GDPR

Svítání, z.s., with its registered office at Klášterní 870/3, 460 01 Liberec, Czech Republic, Company ID No. 68974990, registered in the Association Register maintained by the Regional Court in Ústí nad Labem under File No. L 3194 (hereinafter referred to as the “Controller” or “we”), hereby informs you about the manner and scope of the processing of your personal data and about your rights related to its protection.

This Privacy Policy applies to all individuals who use the websites, educational programmes, e-learning courses, webinars, seminars, workshops, conferences, mentoring, consultations, publications, and other services organised or professionally guaranteed by Svítání, z.s.

Svítání, z.s. operates the website https://hipoterapie-kurzy.com and related educational platforms used for the provision of educational programmes.

Some educational programmes presented through the website may be administratively, contractually, financially, or organisationally managed by EAS Global Academy s.r.o. In such cases, personal data may be shared between Svítání, z.s. and EAS Global Academy s.r.o. to the extent necessary for participant registration, communication with participants, organisation of educational activities, maintenance of educational records, invoicing, fulfilment of contractual obligations, and compliance with legal requirements.

If you have any questions regarding personal data protection, you may contact us at: svitani@hipoterapie-kurzy.com

Processing of children's personal data (persons under 16 years of age)
Our website is not primarily intended for children under 16 years of age. We do not knowingly process personal data of children under 16 years of age. A person under 16 years of age may use our website only with their legal representative's consent.

1. WHAT PERSONAL DATA WE PROCESS
We may process the following categories of personal data:

Identification Data
first name and surname,
academic title,
date of birth, where necessary for issuing a certificate or confirmation of completion,
organisation or employer name.

Contact Data
e-mail address,
telephone number,
correspondence address,
billing address.

Billing Data
Company Registration Number,
VAT Registration Number,
information necessary for issuing accounting and tax documents.

Educational Data
registrations for courses, seminars, workshops, conferences, and webinars,
participation in educational programmes,
test, assignment, and assessment results,
communication with lecturers, mentors, and organisers,
issued certificates, confirmations, or qualifications,
data necessary for maintaining educational records.

Technical Data
When using our websites or educational platforms, we may automatically process:

IP address,
device type,
operating system,
internet browser,
date and time of access,
information regarding the use of websites and educational platforms.

2. PURPOSES AND LEGAL BASES FOR PROCESSING
We process personal data only to the extent necessary for providing our services.

Performance of a Contract
We process personal data primarily for the purpose of:

registration for educational programmes,
creation of user accounts,
providing access to e-learning,
organisation of courses, seminars, workshops, conferences, and webinars,
provision of mentoring and consultations,
communication with participants,
maintaining educational records,
issuing certificates and confirmations of completion,
providing professional support to participants.
The legal basis is the performance of a contract pursuant to Article 6(1)(b) GDPR.

Compliance with Legal Obligations
We process personal data to comply with legal obligations, particularly in relation to:

accounting,
tax records,
document retention,
consumer protection,
complaint handling,
obligations imposed by public authorities.
The legal basis is compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.

Legitimate Interests
We may also process personal data on the basis of our legitimate interests, particularly for:

protection of legal claims,
ensuring system security,
prevention of misuse of user accounts,
improving the quality of services,
statistical and analytical evaluation of website traffic,
participant satisfaction surveys,
presentation and promotion of the activities of Svítání, z.s.
The legal basis is legitimate interest pursuant to Article 6(1)(f) GDPR.

3. NEWSLETTERS AND MARKETING COMMUNICATIONS
If you are our customer, participant in an educational programme, or have used any of our services, we may send you information about similar educational programmes, publications, webinars, conferences, and other activities of Svítání, z.s.

If you are not our customer, we will send marketing communications only on the basis of your consent.

You may unsubscribe from marketing communications at any time using the unsubscribe link included in the e-mail or by sending a request to: svitani@hipoterapie-kurzy.com

4. COOKIES
The website uses cookies and similar technologies.

We use cookies primarily for:

ensuring the proper functioning of the website,
storing user preferences,
measuring website traffic,
analysing website usage,
improving our services,
marketing activities.
Further information about cookies and cookie settings is available through the cookie banner on the website.

5. PHOTOGRAPHS AND VIDEO RECORDINGS
Photographs, audio recordings, and video recordings may be taken during seminars, workshops, conferences, webinars, and other educational events.

These recordings may be used for:

documenting activities,
educational purposes,
presentation and promotion of educational programmes,
presentation of the activities of Svítání, z.s.,
presentation of partner projects and activities.
If you do not wish to appear in photographs or video recordings, we recommend informing the organiser before the event begins.

6. WHO HAS ACCESS TO PERSONAL DATA
We disclose personal data only to the extent necessary for providing our services.

Recipients of personal data may include:

EAS Global Academy s.r.o., where it provides administrative, contractual, financial, invoicing, or organisational support for a specific educational programme or event,
lecturers, mentors, professional guarantors, and members of educational programme teams where access to personal data is necessary for teaching, participant communication, or assessment of educational outcomes,
providers of e-learning and educational platforms,
hosting, cloud, and IT service providers,
payment service providers,
accountants, tax advisers, and auditors,
lawyers and legal advisers,
providers of e-mail and marketing tools,
technical support providers,
public authorities where required by law.
Personal data is disclosed only to the extent necessary for the specific purpose and only to persons bound by confidentiality obligations or appropriate contractual obligations regarding personal data protection.

We do not disclose personal data to third parties for their own marketing purposes.

7. TRANSFERS OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Personal data is primarily processed within the European Union.

If we use service providers located outside the European Union, we do so only where GDPR requirements are met and appropriate safeguards for personal data protection are in place.

8. DATA RETENTION PERIOD
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected.

Data related to the provision of educational services is retained for the duration of the contractual relationship and thereafter for the period necessary to protect our rights and comply with legal obligations.

Accounting and tax documents are retained for the period required by applicable legislation.

Data processed on the basis of consent is retained for the duration of the consent or until it is withdrawn.

After the relevant retention period expires, personal data is securely deleted, anonymised, or archived in accordance with legal requirements.

9. YOUR RIGHTS
In relation to the processing of your personal data, you have the following rights:

the right of access to personal data,
the right to rectification of inaccurate data,
the right to complete incomplete data,
the right to erasure,
the right to restriction of processing,
the right to object to processing,
the right to data portability,
the right to withdraw consent,
the right to lodge a complaint with a supervisory authority.
Requests concerning personal data protection may be sent to: svitani@hipoterapie-kurzy.com

10. PERSONAL DATA SECURITY
We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or destruction.

Personal data is accessible only to persons who require access in order to fulfil their employment, voluntary, or contractual duties and who are bound by confidentiality obligations.

11. FINAL PROVISIONS
By placing an order, registering for an educational programme, accessing e-learning, or using our services, you confirm that you have been informed of this Privacy Policy.

The Controller is entitled to amend this Privacy Policy as necessary, particularly in response to changes in legislation, the scope of services provided, or technical developments.

The current version of the Privacy Policy is always published on the website.

This Privacy Policy is effective from 1 April 2023. The update was carried out on 29 December 2025  and 21 June 2026.