1. Who the controller is
The data controller is Hexenkraft s.r.o., company ID 29665931, registered office at V zahradách 2462/31, 180 00 Prague 8. The contact email for all data protection matters is in the footer of this site.
The company is not required to appoint a data protection officer and has not appointed one. Enquiries are handled directly by the company's managing director.
2. The law we follow
We follow Regulation (EU) 2016/679 (the GDPR) and Act No. 110/2019 Coll. on personal data processing. The supervisory authority is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.
3. What we collect and what we do not
From the form: first name, surname, email, phone, the chosen subject and an optional note. It is the condition of our being able to reply.
We do not collect birth numbers, identity document numbers, or details of income, assets, debts, trading accounts or health. We never ask for them and we ask you not to put them in the note either. We process no special categories of data under Article 9 of the GDPR and we carry out no automated decision-making or profiling.
No payment is taken on this site, so we process no payment data. The site has no user accounts and no login.
4. Purposes, legal bases and retention
Answering an enquiry. Basis: steps taken at the request of the data subject before entering into a contract, or legitimate interest in dealing with the question. Retention: at most six months from the last communication where no contract follows.
Performing a course contract. Basis: performance of a contract. Retention: for the term of the contract and then for the limitation periods.
Accounting and tax. Basis: compliance with a legal obligation. Retention: as required by the Accounting Act and the VAT Act, that is 10 years for tax documents.
Audience measurement and advertising. Basis: your consent. Retention: per the table in the cookie policy, at most 13 months. Consent can be withdrawn at any time; withdrawal does not affect the lawfulness of processing before it.
5. Who the data goes to
To the hosting and email providers as processors under contract. To the accountants, to the extent needed for bookkeeping. To public authorities where the law requires it.
We do not sell the data from the form, we do not pass it to advertising networks, and we do not add you to any marketing list on the strength of it.
If you consent to advertising cookies, the platforms concerned process data about your visit as controllers in their own right under their own policies. Some of them process data outside the European Economic Area; those transfers rely on standard contractual clauses or an adequacy decision. If you would rather they did not, reject the advertising category and nothing is sent.
6. Your rights
You have the right of access and to a copy, to rectification of inaccurate data, to erasure, to restriction of processing, to portability of data processed on the basis of consent or a contract, and to object to processing based on legitimate interest. You may withdraw consent at any time.
Send the request to the contact email. We deal with it within one month; in complex cases the period may be extended by a further two months, and we will tell you if that happens. We verify your identity before disclosing or erasing data, so that nobody else can obtain or delete it by asking.
If you are not satisfied with how we handled it, you may complain to the Office for Personal Data Protection.
7. Security and storage in your browser
The site is served over HTTPS only and form data travels over an encrypted connection. The site holds no database of participants, because it has no member area and no login.
The site can be added to your device's home screen, and your browser then keeps a copy of the pages, styles and images so they work without a connection. That copy contains no personal data, no form content and no confirmation page. The details are in the cookie policy.
8. Children
The course and this website are intended for people over 18. We do not knowingly process children's data. If we find that we have received such data, we delete it.
9. Changes to this policy
We may update this policy. We will announce any substantial change on this page together with the date it takes effect. Earlier versions are available on request.