Privacy Policy
Last updated: 1 October 2026
1. Who I am
The controller of your personal data is Mgr. Linda Jelínková, a self-employed person registered in the Czech Trade Register.
- Address: Trávnická 186, 517 41 Kostelec nad Orlicí, Czech Republic
- ID number (IČO): 21291128
- E-mail: [email protected]
- Phone: +420 773 951 922
I have not appointed a data protection officer.
2. What data I process and why
Lessons and your lesson page
When you take lessons with me, I process your name, e-mail, the dates and status of your lessons (completed, scheduled, cancelled), your lesson packages and your learning progress. I use this data to provide the lessons and to show you your overview on your personal lesson page.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Your student account
To sign in to your lesson page, you have an account with your e-mail and a password. I store the password only in encrypted (hashed) form, so nobody – not even me – can read it. Your first and last name are optional. For security, I keep a record of sign-in attempts and password-link requests, and I send you an e-mail when your password or e-mail address is changed.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and my legitimate interest in keeping your account secure (Art. 6(1)(f) GDPR).
Lesson booking
Lessons are booked through Google Calendar. When you book, Google shares your name and e-mail with me and adds the lesson, including the Google Meet link, to my calendar. I use your e-mail from the booking to recognise which lesson page is yours when you ask for a password link.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Orders and invoices
When you buy lessons or digital materials, I process your billing details: name, e-mail, address, company ID if provided, and the details of your order and payment. I use them to issue proforma invoices and invoices and to keep tax records.
Legal basis: performance of a contract and compliance with my legal obligations under Czech tax and accounting law (Art. 6(1)(b) and (c) GDPR).
Messages and trial lesson requests
When you write to me through a form on this website, I process your name, e-mail, the topic and the content of your message. The message is stored securely and forwarded to my e-mail so I can reply to you.
Legal basis: steps taken at your request before entering into a contract, or my legitimate interest in answering your enquiry (Art. 6(1)(b) and (f) GDPR).
News and updates
If you tick “Sign up for news and updates”, I store your e-mail and name to send you occasional news about my lessons and materials. You can unsubscribe at any time by replying to any of these e-mails or writing to me.
Legal basis: your consent (Art. 6(1)(a) GDPR). Withdrawing consent does not affect processing before the withdrawal.
Feedback and reviews
When you fill in the feedback form on your lesson page, I use your answers to improve my lessons. If you agree, I publish your review on this website with your first name and country, or anonymously if you choose so.
Legal basis: my legitimate interest in improving my lessons (Art. 6(1)(f) GDPR); publication only with your consent (Art. 6(1)(a) GDPR).
E-mails about your lessons
I send you service e-mails: links to set your password, security notices, and a reminder when your lesson package is almost used up.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Website
When you visit this website, the hosting provider processes technical data such as your IP address and browser information to deliver the website and protect it against attacks. I use privacy-friendly visitor statistics without cookies, which do not identify you.
Legal basis: my legitimate interest in operating a functional, secure website (Art. 6(1)(f) GDPR).
3. Who processes the data for me
I use these service providers (processors), which process data only on my instructions:
- Cloudflare, Inc. – website hosting, security and cookie-free visitor statistics
- Supabase, Inc. – database for student accounts, lesson overviews, orders, messages and reviews; servers in the EU (Frankfurt, Germany)
- Resend – sending e-mails from this website (password links, notices, form messages)
- Fakturoid s.r.o. (Czech Republic) – invoicing
- Google Ireland Ltd. / Google LLC – calendar and lesson booking, Google Meet, shared lesson materials in Google Drive, e-mail
Some of these providers are based in the USA. Data transfers to them are covered by the EU–US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
I do not sell your data and I do not share it with anyone for their own marketing.
4. How long I keep your data
- Invoices and payment records: for the period required by Czech tax and accounting law (up to 10 years).
- Student account and lesson data: for the duration of our cooperation and up to 3 years after your last lesson.
- Security records (sign-in attempts, password-link requests): up to 12 months.
- Messages and enquiries: as long as needed to deal with your request, and no longer than 3 years.
- News and updates: until you unsubscribe.
- Published reviews: until you ask me to remove them.
5. Cookies and data stored in your browser
This website does not use cookies for tracking or advertising, and the visitor statistics work without cookies.
Your browser stores two things locally (local storage): your sign-in, so you stay signed in to your lesson page until you sign out, and the billing details you entered in the order form, so you don't have to fill them in again. This data stays on your device; you can delete it by signing out or clearing your browser data.
Embedded content – the Google booking calendar on your lesson page – is provided by Google, which may use its own cookies according to the Google Privacy Policy.
6. How I protect your data
The website runs only over an encrypted connection (HTTPS). Passwords are stored only in hashed form, every student sees only their own lesson page, and access to the data is limited to me.
7. Your rights
Under the GDPR you have the right to:
- access your personal data,
- have inaccurate data corrected – you can change your name and e-mail yourself under “My account”,
- have your data erased, unless I am required by law to keep it,
- restrict the processing of your data,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time.
To exercise any of these rights, contact me at [email protected]. I will reply within one month.
You also have the right to lodge a complaint with the Czech data protection authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.
8. Changes
I may update this policy from time to time. The current version is always available on this page.