GDPR

Svítání, z.s., with its registered office at Klášterní 870/3, 460 01 Liberec, Company ID: 68974990, registered with the Regional Court in Ústí nad Labem under file no. L 3194 (hereinafter referred to as the "Controller" or "we"), as the Controller of personal data, informs you, as the user of the website https://hipoterapie-kurzy.com/, about the collection of personal data described below and the principles of privacy protection.

In the text below, you will learn in particular:

• Which of your personal data will we process?
• For what purposes and in what manner we will process your personal data;
• To whom your personal data may be transferred;
• For how long will we process your personal data and
• What rights do you have in relation to the protection of your personal data?

If you need any part of the text explained, advice, or to discuss the further processing of your personal data, you may contact us at any time at the e-mail address: svitani@hipoterapie-kurzy.com.

Processing of children's personal data (persons under 16 years of age)
Our website is not primarily intended for children under 16 years of age. We do not knowingly process personal data of children under 16 years of age. A person under 16 years of age may use our website only with their legal representative's consent.

Scope of personal data processing
When you contact us through the website, register for courses, webinars, or other events, or shop in our e-shop, you may be asked to provide certain information about yourself or your company. This information may include, in particular:

• Your first name and surname,
• business name,
• address or registered office of the company,
• identification number and tax identification number,
• telephone number or
• e-mail address.

When you visit our website, we may automatically collect certain information about you, such as the date and time you access the website, your internet browser, IP address, and operating system. We may also process information about your behaviour on our website, for example, which links you visit and which products or services are displayed to you.
We use this information about behaviour on the website for statistical and analytical purposes to improve our services. We do not use it to identify you by name as an individual.

Cookies
Our website uses cookies to provide services, personalise content and advertisements, and analyse traffic. Cookies are short text files that are stored in your internet browser when you visit a website. They record information about your behaviour (for example, which pages you see) and send it back to the relevant server.

Thanks to this, we can adapt the content of our pages and marketing communications to your needs and improve the website's functionality and clarity. Cookies are not directly linked to your name or e-mail address. However, some cookies may be considered personal data if they are associated with other data we hold about you.

To make using our website and shopping in the e-shop as pleasant as possible for you, we use cookies to tailor the offer based on your behaviour. They also provide us with data on the use of our website, which we use to optimise user-friendliness. We also use third-party tools (e.g. Google, Seznam, etc.) that process cookies; the privacy policies of those entities govern their use.

You can restrict or disable cookies at any time in your browser settings. However, in such a case, some website functions may not be fully available.

Purpose of processing, legal grounds for processing
The data you provide to us is used mainly so that we can:

• communicate with you regarding your registration, orders and courses,
• provide you with information you have requested,
• fulfil our contractual and legal obligations (e.g. invoicing, bookkeeping).

The legal ground for processing is primarily the conclusion and performance of a contract, or the fulfilment of the Controller's legal obligations. We process all personal data in a lawful, fair and transparent manner and require only adequate, relevant and necessary data in relation to the purpose of processing, i.e. so that we can duly deliver the goods purchased and provide the ordered services (including access to online courses and webinars).
On this legal ground, we primarily process billing and delivery data, as well as other data necessary for managing your account and access to e-learning.

Legitimate interest
Another legal ground for processing your personal data is our legitimate interest. Based on legitimate interest, we particularly process:

• Technical and analytical data obtained through cookies for the purpose of improving the functioning of the website and targeting content,
• Your name and e-mail address for sending information about our events, publications and services related to similar products that you have already purchased from us, data for determining your satisfaction, and for processing and publishing product and service reviews.

Based on legitimate interest, we may therefore send you a newsletter approximately 1–2 times a month and occasionally promotional offers of our services. You can easily unsubscribe at any time, which does not affect our other contractual relationships.

Your consent
In some cases, we also process your personal data with your consent – in particular if you are not our customer but sign up for a newsletter or other forms of marketing communication.
If you are already our customer, we may send you commercial communications relating to similar products based on legitimate interest, even without your consent. However, you may always refuse the sending of commercial communications at any time, and this will not affect our other mutual relationships.

You can easily unsubscribe from newsletters and commercial communications via the unsubscribe link in each e-mail or by sending a request to the e-mail: svitani@hipoterapie-kurzy.com.

We do not transfer your personal data outside the European Union unless it is necessary and appropriate safeguards for the protection of personal data under the GDPR are in place.

Who has access to your personal data?
Your personal data is processed primarily by us as the Controller. For some activities, we use external suppliers to whom we transfer personal data only to the necessary extent based on a data processing agreement.
Personal data may therefore be transferred in particular to:

• an external accountant;
• an external law firm;
• processors who provide us with server, website, cloud or IT services, or who are our business partners;
• entities involved in the delivery of goods or services or involved in the execution of payments under a contract;
• a provider of external archiving and shredding services as part of fulfilling our legal obligation to archive and
• Shred documents under the relevant legal regulations of the Czech Republic;
• Public authorities in fulfilling legal obligations or in the event of the supervisory and control function of the competent public authority (Tax Office, Czech Trade Inspection Authority, Office for Personal Data Protection, etc.).

Period of personal data processing
We will process your personal data for as long as we provide you with our services and fulfil our mutual contract, and further for the period necessary to fulfil archiving obligations under applicable legal regulations (in particular the Accounting Act, the Act on Archiving and Records Management, and the Value Added Tax Act), usually no longer than 5 years after termination of the contractual relationship. After the storage period expires, personal data will be securely deleted or anonymised.

In the case of processing personal data based on your consent, the data will generally be processed for the duration of the consent, but no longer than 5 years, unless you withdraw your consent earlier.

Your rights arising from the processing of personal data.
In relation to the processing of your personal data carried out by us, you have the following rights. You may exercise all the rights listed by contacting us at svitani@hipoterapie-kurzy.com. We will respond to your request without undue delay, at the latest within 1 month. You may complain about the processing of personal data to the supervisory authority, the Office for Personal Data Protection (www.uoou.cz).

• The right of access means that you may at any time request confirmation as to whether personal data concerning you is being processed, and if so, obtain information about the purposes of processing, the scope of the processed data, recipients, period of processing, your rights (rectification, erasure, restriction, objection), the source of the data, and whether automated decision-making, including profiling, takes place.
  You also have the right to obtain a copy of the processed personal data; the first provision is free of charge, for additional copies, we may request a reasonable reimbursement of administrative costs.
• The right to rectification means that you may at any time ask us to correct or supplement your personal data if it is inaccurate or incomplete.
• The right to erasure ("the right to be forgotten") means that we are obliged to erase your personal data if:
  (i) it is no longer needed for the purposes for which it was collected or otherwise processed,
  (ii) the processing is unlawful,
  (iii) you object to the processing, and there are no overriding legitimate grounds for the processing, or
  (iv) a legal regulation requires it.
• The right to restriction of processing means that where the accuracy, lawfulness, or scope of processing is contested, we must restrict the processing of your personal data for the duration of resolving the disputed issue, so that the data is only stored and used solely for the determination, exercise, or defence of legal claims, or with your consent.
• The right to object means that you may at any time object to the processing of personal data that we carry out based on legitimate interest, including processing for direct marketing purposes. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
• The right to data portability means that you may request us to provide the personal data concerning you that we process automatically based on a contract or consent in a structured, commonly used, and machine-readable format, or to transfer it to another controller, if technically feasible.

Conditions of personal data security
We declare that we have adopted appropriate technical and organisational measures to secure personal data against loss, misuse, or unauthorised access. Only persons authorised by us, who are bound by confidentiality, have access to personal data. We regularly monitor security and continuously improve protection standards.

Final provisions
By sending an order via the online form or by registering for our courses and events, you confirm that you have read this Privacy Policy and that you accept it in full.
The Controller is entitled to amend this Privacy Policy, in particular due to changes in legal regulations or the scope of services provided. The new wording of the Policy will continuously be published on the Controller's website and may also be notified to you by e-mail.

In the event of any discrepancy or ambiguity between this English translation and the original Czech version, the Czech version shall prevail and shall be deemed the authoritative text.

This Privacy Policy is effective from 1 April 2023. The update was carried out on 29 December 2025.