------|------|----------| | __cf_bm | Cloudflare bot management cookie used to distinguish humans from automated bots. Designed to be anonymous and contains no personal data. More: Cloudflare cookies documentation | Strictly necessary (security) | 30 minutes | | ALS_LOCALE | Stores your selected interface language (e.g. en, cs, pt-br) so the Service can display content in your chosen language on subsequent visits. Contains only the language code, no other information. | Functional (preferences) | 365 days |

Both cookies are necessary for the proper functioning and security of the Service and are therefore not subject to prior consent under the ePrivacy framework. You can disable or delete cookies in your browser settings at any time, but doing so may affect the functionality of the Service (for example, language preferences will not be remembered).

For details see our Cookies Policy.

2.3 Communication data

If you contact us (by e-mail, data box or otherwise), we process the data you provide to the extent necessary to handle your request. The legal basis is our legitimate interest in handling correspondence, or preparing or performing a contract.

3. How we use the data

We use the collected data exclusively for the following purposes:

to deliver the Service in your chosen language;
to ensure the security and integrity of the Service, including bot mitigation and abuse prevention;
to maintain aggregated, non-identifying metrics about how the Service is used (current and future internal analysis);
to handle your communication and support requests;
to comply with legal obligations.

We do not sell, rent or share personal data with third parties for marketing purposes.

We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

4. Data sharing

We rely on the following service providers (acting as processors or independent controllers) to operate the Service:

Cloudflare, Inc.: content delivery network (CDN), DDoS mitigation and bot management. Cloudflare may process IP addresses and request metadata in this context. More: https://www.cloudflare.com/privacypolicy/.
Hosting providers: our infrastructure is hosted on servers operated by reputable providers within the EU and other jurisdictions; access logs may be processed by these providers strictly for the purpose of providing the hosting service.

Sharing with other parties may occur where required by law or by an order of a public authority (courts, police, supervisory authorities).

5. International data transfers

Some of the above services (notably Cloudflare) are provided by companies established outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure an adequate level of protection through:

Standard Contractual Clauses (SCCs) approved by the European Commission;
other appropriate safeguards under Articles 44 to 49 GDPR;
where applicable, an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework, provided the recipient is certified).

You may obtain a copy of the safeguards by contacting info@gbvision.cz.

6. Retention

Server access logs (containing IP addresses and browser data): retained for the period necessary to investigate security incidents and produce aggregated metrics, typically no more than 12 months, and are then deleted or anonymised.
ALS_LOCALE cookie: stored in your browser for up to 365 days, or until you delete it.
__cf_bm cookie: short-lived (30 minutes), managed by Cloudflare.
Communication (e-mails, letters): typically 3 years from the last contact, or longer if required to handle the request.
Data required by law (e.g. accounting records): for the period required by the applicable law (typically 10 years under Act No. 563/1991 Coll. on Accounting).

7. Your rights

Under the GDPR you have the following rights:

Right of access (Art. 15): to obtain confirmation that we are processing your personal data and a copy of that data.
Right to rectification (Art. 16): to correct inaccurate or incomplete data.
Right to erasure (Art. 17): the "right to be forgotten", subject to certain conditions.
Right to restriction of processing (Art. 18): to limit processing in specific cases.
Right to data portability (Art. 20): to receive your data in a structured, commonly used format (where applicable).
Right to object (Art. 21): to processing based on legitimate interest.
Right not to be subject to automated decision-making (Art. 22): as noted above, we do not perform automated decision-making with legal effects.
Right to lodge a complaint with a supervisory authority (see 7.1).

To exercise any of your rights, contact us at info@gbvision.cz or via Czech data box acs2jwj. We will respond without undue delay, no later than within one month (extendable by two months in particularly complex cases, of which we will inform you).

7.1 Complaint to the supervisory authority

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority:

Úřad pro ochranu osobních údajů (Czech DPA) Pplk. Sochora 27, 170 00 Prague 7, Czech Republic Web: https://www.uoou.gov.cz Phone: +420 234 665 111

You may also lodge a complaint with the supervisory authority in your country of residence.

8. Security

We implement appropriate technical and organisational measures to protect the personal data we process, including:

encrypted connections (HTTPS / TLS);
access controls and permission management;
security monitoring and incident detection;
regular updates of systems and components;
confidentiality obligations of staff and contractors.

No system is completely secure, and we continuously work to improve our safeguards.

9. Children

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will take appropriate action.

10. AudioLiveScore mobile applications

The AudioLiveScore mobile applications (Android, iOS) may be subject to supplementary data processing information. Mobile applications may request the following device permissions:

Internet access: required for the operation of the Service.
Push notifications: to deliver match alerts and updates (with your consent).
Storage: for caching and offline functionality.

Specific information on processing within the application will be provided in the app and in the Google Play / App Store listing.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Effective date" at the top of this Policy indicates when it was most recently revised. Significant changes will be communicated through the Service.

12. Contact

For any questions about this Policy or our data practices:

E-mail: info@gbvision.cz
Czech Data Box: acs2jwj
Mail: Global Business Vision s.r.o., Voskovcova 1130/30, Hlubočepy, 152 00 Prague 5, Czech Republic

Version: 2.0 Last updated: 18 May 2026