Personal Data Protection – Academy Dobrohor

Personal Data Protection — academydobrohor.art

Last update: December 27, 2025

This document describes how the website academydobrohor.art (hereinafter referred to as the “Website”) processes users’ personal data in accordance with EU Regulation 2016/679 (GDPR) and related legislation.

1. Data Controller

Controller:
Zámek Dobrohoř – Academy Center, o.p.s.
Staré Město pod Landštejnem 160, 378 82 Staré Město pod Landštejnem
Company ID No.: 28384041
E-mail: info@academydobrohor.art

The Controller is the contact person for all questions regarding the processing of personal data.

2. Personal Data We Process

We only process data that visitors voluntarily provide or that is necessary for the operation of the Website:

first name and surname (if provided in the form)
e-mail address
telephone number (if provided)
content of the message/enquiry

Technical data related to the website visit:

IP address (shortened/anonymised)
browser and device information
cookies and analytical data

We do not process any special categories of personal data (sensitive data).

For Academy applications, the following additional data may be processed beyond the above:

permanent residence address
date of birth
gender
nationality
information contained in the CV submitted by the applicant
any additional information provided in the application under special requirements

3. Purpose of Personal Data Processing

Personal data are processed for the following purposes:

responding to an enquiry submitted via the contact form
– legal basis: legitimate interest/performance of a contractual relationship
organisation of courses, workshops, masterclasses, or events
– where the user submits an application
improving the functionality and security of the Website
website traffic analysis (if enabled)

Personal data is not used for unsolicited marketing.

4. Cookies and Analytics Tools

The Website may use:

necessary technical cookies (for proper website functionality)
preference cookies (e.g., language settings)
anonymised analytics (e.g., Google Analytics / Matomo)

User consent is required before storing non-essential cookies.

Further details are available in the Cookie Banner / Cookie Settings.

5. Data Retention Periods

Personal data is retained only for the necessary period:

communication via contact form — up to 12 months
participation in events/applications — according to statutory accounting and legal requirements
analytical data — according to the tool settings (in anonymised form)

After expiry of the retention period, the data are securely deleted or anonymised.

6. Disclosure of Personal Data to Third Parties

Data may be disclosed only to:

IT/web hosting providers
providers of analytics tools (if used)
contractual partners involved in event organisation

All processors handle the data in accordance with GDPR.

Personal data are not transferred to third countries outside the EU, unless stated otherwise.

7. Rights of Data Subjects

The user has the right:

to access their personal data
to rectification or completion
to the restriction of processing
to erasure (“right to be forgotten”)
to data portability
to object to processing
to complain with the Office for Personal Data Protection (www.uoou.cz)

Requests may be submitted via the Controller’s e-mail address listed above.

8. Personal Data Security

Personal data is protected through technical and organisational measures, in particular:

encrypted transmission (HTTPS)
restricted access to stored data
regular system updates

9. Changes to the Privacy Policy

This document may be updated in the event of changes in legislation or website operation. The current version is continuously published on this page.