Version 1.2 · Effective 17 October 2026
This Privacy Policy explains which personal data Mountain Diary processes, why, on what legal basis, who receives it, how long we keep it and what rights you have. It applies to everyone who visits mountaindiary.com, whether or not they have an account.
In this policy, “Mountain Diary”, “we” and “us” mean the operator named in section 1, “you” means any visitor, and “member” means someone with an account.
At a glance
- Mountain Diary is a free community website run by one person in the Czech Republic. It carries no advertising today, and we never sell or rent your data.
- We use no analytics, advertising or social-media tracking. The website only stores what it needs to work, which is why it has no cookie banner.
- Everything you publish — adventures, photos, GPS tracks, questions, answers, partner requests, comments and your public profile — can be seen by anyone on the internet and found through search engines.
- The texts you publish are machine-translated into the other languages of the website by DeepL, a translation service in Germany.
- The website runs on servers in Germany. Where a service provider is in the United States, we rely on the safeguards described in section 5.
- You can close your account yourself at any time and decide whether your published content is deleted with it.
1. Who is responsible for your data
The controller of your personal data is:
Ing. Jiří Tůma, a self-employed natural person (sole trader) registered in the Czech Republic
Place of business: Prague, Czech Republic
Company ID (IČO): 04075226
Email: info@mountaindiary.com
We have not appointed a data protection officer, as the law does not require one for a service of this size and kind. For any question about your data, or to exercise your rights, write to info@mountaindiary.com. Further contact details are on the Operator & Contact page.
2. Legal bases in brief
We only process personal data where the EU General Data Protection Regulation (GDPR) allows it. The legal bases we rely on are:
- Contract (Art. 6(1)(b) GDPR) — to provide the service you signed up for or asked for: your account, publishing your content, the notifications you chose.
- Legitimate interests (Art. 6(1)(f) GDPR) — to keep the website secure and working, to prevent abuse and spam, and to establish or defend legal claims. We rely on this only where your interests and rights do not override ours, and you can object (section 9).
- Legal obligation (Art. 6(1)(c) GDPR) — mainly our duties under the EU Digital Services Act when we handle reports about content.
- Consent (Art. 6(1)(a) GDPR) — only where we say so below. You can withdraw consent at any time.
3. What we process and why
3.1 Visiting the website
When you open a page, your browser automatically sends our server technical information: your IP address, the date and time, the page requested, the page you came from, your browser and operating system, and whether the request succeeded. We use it to deliver the page, keep the website secure and stable, and track down errors.
The software we have written for Mountain Diary also writes short technical messages to the server’s error log so that we can find and fix faults. Where such a message concerns a member, it identifies the member only by an internal number (the member ID), not by name, email address or IP address. Messages about serious faults are also emailed to us.
- Legal basis: legitimate interests (a secure, working website).
- Retention: server logs, including the error log, are deleted automatically after 7 days; messages about serious faults are kept until the fault is fixed.
To keep the website fast, pages shown to visitors who are not logged in are kept in a cache on our own server. The cache holds the pages themselves, not information about you.
3.2 Security and protection against abuse
Our security software, Wordfence, checks incoming requests and login attempts to stop attacks, automated abuse and password guessing. For this it processes IP addresses, requested addresses, browser information, the usernames used in login attempts and the time of each event. Records of recent requests are kept for up to 30 days; an IP address that has been blocked is kept for as long as the block lasts. When a request is recognised as malicious, information about it, including the IP address, is shared with Wordfence’s provider, Defiant, Inc. (USA), as part of its security network, which uses it to protect our website and others.
Forms that bots often abuse — registration, login, password reset, publishing an adventure and reporting content — are protected by Cloudflare Turnstile, a service of Cloudflare, Inc. (USA). When such a form loads, Turnstile checks in the background whether a person is using it. To do so, Cloudflare processes your IP address and technical information about your browser, your device and how the page is used. According to Cloudflare, it uses this information only to run and improve the service, not for advertising. When you send the form, our server asks Cloudflare to confirm the result of the check and passes on your IP address.
Comments are checked for spam by software running on our own server (Antispam Bee). It compares the comment and the commenter’s email and IP address with local rules and sends nothing to third parties.
- Legal basis: legitimate interests (protecting the website, its members and their accounts; see also Art. 32 GDPR).
3.3 Maps
Adventure pages and some other pages show maps. The map images (“tiles”) are loaded by your browser directly from Mapy.com, a service of Seznam.cz, a.s., Prague, Czech Republic. Seznam.cz therefore receives your IP address, technical information about your browser and which part of the map is displayed, and it processes this information under its own privacy policy. When you click “Open in Mapy.com”, you leave Mountain Diary and the terms of Mapy.com apply.
- Legal basis: legitimate interests (showing routes and places on a map).
Weather and avalanche information shown with an adventure, and the map image of its route, are fetched by our server, not by your browser: the weather from Open-Meteo, the avalanche danger level from public avalanche warning services and the map image from Mapy.com. These requests contain at most the places, dates and route of the adventure, without its author’s name, and nothing about the person viewing the page. When you upload a GPS track, our server also asks Open-Meteo for the time zones along it, giving only approximate coordinates (to about 1 km).
3.4 Creating an account
To register, you give us a username, an email address and a password, and you agree to the Terms of Use and the Community Guidelines. We record when you agreed, the versions of these documents and of this policy in force at that time, the wording you agreed to and the language of the website. We then email you a link to confirm your address. Your password is stored only as a cryptographic hash, so we cannot read it. When you log in, WordPress records the session with your IP address, browser and login time so that you stay logged in; it removes expired sessions the next time you log in, and all of them are deleted with your account. A username, an email address and a password are the only details you must give us; without them we cannot create your account.
- Legal basis: contract.
- Retention: for as long as your account exists (section 8). Registrations that are never confirmed are deleted after 30 days.
3.5 Your profile
Your public profile shows your username and whatever else you choose to add: a profile picture, a cover image, your first and last name, your country, a short “About me” text, and links to your Instagram profile or website. All of this is optional. Your profile also shows information that follows from your activity on the website, for example your adventures and the countries they took place in.
You can hide your profile for a while in your profile settings. While it is hidden, nobody but you and us sees your profile or your adventures, questions and partner requests; you are left out of member lists and other members’ followers, and your comments are shown under the name “Hidden member”. You can still read the website, but you cannot post, comment, rate, follow or send messages, and nobody can follow you or write to you. Nothing is deleted: when you show your profile again, everything comes back. You can switch once a day. What has already left the website, such as emails, copies saved for offline use or screenshots, cannot be called back.
- Legal basis: contract.
3.6 What you publish
Adventures. An adventure contains a title, text, dates, the type of activity, difficulty, country and region, photos with their captions and, if you add one, a GPS track (GPX file). From the track we create the route map, the elevation profile and a map image, and we add the weather conditions and the avalanche danger level for the place and date.
Community. Questions, answers, votes and “solved” marks in Gear & Advice; partner requests in Find a Partner (activity, level, place and date range); and comments. In Gear & Advice, your questions and answers, the votes your questions receive and your solved questions earn points, which are shown publicly as a badge (Newcomer, Contributor or Expert).
Everything you publish is public: anyone can see it, with or without an account, and search engines can index it. Drafts are visible only to you and to us. New adventures may be checked by us before they appear publicly; this check looks only for spam and abuse (see the Terms of Use). Once three of your adventures have been published, your new ones appear without this check, unless we switch that off.
Photos. When you upload a photo, we read the location that your camera or phone stored in it and keep the coordinates in our database. We use them only to place the photo on the map of your adventure, and only if the photo was taken within the area of your GPS track: the rectangle that the track covers, plus about 2 km around it; photos taken elsewhere are not placed on the map. We then convert the photo into the versions shown on the website. These contain no camera metadata — no location, no camera model and no time of capture — and their file names do not contain the original name of your file. The file you uploaded is kept on our server, without being shown anywhere, until you save the adventure; the conversion then runs and the uploaded file is deleted, usually within minutes. Photos that you upload but never use in a saved adventure are deleted after 48 hours.
GPS tracks. A GPX file records your exact route and usually the time at each point. The route is shown on the map, and anyone can download a cleaned copy of the track with the route, the named waypoints and the times; we remove device data, health data such as heart rate, and your contact details from it. If your recording starts or ends near your home or another place you would rather keep private, trim it before uploading. GPS tracks that you upload but never use in a saved adventure are deleted after 7 days.
- Legal basis: contract (you ask us to publish your content).
- Retention: until you delete it, or until your account is closed if you choose to have your content deleted (section 8).
3.7 Translation
To make Mountain Diary readable in English, Czech and German, the titles and texts of adventures, questions and partner requests, photo captions and comments are sent to DeepL SE (Cologne, Germany) for machine translation; DeepL also recognises which language a new text is written in. A comment is sent as soon as it is posted, unless it has been marked as spam or rejected because it contains words we do not allow. DeepL processes these texts on our behalf. We use DeepL’s free plan (DeepL API Free), under DeepL’s terms for that plan. DeepL’s commitment not to keep texts after translating them and not to use them to train its models applies to its paid plan, not to ours. Translations are published next to your original and are marked as machine translations, and readers can always switch to the original.
- Legal basis: contract (publication in all languages of the website is part of the service; see the Terms of Use).
- Retention: translations are deleted together with the original.
3.8 Following, notifications and private messages
When you follow another member, we store that connection. We notify you on the website about new adventures by members you follow, comments on your adventures and new followers; new adventures and comments can also be sent to you by email if you allow it. These emails are written in the language in which you last used the website. You hear of each new adventure once; if it is written in another language, the email waits for its translation into your language, but at most two days. You can switch each type of notification off in your profile settings; every notification email links to them. If you subscribe to replies in a discussion, every email contains a link to unsubscribe.
Private messages are stored on our server and are visible to the members taking part in the conversation. We do not read them. The administrator can technically access them, and we will do so only where it is necessary to deal with a report of abuse or to comply with the law.
- Legal basis: contract.
- Retention: follows and notification settings for as long as your account exists; private messages until you delete them or your account is closed. The members you wrote to keep their copy of the conversation; after your account is closed, your messages in it are shown as sent by “Former member”.
3.9 Emails we send
We only send emails that belong to the service: confirming your registration, resetting your password, closing your account, the notifications you have chosen, discussion subscriptions, decisions about your content (section 3.12) and replies to your messages. We do not send newsletters or marketing. Our emails are delivered by ZeptoMail, a service of Zoho Corporation B.V. (the Netherlands), from its data centre in the European Union. We keep a log of sent emails (recipient, subject, content, time and delivery status) for 14 days so that we can detect delivery problems.
- Legal basis: contract; legitimate interests for the log.
3.10 When you write to us
Email sent to addresses at mountaindiary.com is received by ImprovMX (ImprovMX Inc., USA, with servers in the EU and the USA) and forwarded to our mailbox at Seznam.cz, a.s. (Czech Republic). We use your message and contact details to answer you. We keep correspondence for as long as we need it to deal with your request, and afterwards for up to 3 years where it may be needed to establish or defend legal claims.
- Legal basis: legitimate interests (answering you; legal claims); contract where your message concerns your account.
3.11 Comments
Only members who are logged in can comment. Visitors without an account can read comments but cannot write them. When you comment, we process the comment itself, which is shown publicly with your member name. It is machine-translated into the other languages of the website (section 3.7). WordPress also stores your IP address and browser information with every comment; we use them to fight spam and abuse. When you rate an adventure or vote on a comment, the comment software, wpDiscuz, stores the rating or vote with your member ID and may also store your IP address with it.
- Legal basis: contract (publishing your comment); legitimate interests (preventing spam and abuse).
- Retention: comments until they are deleted; comments identified as spam are deleted after 30 days; the IP address and browser information stored with a comment are deleted 30 days after it was submitted, and any IP address stored with a rating or vote 30 days after it was given; ratings and votes themselves are kept until your account is closed.
3.12 Reports about content and moderation
Anyone can report content they believe is illegal or breaks our rules. If you send a report, we process your name and email address, the address of the reported content, the reason you chose and your explanation. To protect the Report Content form against floods, we count the reports sent from each IP address within an hour; for this we keep only a cryptographic hash of the address, for one hour. We confirm that we received it, review it and tell you our decision. We do not tell the author who reported their content, unless this is strictly necessary — for example when someone claims that content infringes their copyright — or the law requires it.
If a decision affects your content or your account, we process the report, the content concerned and our reasons, and we send you a statement that explains the decision and how you can challenge it.
- Legal basis: legal obligation under the EU Digital Services Act; legitimate interests (keeping the community safe; handling appeals and legal claims).
- Retention: 3 years after the case is closed.
3.13 Saving adventures for offline use
If you save an adventure for offline use, your browser stores a copy of the page, its photos and its GPS track on your device. The copy never leaves your device, and we are not told what you saved. You can remove saved adventures on the “My offline adventures” page or by clearing your browser’s data.
3.14 Backups
We back up the database and all uploaded files every day so that we can restore the website after a failure. Backups are kept only with our hosting provider, Hetzner: as daily copies of the database on our server, in the server backups in Germany and in a separate backup storage in Finland. Before a major update of the website’s software, we also make an extra copy of the database on our server so that the update can be undone; this copy is deleted after 7 days. Every other copy is replaced after 7 days, so data you delete disappears from all backups at the latest 14 days after you delete it. We use backups only to restore the website.
- Legal basis: legitimate interests (keeping the service and your content safe; see also Art. 32 GDPR).
3.15 How we build and maintain the website
We use software tools, including AI-assisted development tools, to build and maintain Mountain Diary. These tools work with the website’s code and configuration. We do not use them to process members’ personal data or to analyse or profile anyone, and when we test or measure the website we work with totals and technical structure rather than with individual members’ records.
We try out every change on a separate test copy of the website, on our own server in Germany, before it goes live. The test copy is protected by a password and hidden from search engines, and it may contain a copy of the website’s data. When we make such a copy, we anonymise the members’ data in it, including names, email addresses, IP addresses, private messages and comments, and delete GPS tracks that belong to no adventure, whether never used in one or left by a deleted one; adventures, questions and partner requests, drafts and hidden ones included, stay in the copy with their photos, the photos’ locations and their GPS tracks, under the anonymised names. The test copy sends email only to our own test addresses and holds back all other email; for those, it records only how many recipients there were, never who they were.
- Legal basis: legitimate interests (a secure, working website: trying out changes before they go live).
3.16 If you appear in someone else’s content
Members may publish photos or texts in which other people appear or are mentioned. Members must have your consent for recognisable photos of you (Community Guidelines, section 3). If you find a photo of yourself, or information about yourself, on Mountain Diary that you do not want published, report it using the Report Content page or write to info@mountaindiary.com, and we will deal with it as described in section 3.12. This applies whether or not you have an account. To handle your request we process the content concerned and the details you give us.
- Legal basis: legal obligation (Digital Services Act) and legitimate interests (protecting the rights of the people concerned).
4. Who receives your data
We do not sell, rent or trade personal data, and we do not share it with advertisers or data brokers. Personal data is received by:
- Other members and the public — everything you publish, as described in section 3.6.
- Service providers that help us run the website. Each receives only the data it needs for its service and may use it only to provide that service to us:
| Provider | What it does for us | Data | Where |
|---|---|---|---|
| Hetzner Online GmbH, Gunzenhausen, Germany | hosts the website and stores its backups | all data stored on the website | Germany; backups also in Finland |
| Zoho Corporation B.V., the Netherlands (ZeptoMail) | delivers the emails we send | email address, username, content of the email | EU data centre |
| DeepL SE, Cologne, Germany | machine translation | texts you publish, including photo captions and comments | EU |
| Cloudflare, Inc., San Francisco, USA | bot protection on forms (Turnstile) | IP address, browser and device information | USA and other countries |
| Defiant, Inc. (Wordfence), USA | security threat intelligence | IP address and details of malicious requests | USA |
| ImprovMX Inc., Dover, Delaware, USA | receives and forwards email sent to us | your email address and message | EU and USA |
| Seznam.cz, a.s., Prague, Czech Republic | our email mailbox | your email address and message | Czech Republic |
- Seznam.cz, a.s. as a separate controller of the map tiles your browser loads from Mapy.com (section 3.3).
- Mapy.com, Open-Meteo and public avalanche warning services, which our server asks for map images, weather, time zones and avalanche danger: they receive at most the places, dates and routes of adventures, without their authors’ names (section 3.3).
- Authorities, only where the law requires it — for example courts, the police or the Czech Digital Services Coordinator. If we become aware of information giving rise to a suspicion that a criminal offence threatening someone’s life or safety has taken place, is taking place or is likely to take place, we must inform the competent authorities (Art. 18 Digital Services Act).
- A successor operator. If Mountain Diary is ever transferred to another operator — for example to a company set up to run it — your data and content will be transferred so that the service can continue. We will tell you in advance, and you can close your account before the transfer takes effect.
5. Transfers outside the European Union
The website and its database are hosted in Germany. Some providers listed in section 4 are based in the United States or may process data there:
- Cloudflare, Inc. is certified under the EU–US Data Privacy Framework, for which the European Commission has decided that it ensures an adequate level of protection. Its data processing terms also include the EU Standard Contractual Clauses.
- Defiant, Inc. (Wordfence) — transfers are based on the EU Standard Contractual Clauses that form part of its terms.
- ImprovMX Inc. — processes email on servers in the EU and the USA. It is not certified under the Data Privacy Framework, so transfers are based on the EU Standard Contractual Clauses in our data processing agreement with it.
You can ask us for a copy of these safeguards at info@mountaindiary.com.
6. Cookies and similar technologies
Mountain Diary stores information on your device only where this is necessary for the website to work or for a feature you use. We do not use cookies or similar technologies for analytics, advertising or tracking you across websites, and no third party places such cookies through our website. Because everything listed below is strictly necessary for the service you request, the law does not require your consent for it, and so we do not show a cookie banner.
| Name | Type | Purpose | Used for | How long |
|---|---|---|---|---|
wordpress_logged_in_…, wordpress_sec_… | cookie | keep you securely logged in | members | end of the browser session (at most 2 days), or 14 days with “Remember me” |
wordpress_test_cookie | cookie | check that your browser accepts cookies before you log in | login | end of the browser session |
wp_lang | cookie | remember the language you chose on the WordPress login screen | login | end of the browser session |
wfwaf-authcookie-… | cookie | let the firewall recognise logged-in members | members | 12 hours |
wf_loginalerted_… | cookie | avoid repeated security alerts for a known device | administrators | 1 year |
wp-settings-…, wp-settings-time-… | cookie | remember the layout of the administration screens | members who use them | 1 year |
bp-message, bp-message-type | cookie | show a one-time confirmation after an action | members | until the message is shown |
pll_language | cookie | remember the language of the website | everyone | 1 year |
md_lang_mode, md_lang_detected | local storage | note that you chose the language yourself, for an older version of the website that switched the language on a first visit | everyone | until you clear it |
kirkiMode | local storage | remember light or dark display mode | everyone who uses the switch | until you clear it |
md_maint_lang | local storage | remember the language of the maintenance page | everyone | until you clear it |
md_adventure_draft_describe | local storage | keep a backup of the adventure text you are writing, in case the page is closed by mistake | members writing an adventure | until you publish or save it |
md-offline-adventure-… | cache storage | copies of adventures you saved for offline use (section 3.13) | members who use the feature | until you remove them |
/md-service-worker | service worker | make saved adventures available offline | everyone | until you clear the site’s data |
Until 17 October 2026, the backup of the adventure text and the offline copies were stored under the names md_trip_draft_describe and md-offline-trip-…. The website moves what your device keeps under the old names to the new ones; nothing is sent to us.
Cloudflare Turnstile runs inside a frame loaded from challenges.cloudflare.com and does not set cookies for mountaindiary.com. Map tiles are loaded from Mapy.com as described in section 3.3.
You can delete cookies and stored data at any time in your browser settings. If you block them, logging in and some features will not work.
7. How long we keep your data
| Data | How long |
|---|---|
| Account: username, email address, password hash, profile, settings, record of the Terms you accepted | until your account is closed; closure takes effect 7 days after you request it |
| Content you publish and its translations | until you delete it; on closure of your account, depending on your choice (section 8) |
| Server logs, including the error log | 7 days; messages about serious faults until the fault is fixed |
| Security records (Wordfence) | up to 30 days; blocked IP addresses for the duration of the block |
| Unconfirmed registrations | 30 days |
| IP addresses and browser information of commenters, and IP addresses stored with ratings and votes | 30 days after the comment, rating or vote |
| Ratings and votes | until the account is closed |
| Comments marked as spam | 30 days |
| Private messages | until you delete them or your account is closed; the other member keeps their copy, shown as sent by “Former member” |
| Log of emails we sent | 14 days |
| Correspondence with us | as long as needed, then up to 3 years |
| Reports and moderation decisions | 3 years after the case is closed |
| Records of deletions: member ID, time and option chosen for a deleted account; internal numbers and file names of deleted content | up to 3 years |
| Backups | at most 14 days after you delete the data; each copy is replaced or deleted after 7 days |
| Data stored in your browser | see section 6 |
We keep data longer only where the law requires it or where it is needed for a specific legal claim, and only for as long as that lasts.
8. Closing your account
You can close your account yourself on the Edit profile page. The closure takes effect 7 days after you request it; until then you can change your mind. You decide what happens to your content:
- Keep my content. Your account, your profile, your email address and your other personal data are deleted. The adventures, questions, answers and partner requests you published stay on the website together with their photos and GPS tracks, but they are no longer linked to you: they are shown under the name “Former member”, without any link to a profile. Your comments stay too, but without your name. If a photo that stays online shows you, you can still ask us to delete it at any time. If your profile is hidden when your account is closed, this content stays hidden.
- Delete everything. Your account and everything you published — adventures with their photos and GPS tracks, questions, answers, partner requests and comments — are deleted, together with their translations.
In both cases, copies disappear from our backups within 14 days. We keep a short record that your account was deleted — its internal number, the time and your choice, with the internal numbers and file names of what was deleted with it — for up to 3 years, as proof that we deleted it. We do the same when we delete an account ourselves. Private messages you sent stay in the conversations of the members you wrote to, shown as sent by “Former member”. Adventures that other members have saved for offline use stay on their devices until they remove them; we have no way of deleting them.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- rectification of inaccurate data — you can correct most of your profile yourself;
- erasure — you can close your account yourself (section 8) or ask us to delete specific data;
- restriction of processing, for example while we check a complaint;
- data portability — to receive the data you gave us in a structured, commonly used, machine-readable format;
- object to processing based on our legitimate interests, on grounds relating to your particular situation;
- withdraw your consent at any time where processing is based on consent, without affecting processing that took place before.
To exercise your rights, write to info@mountaindiary.com, ideally from the email address linked to your account. We may ask you to confirm your identity. We will reply within one month; where a request is complex we can extend this by up to two further months and will tell you why. Exercising your rights is free of charge.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work or where you believe your rights were infringed. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7. We would appreciate the chance to address your concern first.
10. Age limits
Mountain Diary is intended for people aged 16 and over, and Find a Partner is only for adults (18+); when you post a partner request, you confirm that you are 18 or older, and we keep the time of that confirmation with the request for as long as it exists. We do not knowingly collect personal data from children under 16. If we learn that an account belongs to someone under 13, we delete it without delay; the accounts of other users below the minimum age are closed under the Terms of Use. If you believe a child has created an account, please tell us at info@mountaindiary.com.
11. How we protect your data
We protect personal data with technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS) for all pages, passwords stored only as hashes, protection against automated attacks and password guessing, hosting in a professional data centre in the EU, restricted and protected access to the administration, regular software updates and daily backups. If a personal data breach occurs that is likely to put your rights at risk, we will notify the Office for Personal Data Protection within 72 hours of becoming aware of it, and if the risk to you is high, we will also inform you without undue delay.
12. Automated decisions
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you (Art. 22 GDPR). Some protective steps run automatically: bot checks on forms, spam filtering of comments, blocking of malicious traffic, and temporarily hiding content that several members have reported until a person reviews it. Every decision about your content or your account is taken by a person, and you can challenge it as described in the Terms of Use.
13. Users outside the European Union
United Kingdom. You have the same rights under the UK GDPR as described above, and you can complain to the Information Commissioner’s Office (ICO).
United States. We do not sell personal information and do not share it for targeted (cross-context behavioural) advertising. We use no tracking technologies, so there is nothing for signals such as Global Privacy Control or Do Not Track to switch off. Wherever you live, you can use the rights described in section 9.
14. Changes to this policy
We will update this policy when the website or the law changes. The version and the date it takes effect are shown at the top. If we make significant changes, we will tell members in advance by email and with a notice on the website. Previous versions are available on request.
15. Contact
Questions, requests and complaints about privacy: info@mountaindiary.com. We reply in English, Czech and German.