Privacy Policy

The controller of personal data for the NaLekci.cz platform is:

Ing. Vojtěch Šafránek, ID No. 24553255, sole trader under Czech law, based in the Czech Republic(the “Operator”).

Email: info@nalekci.cz

2.1. Partner data (instructors and organizations)

• Identification data: first name, last name, company name, company ID (IČO)
• Contact data: email, phone, address, website
• Login credentials: username, password (encrypted)
• Billing data: bank details, billing address

2.2. User data (lesson participants)

• First name and last name
• Contact data: email, phone
• Reservation data: selected lesson/event, date, reservation status, notes

2.3. Technical data

• IP address
• Browser and device type
• Cookies and similar technologies

2.4. Instagram integration data

If an instructor connects their Instagram account, we store the Instagram account name and an encrypted access token, used solely to publish lesson posts on the instructor’s behalf at their request. Disconnecting Instagram in Account settings immediately and permanently deletes this token from our systems.

We process personal data for the following purposes:

• Service provision: managing reservations, communicating with guests, operating the application
• Contract performance: invoicing, customer support
• Legitimate interests: improving services, security, fraud prevention
• Legal obligations: accounting, tax obligations
• Marketing: sending commercial communications (only with consent)

We process personal data on the basis of:

• Performance of a contract (Art. 6(1)(b) GDPR)
• Compliance with a legal obligation (Art. 6(1)(c) GDPR)
• Legitimate interest (Art. 6(1)(f) GDPR)
• Consent (Art. 6(1)(a) GDPR)

We retain personal data for the following periods:

• Partner data: for the duration of the contractual relationship + 10 years (statutory archiving)
• Reservation data: 3 years from the date of reservation
• Marketing data: until consent is withdrawn
• Technical data: 1 year

Personal data may be disclosed to the following recipients:

• Hosting service providers
• Email service providers
• Analytics tool providers
• Accounting and tax advisors
• Public authorities (where required by law)

Some third-party services we use may process data outside the European Economic Area. In such cases we ensure appropriate data protection safeguards in accordance with the GDPR (e.g. standard contractual clauses).

In connection with the processing of personal data, you have the following rights:

• Right of access: to obtain information about the processing of your data
• Right to rectification: to request correction of inaccurate data
• Right to erasure:to request deletion of data (the “right to be forgotten”)
• Right to restriction of processing: to request that processing be restricted
• Right to data portability: to receive your data in a structured format
• Right to object: to processing based on legitimate interest
• Right to withdraw consent: to withdraw consent at any time
• Right to lodge a complaint: with the Office for Personal Data Protection (www.uoou.cz)

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Password encryption
• Regular data backups
• Restricted access to data
• Regular security audits

We may update this policy from time to time. We will notify you of any significant changes by email or through the application.

To exercise your rights or with any questions regarding personal data protection, please contact us:

• Email: info@nalekci.cz
• ID No.: 24553255