Privacy Policy
If you are our customer, a newsletter subscriber, or a website visitor, you entrust us with your personal information. We are responsible for its protection and security. Please acquaint yourself with our privacy policy, principles, and your rights concerning GDPR (General Data Protection Regulation).
Who is the controller?
The natural person conducting business, Lucie Bíbová, ID: 08451265, Lucemburská 2015/28, Prague 13000, Czech Republic operating the website www.luciebibova.com, processes your personal data as the controller. This means we determine how personal data will be processed, for what purpose, for how long, and we select any additional processors who will assist us in the processing.
Contact Information
If you need to reach us during the processing of your data, you can contact us via email at luc@luciebibova.com.
We declare
We declare that, as the controller of your personal data, we fulfill all legal obligations required by current legislation, including the Data Protection Act and GDPR, ensuring that:
- We will process your personal data only based on a valid legal basis, primarily legitimate interest, contract fulfillment, legal obligation, or granted consent.
- We comply with Article 13 of the GDPR, providing you with information before processing personal data commences.
- We enable and support you in exercising and fulfilling your rights according to data protection and GDPR.
Scope of Personal Data and Processing Purposes
We process personal data that you provide us for the following reasons (to fulfill these purposes):
➤ Service provision, contract fulfillment: We need your email for contract fulfillment, such as sending access to an application, online courses, or product delivery.
➤ Accounting: If you are a customer, we require your personal data (billing information) to meet legal obligations for invoicing and tax record-keeping.
➤ Marketing – sending newsletters: We use your personal data (email and name), gender, click behavior in emails, and open frequency for direct marketing – sending business communications. If you are our customer, we do so based on legitimate interest because we reasonably assume you are interested in our updates, for up to 5 years. If you are not our customer, we send you newsletters only with your consent for up to 5 years. In both cases, you can revoke this consent using the unsubscribe link in each email.
➤ Advanced marketing based on consent: Only with your consent can we send you inspiring offers from third parties or use your email address for remarketing and targeted advertising on Facebook, for up to 5 years. You can revoke this consent at any time through our contact information.
➤ Photographic documentation, references, live events, workshops: We can only use your photos, references, feedback, etc., with your consent until you withdraw it. We retain your personal data for the duration of statutory limitation periods, unless the law prescribes a longer retention period, or we specify otherwise in specific cases.
Cookies
While browsing our website, we record your IP address, the duration of your visit, and the page from which you came. We consider using cookies for website traffic measurement and display customization as our legitimate interest because we believe it helps us offer better services. Cookies for advertising purposes will be processed only with your consent. You can disable the use of cookies on your computer.
Security and Protection of Personal Data
We protect personal data to the fullest extent using modern technologies commensurate with technological development. We treat your data as if it were our own. We have adopted and maintain all known technical and organizational measures to prevent misuse, damage, or destruction of your personal data.
Transfer of Personal Data to Third Parties
Our employees and collaborators have access to your personal data. For specific processing operations that we cannot manage independently, we use services and applications of processors who can protect data even better than us and specialize in that processing. The following are the providers:
- Operator of communication, web, and billing application
- Operator of email communication and customer support application
- Facebook, Google
- Accounting and tax advisors
- IT service and hosting providers, including cloud storage
- Customer support assistance providers
- Payment gateway providers
- Legal services and attorneys
- Printing and mailing services providers
- Partners collaborating with us on special customer events
In the future, we may decide to use additional applications or processors to streamline and improve processing. However, we assure you that in such cases, we will place at least the same security and processing quality requirements on processors as we do on ourselves.
Transfer of Data Outside the European Union
We process data exclusively in the European Union or in countries that provide an adequate level of protection based on the European Commission’s decision.
Your Rights Regarding Personal Data Protection
You have several rights in connection with personal data protection. If you wish to exercise any of these rights, please contact us via email at luc@luciebibova.com.
- Right to information: This information page already fulfills this right.
- Right to access: You can ask us at any time, and within 14 days, we will provide you with information about what personal data we process and why.
- Right to rectification: If anything changes for you or you find your personal data to be outdated or incomplete, you have the right to update and change your personal data.
- Right to restrict processing: You can use this right if you believe we are processing your inaccurate data, you think we are processing unlawfully, but you do not want to delete all data, or you have raised an objection to processing. You can limit the scope of personal data or processing purposes (e.g., unsubscribing from newsletters limits processing for sending business communications).
- Right to data portability: If you want to take your personal data and transfer it to someone else, we will follow the same procedure as for the right of access, but we will provide information in machine-readable format. We need at least 30 days for this.
- Right to erasure (right to be forgotten): We do not want to forget you, but if you wish, you have the right to be forgotten. In that case, we will erase all your personal data from our system and from the systems of all subprocessors and backups. We need 30 days to ensure the right to erasure. In some cases, we are bound by legal obligations and must retain tax documents for a statutory period. In such cases, we will delete all personal data not subject to other legal obligations. We will inform you via email about the completion of the erasure.
- Complaint to the Office for Personal Data Protection: If you feel that we are not handling your data in accordance with the law, you have the right to file a complaint with the Office for Personal Data Protection at any time. We would appreciate it if you inform us first about your concerns so we can take action and correct any mistakes.
- Unsubscribing from newsletters and business communications: We send emails with inspiration, articles, products, and services based on our legitimate interest if you are our customer. If you are not yet a customer, we send emails only with your consent. In both cases, you can stop receiving our emails by clicking the unsubscribe link in each email.
Confidentiality
We assure you that our employees and collaborators processing your personal data are obligated to maintain confidentiality about personal data and security measures, the disclosure of which would endanger the security of your personal data. This confidentiality continues even after our contractual relationship ends. Your personal data will not be disclosed to any third party without your consent.