$ audit --gdpr https://your-site.cz
We check your site before ÚOOÚ does
The Czech data protection authority (ÚOOÚ) inspects websites periodically, and without notice. Where it finds something out of line, a substantial fine follows.
The audit goes through your site, checks it and points the problems out first — while you still have the chance to put them right.
Up to 15 pages free, more by arrangement.
Would you rather skip the detail?
I want a GDPR audit ↓What the audit covers
The audit is done from the customer’s side, that is “from the outside”. We read the pages’ code and establish whether refusing consent, or giving only partial consent, works as Section 89(3) of Act No. 127/2005 Sb., on electronic communications, requires.
We also check whether consent can be withdrawn.
A frequently overlooked point is that the site calls third-party scripts without ever asking the visitor whether it may.
We read your privacy policy too, and tell you whether it matches what the site actually does.
You get the resulting report as a PDF, usually within a week of asking.
What the law says
The most common failings are these.
Cookies are not in the first place a GDPR matter
They fall under Section 89(3) of Act No. 127/2005 Sb., on electronic communications. Since 1 January 2022, whoever stores data on a visitor’s device or reads data from it must have demonstrable consent beforehand. The provision covers data that are not personal as well — so “we collect nothing personal” is beside the point here.
The exemption is narrower than people expect
Only what serves solely to transmit a message, or is strictly necessary for a service the visitor explicitly asked for, may run without consent. Traffic measurement does not qualify, and neither does an advertising pixel.
Fines for letting it slide
A non-technical cookie without consent breaches the lawfulness principle in Art. 5(1)(a) GDPR. That is an offence under Section 62(1)(b) of Act No. 110/2019 Sb., and the penalty is set under Art. 83(5) GDPR — from a range of up to 20 million euro or 4 % of worldwide turnover. And it is an avoidable mistake, caused by nobody taking care of the site itself.
Consent must be as easy to withdraw as it was to give
Art. 4(11) and Art. 7 GDPR. A banner with no equally prominent refusal, pre-ticked categories, or a button that merely hides the question do not meet that condition.
What can happen to you
A few facts. We will gladly run the audit for you — get in touch by filling in the form below.
120+
written warnings ÚOOÚ sent to site operators before it started issuing fines.
4 443 000 CZK
in cookie fines, which the authority reported in August 2023.
898 000 CZK
the largest single fine — for marketing cookies loaded without the visitor’s consent.
A cookie-banner tool does not necessarily mean compliance
The company in decision ref. UOOU-02808/22-7 had CookieBot (an external component) in place. It was configured wrongly: non-technical cookies were set before any choice was made, a marketing cookie was listed as technical, and the cookies were valid for two years. It did not avert the fine.
Our audit measures what your site does, whatever tool it may have.
What you get
A report as PDF
The findings ordered by severity, each with the provision it belongs to. A document you can pass on — to a director, say, or to whoever looks after your site.
Split into proven and to be verified
What we demonstrably measured, and what has to be checked separately (whether a particular cookie really is necessary, for instance — that is internal to how the site is built).
No obligation and no conditions
The audit is free for up to 15 pages of the site and there is nothing behind it. It creates no commitment on either side. It is there for your information.
What the audit cannot do
It goes through the site. It sees only what a visitor’s browser sees — not what the code does on the server, not how you handle the e-mails from your forms, and so on. And it is not legal advice: it says what the site does and which provision that belongs to.
I want an audit of my site
Fill in the form and we will get back to you.