Home / Privacy policy
Privacy policy
We value your trust. This page explains clearly which personal data about you and your child we process, why, for how long, and what your rights are. We follow the General Data Protection Regulation (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing.
1. Who the controller is
The controller is Smartup Academy s.r.o., registered office Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic, Company ID 30052190, registered in the Commercial Register kept by the Regional Court in Brno, Section C, Insert 154040.
For any privacy questions, contact us at info@smartup-academy.cz, by phone at +420 770 635 825 or by post at our registered office.
2. What data we process
- Trial lesson registration: contact person's name, phone, email, child's age, chosen course language and an optional note.
- Lessons: names of the child and legal guardian, contact details, attendance, level and progress.
- Payments and invoicing: billing details and payment records.
- Communication: the content of emails, messages and calls you exchange with us.
- Photos and videos from lessons and competitions: only with the legal guardian's consent.
Providing the details in the registration is voluntary. Without the required details (name, child's age, phone and email), however, we cannot arrange the trial lesson.
We do not process special categories of data, such as health data. Please do not include them in the registration. We are happy to discuss your child's individual needs in person.
3. Why we process data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your registration and arranging the trial lesson | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) |
| Replying to enquiries sent by email or phone, including adults interested in the Executive Brain Gym | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in replying (Art. 6(1)(f) GDPR) |
| Organising lessons and communicating with parents | Performance of a contract (Art. 6(1)(b) GDPR) |
| Invoicing and accounting | Legal obligation (Art. 6(1)(c) GDPR) |
| Protecting our rights and handling disputes | Legitimate interest (Art. 6(1)(f) GDPR) |
| Publishing photos and videos of children on the website and social media | Consent of the legal guardian (Art. 6(1)(a) GDPR) |
4. How long we keep data
- Registrations not followed by enrolment, and enquiries that do not lead to a contract: up to 12 months after the last contact.
- Lesson records: for the duration of the course and 3 years after it ends, in case of claims.
- Accounting and tax documents: 10 years, as required by law.
- Photos and videos: until consent is withdrawn.
5. Who has access to the data
Only our teachers and staff who need the data for their work have access to it. It may also be processed by our contracted suppliers, who are bound by confidentiality and a data processing agreement:
- our web hosting and email provider,
- accounting services,
- the operator of the Abakus online learning platform, if your child uses it.
We never sell your data. We do not transfer it outside the European Union, except for the Google map described in the cookies section.
6. Children's data and photos
Registrations and all consents on behalf of a child are given by a parent or other legal guardian. We process children's data only to the extent necessary for teaching.
We publish photos and videos of children only with the prior consent of their legal guardian. You can withdraw consent at any time at info@smartup-academy.cz. We will then remove the photo from our website and social media profiles without undue delay. Withdrawal does not affect processing carried out before it.
7. Your rights
In connection with the processing of your personal data you have the right to:
- access your data and obtain a copy,
- have inaccurate data corrected,
- have your data erased when we no longer need it or process it unlawfully,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time.
Send your request by email or post. We will handle it without undue delay, within one month at the latest.
If you believe we are not handling your data correctly, you can file a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz. We would appreciate it if you contacted us first.
9. Security and changes to this policy
We protect your data with technical and organisational measures: the website runs over a secure connection (HTTPS), only authorised people have access to the data, and we choose suppliers with data protection in mind.
We may update this policy, for example when our services change. The current version is always published on this page.
10. Consumer disputes
If we cannot resolve a dispute arising from a contract by mutual agreement, you as a consumer can turn to the body for out-of-court resolution of consumer disputes. This is the Czech Trade Inspection Authority (Česká obchodní inspekce), coi.gov.cz/informace-o-adr.