1. Who is responsible for your information
The entity responsible for personal information handled in connection with this site is:
- L&P Company s.r.o.
- Rýmařovská 433, Letňany, 199 00 Praha 9, Czech Republic
- Company number: 21180822
- VAT number: CZ21180822
- Email: info@crestspace.online
L&P Company s.r.o. publishes crestspace.online and decides how and why any personal information described below is handled. Enquiries about this policy go to the email address above.
2. What is actually collected
This site has no forms: no contact form, no newsletter sign-up, no search box, no comment section, no account and no chat widget. There is nothing on any page you can type information into, so the site collects nothing directly from you.
It also sets no cookies, and no third party sets cookies through it — no analytics, no advertising tag, no conversion pixel, no A/B tool, no social embed, no session identifier. Nothing is written to your browser’s local storage, session storage or IndexedDB, and no fingerprinting is performed. The cookie policy has the detail.
Three categories of information nonetheless exist, and they are these and nothing else.
- Server logs. The hosting provider engaged by L&P Company s.r.o. records ordinary web server logs when a page is requested: the IP address, the browser user agent string, the URL requested, the referring URL where the browser sends one, and the date and time. These are generated automatically and are common to essentially all hosted websites.
- Font requests. The two typefaces used in this site’s design are served by Google Fonts, so your browser requests those files from Google’s servers and Google receives your IP address and user agent in order to answer. No cookie is set. Section 5 covers this further.
- Email you choose to send. If you write to info@crestspace.online, we receive your email address, whatever you put in the message, and the ordinary technical headers that accompany any email.
Nothing else is collected, and no personal information is bought, sold, rented or obtained from any data broker.
3. Why each category is handled, and on what basis
- Server logs are kept for security and diagnostics: identifying attempted attacks, investigating errors, and confirming the site is reachable. Under the Australian Privacy Principles the basis is that this is reasonably necessary for the ordinary operation and security of the site; where the EU or UK GDPR applies, the basis is legitimate interests under Article 6(1)(f).
- Font requests occur because the site’s design uses those typefaces. The information Google receives is what is technically necessary to serve a file to your browser.
- Email is handled solely to read and answer your message, and to check and amend a page where you report a correction. Nothing is added to any mailing list, because this publisher does not operate one.
None of it is used for profiling, automated decision-making, advertising, or building any picture of an individual reader — nor could it be, since no identifier ties one page request to another.
4. How long each category is kept
- Server logs: retained for 30 days, then deleted by the hosting provider. A log entry forming part of an active security investigation may be kept for up to 12 months from the incident, then deleted.
- Font requests: no record is retained by L&P Company s.r.o. at all, because the request goes to Google and not to this publisher. Google’s own retention is governed by its policy, linked in section 5.
- Email correspondence: retained while the enquiry is open and for 24 months afterwards, so a related follow-up can be understood in context, then deleted. Correspondence that must be kept longer under Czech accounting or legal obligations is retained only for the period those obligations require.
5. Who your information is disclosed to, including outside Australia
Two third parties are involved, and no others.
The hosting provider. The company hosting crestspace.online operates the servers holding the site and generating the logs described above, and handles that information on this publisher’s instructions and for no purpose of its own.
Google. Because the site loads its typefaces from Google Fonts, your browser contacts Google’s servers directly when a page loads, and Google receives your IP address and user agent as part of that request. Google sets no cookie in connection with it. Google’s handling of that information is governed by its own privacy policy.
Cross-border disclosure under Australian Privacy Principle 8. L&P Company s.r.o. is established in the Czech Republic, its hosting is provided outside Australia, and Google operates servers in a number of countries. If you are in Australia, personal information described in this policy — principally your IP address in a server log or a font request, and the content of any email you send — is therefore disclosed to recipients located outside Australia, including in the European Economic Area and the United States. By using this site or writing to the address above, you should understand that this disclosure occurs and that overseas recipients may not be subject to the Australian Privacy Principles or to a law substantially similar to them.
No information is disclosed to advertisers, data brokers, analytics providers or social networks, because none are used. Information would be disclosed to a law enforcement or regulatory body only where the publisher is legally required to do so.
6. How the information is protected
The site is served over HTTPS, so traffic between your browser and the server is encrypted in transit. Administrative access to the hosting environment and the email account is limited to the publisher and protected by unique credentials and multi-factor authentication. Because the site collects nothing and holds no database of readers, there is no store of personal information here to be lost — a deliberate choice rather than an accident.
7. Your rights, and how to exercise them
Under the Australian Privacy Principles you may ask for access to the personal information held about you, and ask for it to be corrected if it is inaccurate, out of date, incomplete or misleading.
The route is:
- Write to info@crestspace.online setting out what you are asking for. In practice the only information likely to exist is an email you sent and any server log entry still within its retention period.
- A response will be provided within 30 days. If access is refused, the reason will be given in writing.
- If you are not satisfied, you may complain to the Office of the Australian Information Commissioner, which handles privacy complaints in Australia, at oaic.gov.au.
8. Notifiable data breaches
If a data breach occurs that is likely to result in serious harm to any individual whose personal information is involved, L&P Company s.r.o. will assess it promptly and, where the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth) requires, notify the affected individuals and the Office of the Australian Information Commissioner.
9. Children
This site is not directed at people under 16 and does not knowingly collect personal information from them. It has no forms, no accounts and no means of collecting anything from a reader of any age. Games and younger players are discussed on step six, which points to the Australian Classification Board and the eSafety Commissioner.
10. If the EU or UK GDPR applies to you
L&P Company s.r.o. is established in the Czech Republic, so where the EU General Data Protection Regulation or the UK GDPR applies, so does the following.
The basis relied on for server logs is legitimate interests under Article 6(1)(f): keeping the site secure and diagnosing faults. No consent basis is relied on, because the site sets no cookies and performs no tracking, so there is nothing consent would be required for. Email is handled on the basis of legitimate interests in answering the enquiry you chose to send.
You have the rights of access, rectification, erasure, restriction, portability and objection to processing carried out on the basis of legitimate interests. Requests go to info@crestspace.online. You may also complain to a supervisory authority — in the Czech Republic the Office for Personal Data Protection, otherwise the authority where you live.
11. Changes to this policy
If this policy changes, the revised version is published here with a new effective date at the top and the footer review date is updated. A material change — introducing any form of tracking, for example — would be accompanied by a matching update to the cookie policy and, where consent were required, a working consent mechanism in place before anything was set. No such change is planned. Because nothing is collected, there is no mailing list through which to announce one: this page is the notice.