Privacy Policy

This is an English translation provided for convenience. The Czech version of this text is the binding one; in the event of any discrepancy, the Czech version prevails.

What this page covers

This page explains how we process the personal data of visitors to the annoratech.cz website, users of the Res Mea web application and people who write to us. You will also find out who we share data with and what your rights are.

What is the Res Mea application

Res Mea is a web application for property management. It is used mainly by owners associations, housing cooperatives, property managers and developers, and by their owners, buyers and suppliers. The application is used to keep records of buildings and units, to conclude contracts, to vote outside a meeting (per rollam) and to communicate with the manager. It also includes an owner portal.

The application allows you to verify your identity and confirm your consent to a specific document by means of electronic identification, that is, through the Bank iD service or a European Digital Identity Wallet (EUDI Wallet).

What is personal data

Personal data is any information that makes it possible to identify a specific person, or that can be linked to that person. For example your name, e-mail address, phone number or IP address.

Who operates the website and is the controller of your personal data

The website and the Res Mea application are operated by us, ANNORA Tech s.r.o., Company ID No. 23794461, with its registered office at Sokolovská 651/136a, Karlín, 186 00 Prague 8, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, file no. C 432982.

We provide the application to our clients, that is, to organisations such as your owners association, cooperative, property manager or developer. Where an organisation you have a relationship with entrusts us with your personal data (for example a list of unit owners or buyers), that organisation is responsible for it as the controller. The organisation should inform you about the processing and about its use of the Res Mea application. In that case we act as a processor and are contractually bound to the organisation to protect your data.

We act as the controller of your personal data when you browse this website, contact us, register for the Res Mea application and manage your account, or verify your identity and confirm your consent to a document in the application. This policy describes exactly these processing operations.

Where we manage a building for you, your data is processed under the contract concluded with the owners association or cooperative. In that case we are the processor and your association is the controller.

How you can contact us

If you would like help with anything, get in touch:

postal address: ANNORA Tech s.r.o., Sokolovská 651/136a, Karlín, 186 00 Prague 8, Czech Republic
e-mail (general enquiries and the Data Protection Officer): info@annoratech.cz
phone: +420 705 953 890

Our Data Protection Officer is Pavel Burian. You can use the e-mail address above for anything relating to the processing of your personal data, including exercising your rights.

What personal data we may process about you

Depending on why you are in contact with us, we process different categories of data. These may include:

identification data (first name and surname, details of unit ownership or of your relationship to the building);
electronic identification data (data you yourself approve for release from Bank iD or from your EUDI Wallet: first name, surname, date of birth, nationality; the name of the issuer of the credential and the result of the verification);
login data (e-mail address, password in secured form, details of sign-in through Bank iD, an EUDI Wallet or third-party accounts);
information about your use of the application (date of registration and of last sign-in, records of identity verification, of voting and of confirming documents, including their digital fingerprint);
contact data (e-mail address and, if you give it to us yourself, phone number);
details of your enquiry (type of enquiry, the service or software selected, number of units in the building);
the content of our communication with you (anything you write to us in the form or by e-mail);
identification data of your device (IP address, browser identifier);
information about your behaviour on the website, only if you consent to traffic measurement.

When and how we process your personal data

Registration and management of your user account in the Res Mea application

You can create a user account in the Res Mea application or sign in to it through the owner portal. Your account allows you to manage matters relating to your building, vote, sign documents and communicate with the manager.

What data we process: identification data, contact data, login data and information about your use of the application.
For what purpose we process it: to register and manage your user account.
Why we process it: the processing is necessary for the performance of the contract for the use of the Res Mea application, which is formed between us when you register an account or sign in for the first time.
How long we process it for this purpose: until the user account is closed.

Verifying your identity and your consent to a document through an EUDI Wallet or Bank iD

In some situations we need to know reliably that it really is you: when you conclude a purchase agreement or another contract, sign a document or vote. In such a case the Res Mea application will ask you to verify yourself in a European Digital Identity Wallet (EUDI Wallet) or through Bank iD. The wallet always shows you who is asking for data and which data. You only release the data you yourself approve. When you confirm a document, your consent is bound to the digital fingerprint of that particular document.

What data we process: first name, surname, date of birth and nationality, the type and issuer of the credential, the result of the cryptographic verification, the time of verification and, when a document is confirmed, its digital fingerprint. We never request a birth number (rodné číslo) from the wallet.
For what purpose we process it: to verify your identity and to prove your consent to a specific document or vote.
Why we process it: the processing is necessary for the conclusion and performance of the contract you are entering into, or for compliance with a legal obligation (for example identification under the Act on Certain Measures against the Legitimisation of Proceeds of Crime). When you vote within your association, we process the data as a processor on behalf of your association.
How long we process it for this purpose: the verification result and the document fingerprint for the duration of the contractual relationship and then for 1 year after the longest statutory limitation period expires; for identification required by law, for the period the law prescribes. We store the date of birth separately in encrypted storage. We do not keep the credential from the wallet itself after verification; we keep only the verification result.

You choose and manage the European wallet yourself. We do not pass any data about the verification to the wallet provider or to the issuer of your credential. We check the signature of the credential and the trustworthiness of its issuer within our own infrastructure.

Enquiries and questions through the form or by e-mail

When you write to us through the form on the website or by e-mail, we need your data so that we can reply and prepare an offer.

What data we process: identification data, contact data, details of your enquiry and the content of our communication.
For what purpose we process it: to answer your question, prepare an offer and communicate with you afterwards.
Why we process it: the processing is necessary for pre-contractual negotiations conducted at your request. For general questions, we have a legitimate interest in replying to you and providing the information you need.
How long we process it for this purpose: for 2 years from our last communication on the matter. If the enquiry leads to cooperation, we keep the data for as long as the cooperation lasts.

Compliance with legal obligations

If an enquiry leads to a business relationship, we must comply with obligations imposed on us mainly by tax and accounting legislation.

What data we process: identification data, contact data and details of the performance provided.
For what purpose we process it: to comply with our legal obligations.
Why we process it: the processing is necessary for compliance with legal obligations.
How long we process it for this purpose: for the period laid down by law.

Protecting our rights and interests

In some situations we need to protect our rights, for example when a cooperation is not going well or a dispute is looming.

What data we process: identification data, contact data and the content of our communication with you.
For what purpose we process it: to protect our rights and interests, for example for a possible defence in court.
Why we process it: we have a legitimate interest in protecting our rights and legal claims.
How long we process it for this purpose: for 1 year after the longest statutory limitation period expires.

Operation and security of the website

The website server records ordinary operational data without which the website could not run securely.

What data we process: IP address, date and time of the request, address of the page visited and browser identifier.
For what purpose we process it: to run the website and protect it against misuse.
Why we process it: we have a legitimate interest in a secure and working website.
How long we process it for this purpose: for no longer than 6 months.

Visiting the website, cookies and traffic measurement

To run the website we use only essential technical storage, in which we remember your answer to the consent banner. We measure traffic only if you give us your consent. You will find the details on the Cookies page.

What data we process: identification data of your device and information about your behaviour on the website.
For what purpose we process it: to find out how the website is used and to improve it.
Why we process it: on the basis of your consent, which you can withdraw at any time.
How long we process it for this purpose: for as long as the consent is valid, at most 12 months, after which we will ask you again.

Commercial communications

We do not send a newsletter at present and it is not possible to subscribe to news on the website. If we introduce one, we will add the terms here and will only contact you on the basis of your consent or to the extent permitted by law.

Who we share your data with

We do not sell data to anyone. The following may have access to it:

providers of IT and cloud services on which the website, the Res Mea application and the databases run (Microsoft Ireland Operations Limited, Microsoft Azure environment in the European Union);
the provider of the e-mail services through which we communicate with you;
Bankovní identita, a.s., Company ID No. 09513817, Smrčkova 2485/4, 180 00 Prague 8, for identity verification through Bank iD;
Digital Solutions, s.r.o., Company ID No. 25998706, 17. listopadu 203, 530 02 Pardubice, for electronic signing of documents through the DigiSign service;
the Czech Office for Surveying, Mapping and Cadastre, or the operators of remote access to Land Register data, for data on buildings and units;
the provider of a traffic measurement tool, if we launch one with your consent;
providers of legal, tax and accounting services;
authorities, courts and other public bodies in the course of complying with legal obligations and protecting our rights and interests.

Do we transfer data outside the European Union?

We process data primarily within the European Union. Should data be transferred to a third country in a particular case, this will happen only with the safeguards set out in Chapter V of the GDPR, usually on the basis of standard contractual clauses approved by the European Commission.

How your data is protected

The website and the Res Mea application run in a secure Microsoft Azure environment in the European Union, communication is encrypted and only authorised members of our team have access to the data. Sensitive data such as your date of birth is stored separately in encrypted storage. We review access regularly and keep it to the necessary minimum.

What rights you have and how to exercise them

You can exercise your rights in any way you choose; the quickest is by e-mail to info@annoratech.cz. We have to verify that the request really comes from you. We usually reply within one month, in exceptional cases within three months.

Right of access

You have the right to know what personal data we process about you, why we process it, who we share it with and how long we keep it. On request we will provide you with a copy.

Right to rectification

If the data we hold about you is inaccurate or incomplete, we will correct or complete it.

Right to erasure

You can ask us to erase data if we no longer need it for the purpose for which we obtained it, if you withdraw your consent or if we have processed it unlawfully. We cannot erase data where the law requires us to keep it.

Right to restriction of processing

You have the right to ask us to restrict processing, for example while we verify the accuracy of your data or assess your objection.

Right to data portability

We will provide the data you have given us, and which we process on the basis of consent or a contract, in a machine-readable format.

Right to object

You can object at any time to processing based on our legitimate interest. We will then stop the processing unless we demonstrate compelling legitimate grounds for continuing it.

Right to withdraw consent

You can withdraw your consent to traffic measurement at any time using the Cookie settings link in the website footer. Withdrawal applies to the future and does not affect processing that took place before.

Right not to be subject to automated decision-making

You have the right not to be subject to a decision with legal effects concerning you that is based solely on automated processing, including profiling. We do not carry out any such decision-making or profiling on the website or in the Res Mea application. An identity verification result that does not match the data in the application is always reviewed by a person.

Right to lodge a complaint

If you disagree with how we handle your data, you can contact the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz. We would, however, appreciate the chance to resolve the matter with you directly.

Changes to this policy

We may amend this policy if the way we process data or the law changes. The current version is always on this page. This version is effective from 26 September 2026.