This English translation is provided for information purposes only. The legally binding version is the original document in Czech: Zásady zpracování a ochrany osobních údajů (GDPR). In the event of any discrepancy between the two versions, the Czech original shall prevail.
Frequently Asked Questions and Answers About How We Handle Your Personal Data
Effective as of: October 1, 2026
This document explains, in a clear question-and-answer format, how we collect and process your personal data and what rights you have in connection with its processing. We recommend that you read it carefully—by continuing to use our website and providing your personal data, you confirm that you have been informed about how it is processed.
Who We Are and How to Contact Us
1. Who is the controller of your personal data, and how can you contact us?
The controller of your personal data is:
PhDr. Aneta Kaduková, MPA,
ID No.: 29901430
, with its registered office at: Michalská 432/12, Prague 1, 110 00
, business address: Michalská 432/12, Prague 1, 110 00
; contact email: info@anetakadukova.com
(hereinafter referred to as the “Controller”)
The Controller processes personal data in accordance with:
2. What terms do we use in this policy?
For the purposes of this policy, the terms listed below have the following meanings:
What information about you do we process?
3. Where do we obtain your personal data?
We obtain your personal data from various sources, primarily directly from you or through our activities, namely:
4. What specific personal data do we process about you?
In connection with the provision of coaching services, we may process, in particular:
Identification data: first and last name, title, date of birth (if provided).
Contact information: email address, phone number, home address, or billing address.
Billing information: business ID, tax ID, bank account information, details listed on invoices.
Coaching-related data: client’s goals, session notes, development plans, feedback, information voluntarily provided by the client during our collaboration.
Technical data: IP address, cookies, website usage data, data from the booking system.
Payment and transaction data: payment details, payment transaction identifier and status processed via the Stripe payment gateway—the Controller does not store or process full credit card data; this is processed exclusively by the payment gateway provider.
Data on the purchased program/service: name and type of the program, course, or service package purchased by the client; date of purchase, price, and validity period or usage period of the program; order history and usage history of individual programs or services.
Contract performance data: data regarding the performance of the contract, mutual communication in connection with the sale of goods or services offered on the website, and any complaints.
5. Do we also process sensitive (special) data, such as information about your health?
Coaching may lead to a client voluntarily disclosing data regarding their health, mental state, family circumstances, or personal life situations. We do not actively request this data, we do not process it beyond what is necessary for the provision of the service, and we protect it with enhanced security measures. Clients provide us with such data exclusively on a voluntary basis.
6. Do we process children’s personal data?
We do not knowingly collect or request personal data from individuals under the age of 16, with the exception of those who participate in the provision of services together with their legal guardian and with the guardian’s consent. We then process this data in relation to both the child and their legal guardians; the legal basis is the performance of a contract.
7. What happens if you do not provide us with personal data?
Providing the personal data necessary to enter into and fulfill a contract (e.g., to provide coaching services or a purchased program) is a contractual requirement. Without this information, we are unable to provide you with our services or the purchased program.
Why We Process Data, Cookies, and How Long We Retain Them
8. For what purpose do we process your personal data?
Provision of coaching services—the legal basis is the performance of a contract pursuant to Article 6(1)(b) of the GDPR.
Maintaining accounting and tax records—the legal basis is compliance with legal obligations under Article 6(1)(c) of the GDPR.
Communication with clients—the legal basis is the performance of a contract or a legitimate interest.
Protection of rights and legitimate claims – the legal basis is the Controller’s legitimate interest, e.g., in archiving documentation for the duration during which you may assert your legal claims.
Marketing communications (sending information about services and articles)—the legal basis is the data subject’s consent or, where permitted by law, a legitimate interest. Marketing communications are also sent based on consent, which can be revoked at any time just as easily as it was granted. We send our newsletter via the Ecomail service; you can unsubscribe at any time using the link in the footer of each email.
Records of purchased programs and services—the legal basis is the performance of a contract pursuant to Article 6(1)(b) of the GDPR; we use the data to manage orders, track usage, and handle any complaints regarding purchased programs.
Payment processing via a payment gateway – we process payment and transaction data for the purpose of processing payments via the Stripe payment gateway. The legal basis is the performance of a contract pursuant to Article 6(1)(b) of the GDPR. The payment gateway provider processes this data as either a separate controller or a processor.
9. Do we use cookies on our website, and do we need your consent for them?
A cookie is a small data file that a website stores on your device (e.g., via your browser) when you visit it, in order to remember information about your visit, such as language preferences or login credentials.
Our website may use:
Non-essential cookies are stored only with your consent. Before storing non-essential cookies (preference, analytics, and marketing cookies) on your device, we require your prior consent, which you can provide via the cookie banner (cookie panel) on our website. Consent to marketing cookies is always separate from consent to other non-essential categories and can be revoked at any time just as easily as it was granted.
We retain data from non-essential cookies for the duration of the consent granted, but no longer than 2 years from the date of consent.
Rejecting non-essential cookies does not affect your ability to use the website’s basic functions; however, it may affect your user experience and the personalization of content.
Details are provided in a separate Cookie Policy.
10. How long do we retain your personal data?
Client documentation—for the duration of the business relationship and subsequently for a maximum of 3 years after its termination.
Accounting and tax documents – for the period specified by law, typically 10 years.
Marketing consents – until consent is revoked or for a maximum of 5 years; this also applies to marketing based on the controller’s legitimate interest (pursuant to Section 7(3) of Act No. 480/2004 Coll.).
Purchased programs and their use – for the duration of the program’s use and for an additional 3 years after its completion for record-keeping and complaint resolution purposes.
Payment and transaction data (payment gateway)—for the time necessary to process the payment and thereafter for the period required by law as part of accounting records, typically 10 years; the Controller does not retain full credit card details.
After the specified period has elapsed, the data is securely deleted or anonymized.
What Happens to Your Data Next
11. To whom do we disclose your personal data (who are the recipients)?
Personal data may only be disclosed to individuals involved in providing services or operating the business. These may include, in particular:
All processors are contractually obligated to protect personal data.
12. Do we transfer data outside the European Union?
If we use services provided by providers based outside the European Union, data is transferred only in accordance with the GDPR, and exclusively if:
Data transfers outside the European Union (particularly to the U.S.) may occur in connection with the use of Zoom, Google, Stripe, and Cloudflare services.
13. How do we secure your personal data?
The controller has implemented appropriate technical and organizational measures to protect personal data, which are in line with best practices and commensurate with the potential risk. These measures include, among other things, regular data backups, regular system updates, strong passwords, software and hardware protection, and secure payment processing through a certified payment gateway provider in accordance with applicable standards. Access to personal data is restricted to only those individuals who have a legitimate need to know.
14. Do you make automated decisions about me or profile me?
We process your personal data both manually and automatically (e.g., in our reservation, billing, or payment systems). However, we do not engage in automated decision-making with legal effects on you within the meaning of Article 22 of the GDPR.
Your Rights and the Protection of Your Data
15. What rights do you have, and how can you exercise them?
You have the right:
To access your data—to request information about what personal data we process about you.
To rectification—to request the correction of inaccurate data.
To erasure—to request the erasure of your personal data, unless required by law.
To restrict processing—to request that certain types of processing be restricted.
To data portability – to request that your data be provided to you in a commonly used format.
To object—to object to processing based on a legitimate interest.
Withdraw consent – withdraw previously granted consent at any time; withdrawal of consent does not affect the lawfulness of prior processing.
We will respond to your request regarding the exercise of the above rights no later than one month after receiving it at the email address info@anetakadukova.com; in justified cases, we may extend this period by an additional two months, in which case we will notify you. We may ask you for additional information to verify your identity.
16. Where can you turn if you believe your rights have been violated?
You may contact:
Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7
Website: https://www.uoou.cz
17. Is the content of coaching sessions confidential?
The data controller considers all information disclosed during coaching sessions to be confidential. The content of coaching conversations will not be disclosed to third parties without the client’s consent, except in cases:
Final Provisions
18. Can this policy change?
This Privacy Policy may be updated from time to time. The current version will always be published on the Controller’s website.
Cookie Policy | General Terms and Conditions | Privacy Policy
Information and Consent for Online Coaching | Informed Consent
© 2026 CREA:THINK STUDIO | All rights reserved