GDPR & Privacy Policy

1. Data controller

The controller of your personal data under Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) is Linda Jelínková, Company ID (IČO) 21291128, Trávnická 186, 517 41 Kostelec nad Orlicí, Czech Republic (“I”, “the controller”).

Contact: l.jelinkova2@gmail.com

I have not appointed a Data Protection Officer. I process your personal data lawfully, only for the purposes described below, and I will help you exercise your rights.

2. What personal data I process

I process the data you give me (for example, in a contact or order form, by email or during our sessions) and data arising from our contract:

  • name and surname

  • email address and phone number (if provided)

  • billing details (address; company ID and VAT number if you buy as a business)

  • payment details (e.g. bank account number or payment reference)

  • information related to your sessions (booked dates, level, learning goals, notes and materials)

  • data collected through cookies on this website (see section 8)

3. Why I process your data and on what legal basis

  • To answer your enquiries, handle your orders, provide sessions and digital products, and issue invoices — performance of a contract (Art. 6(1)(b) GDPR).

  • To keep accounting and tax records — compliance with a legal obligation (Art. 6(1)(c) GDPR).

  • To send existing customers emails about my sessions and materials — my legitimate interest (Art. 6(1)(f) GDPR). You can opt out at any time.

  • To send newsletters to people who are not my customers (e.g. after downloading a free e-book) — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

  • To establish or defend legal claims — my legitimate interest (Art. 6(1)(f) GDPR).

I do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

4. How long I keep your data

  • Contract and invoicing data: for as long as required by Czech accounting and tax laws, and for no longer than 10 years after the end of our contract.

  • Data processed on the basis of your consent: until you withdraw your consent or unsubscribe.

  • Enquiries that do not lead to a contract: for up to 1 year.

After this period, I delete your data.

5. Who receives your data

I share your data only with service providers who help me run my business, and only to the extent necessary:

  • website and online store: Squarespace

  • online sessions, email, calendar and shared folders: Google (Google Meet, Gmail, Google Calendar, Google Drive)

  • payments: my bank, Wise, Revolut

  • newsletter: Squarespace Email Campaigns

  • accounting and tax advisers

  • public authorities, where required by law

6. Transfers outside the EU

Some of these providers (e.g. Squarespace and Google) are based in the USA or process data there. These transfers are protected by the EU–US Data Privacy Framework or by the Standard Contractual Clauses approved by the European Commission.

7. Your rights

Under the GDPR, you have the right to:

  • access your personal data (Art. 15)

  • have your data corrected (Art. 16)

  • have your data erased (Art. 17)

  • restrict the processing of your data (Art. 18)

  • data portability (Art. 20)

  • object to processing, including for direct marketing (Art. 21)

  • withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal

To exercise your rights, email me at l.jelinkova2@gmail.com. Every newsletter also contains an unsubscribe link.

You also have the right to lodge a complaint with a supervisory authority — in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz) — or with the authority in your country of residence.

8. Cookies

This website runs on Squarespace, which uses cookies that are necessary for the website to work (e.g. the shopping cart) and, if enabled, analytics cookies. Non-essential cookies are used only with your consent, which you can give or withdraw in the cookie banner.

9. Security

I have taken appropriate technical and organisational measures to protect your data, including secure passwords, antivirus protection and secure backups. Only I and the service providers listed above have access to your data.

10. Final provisions

By submitting a form on this website, you confirm that you have read this Privacy Policy. I may update this policy from time to time; the current version is always published on this website.

This Privacy Policy is effective from 16.09.2026