Legal

Privacy policy

I value your trust, so I want to be open about what happens with your data. This page explains which personal data I process, why, for how long and what rights you have – in line with the GDPR (EU) 2016/679 and Czech Act No. 110/2019 Coll. on personal data processing.

Effective from: 21 October 2026
Controller: Simona Breen

Who controls your data

The data controller is Simona Breen, provider of executive & business coaching, based in Prague – Vinohrady, Czech Republic (the “controller” or “I”).

For anything related to your personal data, contact me at simona.breen@seznam.cz. I have not appointed a data protection officer – the scope of processing does not require one.

What data I process

I only process data you share with me yourself, data that necessarily arises from running this website or – only with your consent – visitor statistics. I never buy data or combine it with third-party datasets.

Contact form: your full name, e-mail, phone (if provided), area of interest and the content of your message.
Intro call booking: when you pick a time in the online calendar (Cal.com or Calendly), you enter your name, e-mail and optionally a short note. The calendar provider passes the data to me and also processes it under its own terms.
Server logs: when you visit the site, the hosting provider automatically records technical data (IP address, browser type, time of access, pages visited) for security and operation of the service. I do not link it to you as a person.
Visitor statistics (only with your consent): a random identifier from the _ga cookie, pages visited, traffic source, clicks on buttons and links, approximate location (city), device and browser type. None of it is linked to your name or contact details.
Client engagements: if we sign a contract, I process the data needed to perform it and to invoice (name, address, company ID, billing and payment details, the agreed scope of work). The content of coaching conversations is confidential and is not recorded.

Why I process data and on what legal basis

Answering your enquiry and communicating with you: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in handling your enquiry (Art. 6(1)(f) GDPR).

Negotiating and performing a coaching contract: performance of a contract (Art. 6(1)(b) GDPR). Bookkeeping and tax records: compliance with a legal obligation (Art. 6(1)(c) GDPR).

Security and operation of the website (server logs): my legitimate interest in running a secure, working service (Art. 6(1)(f) GDPR).

Website visitor statistics (Google Analytics): your consent given in the cookie banner (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll. on electronic communications), which you can withdraw at any time.

I do not use your data for commercial messages, newsletters, profiling or ad targeting, and I do not pass it to third parties for their own purposes. Google Analytics statistics serve only to improve the website and are never linked to your name or contact details.

Who processes data on my behalf

Only the partners who technically run the website and communication have access to your data. They all act as processors bound by contract and process data solely on my instructions.

The online calendar provider (Cal.com or Calendly) – booking of the intro call.
The form delivery service (Web3Forms or Formspree) – delivering your contact form message to my e-mail.
Google Ireland Limited (Google Analytics 4) – pseudonymous statistics of visits and site usage (a random identifier in a cookie, no name or e-mail), only with your consent (see Cookies and tracking).
The hosting provider – the servers the website runs on, including server logs.
The e-mail provider and, where applicable, an external accountant – for contract and accounting records.

Transfers outside the EU

Google (Google Analytics) also processes the statistics on servers of Google LLC in the USA. Google LLC is certified under the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023); should it be invalidated, Google’s terms provide for standard contractual clauses. Some other partners (the calendar and the form service) may operate servers outside the European Economic Area – such transfers then rely on the same framework or on standard contractual clauses signed by the partner.

How long I keep data

Enquiries and related correspondence are kept for a maximum of 12 months from our last contact, unless we enter into a contract. After that I delete them.

Client contract and accounting records are kept for as long as the law requires (generally 10 years from the end of the tax period under the Czech VAT Act and Accounting Act).

Server logs are usually kept by the hosting provider for a few weeks only, as needed to secure the service.

Visitor statistics: the _ga cookies stay in your browser for up to 2 years (I delete them when you withdraw consent); Google keeps data on individual visits for 14 months. Your choice in the cookie banner (consent or refusal) is remembered in your browser for 12 months, after which the banner appears again.

Your rights

Under the GDPR you have the following rights regarding your personal data. You can exercise them at any time by e-mail – I will respond within 30 days at the latest.

Right of access: to learn which data I process about you and to receive a copy.
Right to rectification of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) where the data is no longer needed or the processing is not lawful.
Right to restriction of processing while your objection or correction is being reviewed.
Right to data portability of the data you provided, in a machine-readable format.
Right to object to processing based on legitimate interest.
Right to withdraw your consent to visitor statistics at any time – via the “Cookie settings” link in the footer; withdrawal does not affect the lawfulness of processing before it.
Right to lodge a complaint with the supervisory authority: the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), www.uoou.cz.

Cookies and tracking

Without your consent the website stores no cookies for analytics or marketing and loads no third-party tool that would monitor your behaviour.

If you give consent in the cookie banner, I use Google Analytics 4 (Google Ireland Limited). It measures which pages people visit, where they came from and what they click – for instance the “Book an intro call” button or submitting the contact form. It stores the cookies _ga and _ga_* with a random identifier in your browser (valid for up to 2 years). Google uses your IP address only to derive an approximate location and, under its terms, does not store it; advertising features (Google Signals) are switched off and the site sends Google no advertising signals. Google keeps data on individual visits for 14 months, after which only aggregated statistics remain.

You can change or withdraw your consent at any time via the “Cookie settings” link in the footer – measurement stops and the Google Analytics cookies are deleted. Without consent the website works just the same.

The embedded booking calendar (Cal.com or Calendly) may set its own technical cookies required for it to work. These are governed by the provider’s terms; the calendar loads only in the booking section.

Changes to this policy

I may update this policy from time to time, for example when partners or legislation change. The current version is always available on this page; the effective date is shown in its header.