Privacy Policy
By filling out a contact form, creating an account, subscribing to our commercial communications, or browsing our website, you allow Leadership Academy in Science, Pražská 636, 252 41 Dolní Břežany, IČO: 04128371, bank account no. 2111601449/2700 (the “Controller” or “Data Controller”), to use your personal data. In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), this page explains what information we collect about you, why and how we use it, what rights you have regarding our use of your personal data, and how you can exercise those rights with us under the GDPR.
What information do we collect?
We process your personal data in records we maintain, which may include: email address, full name, phone number, postal address, and any other information you enter on our site. We need these details to process your request.
In our user records, we process the personal data you provide when you submit forms or when you register or edit your profile. Maintaining a user database is in our legitimate interest. The database also lets individual users maintain and manage their profiles as part of the website registration process. Besides registration, we use this database to identify individuals when interacting with our customer service center, when handling marketing communications, when processing orders at pick-up points, and for marketing purposes (described below). We retain personal data for user-registration purposes for 5 years from the date of your last order.
To provide appropriate technical support for use of our website, we also store technical data about the device you use to access our site (the browser you use, the device you connect from, and your operating system). Providing technical support is in both our and your legitimate interests.
These technical details are part of our internal logs and are not used for any purpose other than providing technical support. For technical reasons, we keep them for as long as we process your personal data, and in any case we delete them no later than 5 years after the date of your last order.
How do we use data for marketing?
For marketing purposes, we process the contact details you provide when completing forms on our website or when subscribing to our commercial communications. We use these to send you commercial messages and to make those messages more relevant. We want our updates to be useful and inspiring, so it matters that we understand your reactions; we therefore keep feedback about those communications. You can unsubscribe from our commercial communications at any time directly via the link in any email. Once you completely unsubscribe (from all channels), we will no longer use your contact details to send commercial messages.
To make your browsing experience pleasant and to keep improving our services, we store data that helps us understand what you are specifically interested in and what you like about us. We don’t want to offer products you’re not interested in or that don’t fit your style. Instead, we want to highlight news about your favorite products or discounts in your preferred categories. For that reason, we may need to know, among other things, what you most often view on our website, what you order or purchase, and even what you return and why.
All personal data used for marketing is processed on the basis of our legitimate interest and is retained for 5 years from your last order. Because details about your specific interests, your preferences, and your feedback on the marketing messages we send may be considered more sensitive, we retain that preference/feedback data for 2 years from the date we receive it.
Who do we share data with?
We use your personal data exclusively for our internal purposes and only for the reasons stated above. However, we do not perform all related activities solely by ourselves—we also use third-party (specialist) service providers. We have contracts in place with these third parties to protect your data protection rights.
We may process your personal data within information, analytics, and marketing systems operated by third parties we use in our activities, such as:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Mailchimp / The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
We do not provide personal data to any third party for their own further processing.
Transfers to third countries
We use Mailchimp, which is based in the United States. The USA is a country that, according to decisions of the European Commission, may provide an adequate level of protection under certain frameworks. The Mailchimp platform provides appropriate safeguards and security for personal data and warrants that it processes personal data in line with GDPR principles.
We do not intend to transfer personal data to a third country or international organization beyond the above. However, some recipients we use (e.g., Google, LinkedIn, Facebook) may have servers located outside the EU, including in the United States. Companies based in the USA that have access to personal data may be certified under the relevant privacy framework (commonly referred to as the Privacy Shield in older materials) and are considered to provide an adequate level of protection.
Where do we store data?
Data is stored on backup servers operated by INTERNET CZ, a.s. – FORPSI, Ktiš 2, 384 03, Czech Republic. The data center’s security is fully GDPR-compliant; more information is available directly on the data center’s website.
Your GDPR rights and how to exercise them with us
Right of access & right to rectification
You may at any time ask us to confirm whether we process your personal data by emailing marketing@star-cluster.cz. If we do, and beyond the information in our Terms & Conditions, this Privacy Policy, and our Cookie Policy, we can also inform you which third parties have received or will receive your personal data. If we did not obtain your data directly from you, you have the right to any available information on the source.
If we process inaccurate personal data, please let us know at marketing@star-cluster.cz and we will correct it without undue delay. After registering on our website, you can also correct your own data by editing your profile. If you wish to add personal data you previously did not provide and such data is necessary for us to deliver our services, simply complete the relevant fields in your profile. Upon a written request to our customer service department, you may ask us to delete your user account and any personal data that is not necessary for further processing.
Right to object to processing
Even where we process your data based on our legitimate interests, you have the right to object, including to processing for direct marketing. You can do so by emailing marketing@star-cluster.cz. If you object, we will promptly assess—to the extent permitted by Act No. 101/2000 Coll. and other applicable laws—whether our legitimate grounds override your objections and how we will handle your data in the meantime. We will not continue processing your data unless we demonstrate compelling legitimate grounds.
Right to restriction of processing
You have the right to request that we restrict any processing of your personal data (including deletion), i.e., that we stop handling it, if:
- you inform us that the personal data we hold is inaccurate, until we verify its accuracy;
- the processing is unlawful and, instead of deletion, you request restriction via marketing@star-cluster.cz;
- we no longer need the data for providing our services, but you need it to establish, exercise, or defend legal claims; or
- you object to processing (see above), pending verification of whether our legitimate grounds override your interests.
Right to be forgotten (erasure)
If you determine that we are processing your personal data even though such processing is no longer necessary for the purposes for which it was collected; and/or you object as above and we cannot demonstrate overriding legitimate grounds; and/or the data is otherwise processed unlawfully—you have the right to request that we erase such personal data without undue delay after you notify us at marketing@star-cluster.cz. We may not erase the data, even upon your request, where processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, to perform a task carried out in the public interest, or to establish, exercise, or defend legal claims.
Right to data portability
If you request it by emailing marketing@star-cluster.cz, we will provide the personal data we process about you in a structured, commonly used, and machine-readable format (e.g., *.xls, *.csv, or similar). If you ask us to transmit your data to another controller, we will of course comply.
Right to unsubscribe from commercial communications at any time
If you no longer wish to receive our commercial messages, you can unsubscribe either by clicking the link included in every communication or by adjusting your preferences in the profile you created when registering on our website.
Right to withdraw consent at any time
If we ask for your consent to process personal data in connection with special promotional activities, you may withdraw that consent at any time without giving a reason. You can withdraw consent as described in the relevant promotion rules or by emailing marketing@star-cluster.cz.
Contact our Data Protection Officer (DPO)
Our DPO is Petr Solil, reachable at marketing@star-cluster.cz.
Right to lodge a complaint
If you believe we are not fulfilling our legal obligations regarding the processing of your personal data, please contact our customer care center first. If our colleagues are unable to assist, you have the right to contact the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) at Pplk. Sochora 727, 170 00 Praha 7–Holešovice, email posta@uoou.cz , or by any other method accepted by the authority. Further information is available at https://www.uoou.cz