Privacy Policy
Below you will find information on how we process the personal data that you provide to us as the data controller when you visit our website at www.klarahoblikova.cz, when you are our customer, or when you are interested in our services.
We process personal data in accordance with applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council – the General Data Protection Regulation (the “GDPR”) – and Act No. 110/2019 Coll., on the Processing of Personal Data.
The purpose of this document is to explain how your personal data will be handled and to inform you of your rights.
CONTENTS
I. Data Controller – our identification and contact details
II. Source of Personal Data – how we obtain your personal data
III. Personal Data Processed – which personal data we process, whether you are required to provide it, and the consequences of not providing it
IV. Purposes and Retention Periods – the purposes for which and the periods for which we process your personal data, and the legal basis for doing so
V. Cookies – which cookies we use
VI. Recipients of Personal Data – to whom we disclose your personal data
VII. Transfers of Personal Data to a Third Country or International Organisation – whether your personal data will be transferred outside the European Union
VIII. Security of Personal Data – the technical and organisational measures we have adopted to protect your personal data
IX. Your Rights – your rights in relation to the processing of personal data
X. Final Provisions – the effective date of this document and the possibility of amendments
I. DATA CONTROLLER
The data controller is:
Klára Hoblíková
Sole trader registered in the Czech Trade Register
Company ID No.: 02527022
Registered office: Fügnerova 36, 747 05 Opava, Czech Republic
Telephone: +420 774 880 185
Email: info@klarahoblikova.cz
II. SOURCE OF PERSONAL DATA
We process personal data that we obtain directly from you. We obtain your personal data when you visit our website, complete and submit a form on our website, or provide it to us in another way (for example by email, by telephone, during a video call, via LinkedIn, or during an in-person meeting).ncluded when the Provider and the User agree on the provision of the Service and its terms.
III. PERSONAL DATA PROCESSED
1. To the extent necessary, we process in particular the following ordinary personal data about you if you make it available to us: first name and surname, Company ID No., VAT ID No., residential address, registered office address, payment details, telephone number, email address, an identifier used for another form of remote communication, IP address, information about the services you have ordered, notes relating to the course of the coaching relationship, and other information that you voluntarily provide to us during our communication or cooperation.
2. If you permit us to publish your testimonial and, where applicable, provide us with your photograph or video recording, we also process the personal data contained in the testimonial and the relevant photograph or video recording.
3. Providing the categories of ordinary personal data referred to in paragraph 1 of this Article is necessary for mutual communication or for entering into and performing a contract. If you do not provide such data, it may therefore not be possible for us to communicate with each other or to enter into and perform a contract. Where the processing of personal data is based on your consent, it is entirely up to you whether you provide us with your personal data.
4. During the coaching relationship, you may voluntarily disclose information that may fall within special categories of personal data (sensitive data). We do not actively request such data and we do not systematically record or retain sensitive details in client notes.
IV. PURPOSES AND RETENTION PERIODS
A. PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF ENTERING INTO AND PERFORMING A CONTRACT
1. We process your personal data for the purpose of entering into and performing a contract between us (communication before and after entering into the contract, provision of the ordered service, and processing of payment). For this purpose, we process the ordinary personal data referred to in Article III(1) above.
2. The legal basis for processing personal data is the performance of a contract between us and taking steps at your request prior to entering into a contract.
3. For this purpose, we process your personal data for the duration of the contractual relationship between us. After it ends, we continue to process some of your personal data for other purposes (see Sections B to D below).
B. PROCESSING OF PERSONAL DATA FOR COMPLIANCE WITH LEGAL OBLIGATIONS
1. We also process personal data in order to comply with legal obligations applicable to us (for example, statutory obligations relating to taxation). For this purpose, we process the following personal data: first name and surname, Company ID No., VAT ID No., residential address, registered office address, payment details, and information about the services you have ordered.
2. The legal basis for processing personal data is compliance with a legal obligation to which we are subject.
3. For this purpose, we process your personal data for the period prescribed by generally applicable legislation.
C. PROCESSING OF PERSONAL DATA FOR THE PROTECTION OF RIGHTS AND ENFORCEMENT OF CLAIMS
1. We also process personal data for the purpose of protecting our rights and enforcing legal claims (in particular claims arising from contracts or damage caused). For this purpose, we process your personal data contained in concluded contracts and in our mutual communications.
2. The legal basis for processing personal data is our legitimate interest.
3. For this purpose, we process your personal data for the duration of the contractual relationship and for the following 4 years after its termination, or for 4 years from our last contact if no contract was concluded. If a dispute arises, we also process the data for the entire duration of the dispute until its final resolution and the satisfaction of all claims.
D. PROCESSING OF PERSONAL DATA BASED ON YOUR CONSENT
1. Based on your consent, we may process your personal data for the purpose of publishing your testimonial on our website or, where applicable, in other promotional materials.
2. Before you give your consent, we will inform you which personal data we will process on the basis of your consent and the specific purpose to which your consent relates.
3. You may withdraw your consent at any time by sending a notice to the email address stated above. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
V. COOKIES
1. When you use our website, we use cookies and related technologies. Cookies are small files used to store and receive identifiers and other information about the devices from which you access our website.
2. We use technical and functional cookies that ensure the proper operation of our website and make it easier to use. These cookies may be stored without your consent where they are necessary for the functioning of the website.
3. You can refuse the use of cookies in your web browser settings or configure your browser to allow only certain cookies.
4. More information about the individual cookies we use can be found on our website.
VI. RECIPIENTS OF PERSONAL DATA
1. If we share your personal data with another person or entity, we take care to ensure that it is appropriately protected.
2. As we are unable to carry out all activities connected with our business entirely on our own, we use third-party services and applications whose providers may therefore gain access to your personal data. We have entered into the appropriate agreements with these parties in accordance with the GDPR.
3. In particular, the following recipients may receive personal data:a) provider of web hosting and related services: ACTIVE 24, s.r.o.; personal data submitted through the contact form may be stored in the website database hosted by this provider;b) provider of the invoicing system: Fakturoid s.r.o.
4. Your personal data may also be disclosed to the competent administrative authorities or courts and, where applicable, to legal representatives, where necessary for us to comply with a legal obligation or to protect our rights and legitimate interests.
5. If we use additional third-party applications or services in the future, we will take care when selecting them to ensure that our standards for the security and processing of personal data are maintained.
VII. TRANSFERS OF PERSONAL DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANISATION
At present, we do not transfer personal data to third countries outside the European Union or the European Economic Area, or to international organisations.
VIII. SECURITY OF PERSONAL DATA
1. As the data controller, we have adopted technical and organisational measures to protect your personal data against accidental or unlawful access, alteration, destruction or loss, unauthorised processing, or other misuse. The technical and organisational measures adopted are appropriate to the level of risk to the rights and freedoms of natural persons and to the nature, scope and purposes of the processing of personal data.
2. In particular, we have adopted the following technical and organisational measures to protect your personal data:
a) access to computer equipment used to process personal data is protected by individual strong passwords, and those passwords are protected against disclosure;
b) such computer equipment is protected by antivirus software;
c) portable computer equipment and portable data storage devices are protected, for example by keeping them under supervision and by password protection;
d) premises in which documents containing personal data are stored are kept locked;
e) access to personal data is granted only to authorised persons who are bound by a duty of confidentiality concerning your personal data and the security measures adopted.
3. We continuously adapt the technical and organisational measures adopted, taking into account the nature and scope of the personal data processed and the associated risks.
IX. YOUR RIGHTS
1. In relation to the processing of personal data, you have the following rights:
a) Right of access to personal data (Article 15 GDPR) You have the right to obtain confirmation as to whether or not your personal data is being processed and, where it is being processed, you have the right to access that personal data and information concerning its processing.
b) Right to rectification and completion of personal data (Article 16 GDPR) You have the right to request that we rectify inaccurate personal data concerning you and, taking into account the purposes of the processing, you also have the right to have incomplete personal data completed.
c) Right to erasure of personal data (Article 17 GDPR) You have the right to request that we erase personal data concerning you and, where one of the grounds set out in Article 17 GDPR applies, we are required to erase your personal data upon your request.
d) Right to restriction of processing of personal data (Article 18 GDPR) Where the conditions set out in Article 18 GDPR are met, you have the right to request that we restrict the processing of your personal data.
e) Right to data portability (Article 20 GDPR) Where the processing of your personal data is carried out by automated means and is based on consent or on a contract, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit that data to another controller. Where technically feasible, you also have the right to request that we transmit your personal data directly to another controller.
f) Right to object to the processing of personal data (Article 21 GDPR) Under the conditions set out in Article 21 GDPR, you have the right to object at any time to the processing of your personal data.
g) Right to withdraw consent to the processing of personal data Where personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
h) Right to lodge a complaint with the Office for Personal Data Protection If you believe that your right to the protection of personal data has been infringed, you have the right to lodge a complaint with the Office for Personal Data Protection (https://uoou.gov.cz/).
2. You may exercise your rights with us using the contact details provided above (postal or email address). Before dealing with your request, we may contact you in order to verify your identity in an appropriate manner.
X. FINAL PROVISIONS
1. We are entitled to amend this Privacy Policy to a reasonable extent. The current version is available on our website referred to above.
2. This Privacy Policy takes effect on 4 September 2026.