Privacy Policy

If you are my customer, newsletter subscriber, or website visitor, you are entrusting me with your personal data. I am responsible for protecting and securing it.

Please familiarise yourself with this privacy policy, the principles I follow, and the rights you have under the GDPR (General Data Protection Regulation).

Who is the Data Controller?

I am Anna Hlavačková, residing at Sečská 1848/5, Prague 100 00, ID No.: 03721272, registered in the Trade Licensing Office of Prague 10, operating the website www.anna-poppel.com. 

I process your personal data as the data controller — that means I determine how your personal data will be processed, for what purpose, for how long, and I may also choose other processors to assist me with the processing.

Contact Information

If you wish to contact me during the data processing period, you can reach me at:

Email: contact@anna-poppel.com

Phone: +420 722 931 516

Declaration

I declare that, as the data controller of your personal data, I comply with all legal obligations required by applicable legislation, especially the Personal Data Protection Act and the GDPR. This means that:

• I will process your personal data only on the basis of a valid legal ground, primarily legitimate interest, fulfilment of a contract, legal obligation, or granted consent.
  
  

• In accordance with Article 13 of the GDPR, I fulfil the obligation to inform you before beginning the processing of personal data.
  
  

• I will enable and support you in exercising and fulfilling your rights under the Personal Data Protection Act and the GDPR.

Scope of Personal Data and Purposes of Processing

I process personal data that you voluntarily provide to me, and I do so for the following purposes:

• Provision of Services and Contract Fulfilment
  To fulfill our contract (e.g. providing access to applications and services, delivering online courses or eBooks, or supplying physical goods), I need your personal data in the following scope: name, surname, and email address.
  
  

• Accounting and Legal Compliance
  If you are a customer, I am legally obliged to process your billing information in order to comply with statutory requirements related to the issuance and record-keeping of tax documents.
  
  

• Marketing – Newsletter Distribution
  I process your email address, name, gender, and interaction data (e.g. what you click on in emails and when you usually open them) for the purpose of direct marketing, specifically sending promotional communications.
  If you are an existing customer, this processing is based on legitimate interest, as I reasonably assume you may be interested in my updates, for a period of up to 5 years from your last purchase.
  If you are not an existing customer, I will only send newsletters with your explicit consent, valid for 5 years from the date of consent.
  In both cases, you may withdraw your consent at any time by using the unsubscribe link included in every email.

• Testimonials

With your explicit consent, I may publish your testimonial on my website and social media. Published details may include your first name/initials, role/job title, and, if you agree, your photo or logo. You may withdraw consent at any time by emailing contact@anna-poppel.com; withdrawal is prospective (it does not require the recall of printed materials or third-party re-shares that I do not control).
Sources of testimonials include statements you send directly (e.g., email/form) or public posts you make on social media. I retain testimonials until consent is withdrawn or for up to 3 years from the end of our engagement, whichever occurs first, unless a longer period is required by law.

Cookies

When you browse my website, your IP address, the duration of your visit, and the referring website are recorded.
The use of first-party and third-party cookies for measuring website traffic and customising website display is considered a legitimate interest of the data controller, as I believe this enables me to provide you with better services.

Advertising cookies are processed only based on your consent.

You can also browse my website in a mode that does not allow the collection of personal data. The information collected via cookies does not enable me to identify you or any of your personal details (such as your name or contact information).
You can disable cookies on your device at any time.

I use the following services for cookie processing:

• Google Analytics – This service processes data in accordance with its own privacy policy. You can read more [here].
  
  

• Facebook Pixel – This service also processes data in line with its own privacy policy. You can read more [here].
  
  

Security and Protection of Personal Data

I protect personal data to the maximum extent possible using modern technologies appropriate to the current level of technical development. I safeguard your data as if it were my own.
I have implemented and continue to maintain all currently known technical and organisational measures to prevent the misuse, damage, or destruction of your personal data.

Sharing of Personal Data with Third Parties

My employees and collaborators may have access to your personal data. For specific data processing operations that I cannot perform myself, I use the services and applications of data processors who are specialists in their field and often provide even higher levels of data protection.

These include providers of the following platforms:

• MailerLite
  
  

• Facebook
  
  

• Google
  
  

• Simpleshop s.r.o.
  
  

• Stripe
  
  

In the future, I may choose to use additional applications or processors to further improve the efficiency and quality of data processing.
However, I assure you that in such cases, I will hold all new processors to the same high standards of security and data protection as I apply to myself.

Your Rights in Relation to Personal Data Protection

Under data protection law, you have a number of rights regarding your personal data.
If you wish to exercise any of these rights, please contact me via email at: contact@anna-poppel.com.

• Right to Information
  This right is fulfilled through this privacy policy, which provides information on the processing of your personal data.
  
  

• Right of Access
  You have the right to request confirmation of whether I am processing your personal data, and if so, which data and for what purpose. I will respond within 30 days.
  
  

• Right to Rectification
  If your personal data is outdated, incomplete, or incorrect, you have the right to request its correction or completion.
  
  

• Right to Restriction of Processing
  You can request a restriction on the processing of your data if:
  
  

  • you believe the data is inaccurate,
    
    

  • you believe the processing is unlawful but prefer restriction over deletion,
    
    

  • or if you have objected to processing and the objection is under review.
    You may also limit the scope of personal data or the purposes for which it is processed (e.g., by unsubscribing from newsletters, you restrict the processing purpose related to marketing).
    
    

• Right to Data Portability
  If you wish to obtain your personal data and transfer it to another controller, I will provide the data in a machine-readable format within 30 days, similar to a right of access request.
  
  

• Right to Erasure (Right to Be Forgotten)
  You also have the right to request the erasure of your personal data.
  Although I would be sad to "forget" you, I will fully respect this right. Upon request, I will delete all your personal data from my system and from the systems of any processors and backups I use. Please allow up to 30 days to fulfil this request.
  
  

In certain cases, I am legally obliged to retain specific data (e.g., issued tax documents must be kept for the period required by law). In such cases, I will delete all personal data not subject to legal retention.
You will be informed by email once the deletion process is complete.

Complaint to the Data Protection Authority

If you believe that your personal data is being handled in violation of the law, you have the right to file a complaint at any time with the Data Protection Authority (Úřad pro ochranu osobních údajů).
However, I would greatly appreciate it if you would contact me first with your concerns so I have the opportunity to address the issue and correct any potential mistakes.

Unsubscribing from Newsletters and Marketing Communications

If you are my customer, I send you emails with inspiration, articles, or information about products and services based on my legitimate interest.

If you are not yet a customer, I will only send such emails with your explicit consent.
In both cases, you may unsubscribe at any time by clicking the unsubscribe link included in every email.

Confidentiality

Please be assured that all employees and collaborators who may process your personal data are bound by a duty of confidentiality regarding personal data and any security measures, the disclosure of which could compromise the protection of your personal data.
This duty of confidentiality continues even after their contractual relationship with me has ended.
Your personal data will not be disclosed to any third party without your explicit consent.

These Privacy Policy Terms are effective as of September 2, 2025, and replace all previous versions of the Privacy Policy.