Privacy Policy
Last updated: 2 November 2026
1. Who I am
The controller of your personal data is Mgr. Linda Jelínková, a self-employed person registered in the Czech Trade Register.
- Address: Trávnická 186, 517 41 Kostelec nad Orlicí, Czech Republic
- ID number (IČO): 21291128
- E-mail: [email protected]
- Phone: +420 773 951 922
I have not appointed a data protection officer.
2. What data I process and why
Lessons and your lesson page
When you take lessons with me, I process your name, e-mail, the dates and status of your lessons (completed, scheduled, cancelled), your lesson packages and your learning progress. I use this data to provide the lessons and to show you your overview on your personal lesson page.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Your student account
To sign in to your lesson page or to the Advent Calendar, you have an account with your e-mail and a password. I store the password only as an irreversible hash, so nobody – not even me – can read it. Your first and last name are optional. For security, I keep a record of sign-in attempts and password-link requests, and I send you an e-mail when your password or e-mail address is changed.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and my legitimate interest in keeping your account secure (Art. 6(1)(f) GDPR).
Advent Calendar
When you buy the Advent Calendar, I set up access to it in your account. If you already have a student account under the same e-mail address, the calendar is added to it; otherwise, a new account is created for your e-mail address and you set your own password through a one-time link. While you use the calendar, I store the notes you write in its windows, so that you can return to them later. Until your access ends, you can download your notes as a PDF file. If you are also my student, your notes are moved to your lesson page after the calendar ends, so that we can build on them in our lessons. Other users cannot see your notes; I look at them only if needed for support or to solve a technical problem.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Lesson booking
Lessons are booked through Google Calendar. When you book, Google shares your name and e-mail with me and adds the lesson, including the Google Meet link, to my calendar. I use your e-mail from the booking to recognise which lesson page is yours when you ask for a password link.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Orders and invoices
When you buy lessons or digital materials, I process your billing details: name, e-mail, address, company ID if provided, and the details of your order and payment. I use them to issue proforma invoices and invoices and to keep tax records. When you buy an e-book, your name, e-mail and order number are also printed in the PDF file, to protect it against unauthorised sharing.
Legal basis: performance of a contract and compliance with my legal obligations under Czech tax and accounting law (Art. 6(1)(b) and (c) GDPR).
When you buy digital content, I keep a record (date, time and wording) of your consent to immediate delivery and your acknowledgement that you lose your right of withdrawal. If you withdraw from a contract or make a complaint, I process your name, e-mail, order details and your request in order to deal with it.
Legal basis: compliance with my legal obligations and my legitimate interest in being able to prove how a contract was concluded and handled (Art. 6(1)(c) and (f) GDPR).
Messages and trial lesson requests
When you write to me through a form on this website, I process your name, e-mail, the topic and the content of your message. The message is stored securely and forwarded to my e-mail so I can reply to you.
Legal basis: steps taken at your request before entering into a contract, or my legitimate interest in answering your enquiry (Art. 6(1)(b) and (f) GDPR).
News and updates
If you tick “Sign up for news and updates”, I store your e-mail and name to send you occasional news about my lessons and materials. If you sign up on the Advent Calendar page, I use your e-mail (and first name, if you give it) to send you my newsletter: news about the Advent Calendar (including when it goes on sale), my e-books, lessons and tips for learning Czech. You can unsubscribe at any time by replying to any of these e-mails or writing to me.
Legal basis: your consent (Art. 6(1)(a) GDPR). Withdrawing consent does not affect processing before the withdrawal.
Feedback and reviews
When you fill in the feedback form on your lesson page, I use your answers to improve my lessons. If you agree, I publish your review on this website with your first name and country, or anonymously if you choose so.
Legal basis: my legitimate interest in improving my lessons (Art. 6(1)(f) GDPR); publication only with your consent (Art. 6(1)(a) GDPR).
Service e-mails
I send you service e-mails: links to set your password, security notices, a reminder when your lesson package is almost used up, and, when you buy the Advent Calendar, an e-mail with your order confirmation and a link to set your password, reminders about the calendar (for example when window 1 opens) and a reminder before your access ends.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Website
When you visit this website, the hosting provider processes technical data such as your IP address and browser information to deliver the website and protect it against attacks. I use privacy-friendly visitor statistics without cookies, which do not identify you.
Legal basis: my legitimate interest in operating a functional, secure website (Art. 6(1)(f) GDPR).
3. Who processes the data for me
I use these service providers (processors), which process data only on my instructions:
- Cloudflare, Inc. – website hosting, security and cookie-free visitor statistics
- Supabase, Inc. – database for student accounts, lesson overviews, orders, messages, reviews, and Advent Calendar accounts and notes; servers in the EU (Frankfurt, Germany)
- Resend – sending e-mails from this website (password links, notices, form messages, order confirmations and password links)
- Fakturoid s.r.o. (Czech Republic) – invoicing
- Comgate, a.s. (Czech Republic) – online payments for e-books and digital products; your card details are entered only on Comgate’s secure payment page and I never see them
- Google Ireland Ltd. / Google LLC – calendar and lesson booking, Google Meet, shared lesson materials in Google Drive, e-mail
Some of these providers are based in the USA. Data transfers to them are covered by the EU–US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
I do not sell your data and I do not share it with anyone for their own marketing.
4. How long I keep your data
- Invoices and payment records: for the period required by Czech tax and accounting law (up to 10 years).
- Student account and lesson data: for the duration of our cooperation and up to 3 years after your last lesson.
- Advent Calendar: your notes, and accounts created only for the calendar, are deleted by 28 February 2027 (access to the calendar ends on 31 January 2027). If you are also my student, or have become one in the meantime, your account stays and your calendar notes are kept on your lesson page like your other lesson data. Invoices and payment records are kept as stated above.
- Records of consent to immediate delivery, withdrawals and complaints: for as long as the related invoice is kept.
- Security records (sign-in attempts, password-link requests): up to 12 months.
- Messages and enquiries: as long as needed to deal with your request, and no longer than 3 years.
- News and updates: until you unsubscribe.
- Published reviews: until you ask me to remove them.
5. Cookies and data stored in your browser
This website does not use cookies for tracking or advertising, and the visitor statistics work without cookies.
Your browser stores two things locally (local storage): your sign-in, so you stay signed in to your lesson page or the Advent Calendar until you sign out, and the billing details you entered in the order form, so you don't have to fill them in again. This data stays on your device; you can delete it by signing out or clearing your browser data.
Embedded content – the Google booking calendar on your lesson page – is provided by Google, which may use its own cookies according to the Google Privacy Policy.
6. How I protect your data
The website runs only over an encrypted connection (HTTPS). Passwords are stored only as an irreversible hash, every user sees only their own lesson page and calendar notes, and access to the data is limited to me.
7. Your rights
Under the GDPR you have the right to:
- access your personal data,
- have inaccurate data corrected – you can change your name and e-mail yourself under “My account”,
- have your data erased, unless I am required by law to keep it,
- restrict the processing of your data,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time.
To exercise any of these rights, contact me at [email protected]. I will reply within one month.
You also have the right to lodge a complaint with the Czech data protection authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.
8. Changes
I may update this policy from time to time. The current version is always available on this page.