Privacy Policy
Processing of personal data
The controller of personal data in accordance with the GDPR is Vilém Pešek, with a registered office at Jaroslava Haška 831, Ledeč nad Sázavou, Czech Republic, ID: 29779677. Non-VAT payer in CZ. We take your privacy seriously. The personal data you provide to us when registering or using the EquiCourse services is processed in accordance with the GDPR and applicable Czech legislation, on the basis of contract performance and compliance with our legal obligations.
What data we collect
We collect only the data needed to run the service: your e-mail address, name, the nationality you choose at sign-up, the verification codes used to confirm your registration, your courses and their contents, and basic technical data (IP address, approximate country derived from it, browser and device type, log records). If you buy a subscription we also process billing data needed to issue tax documents, which we keep for 10 years as required by law; full card details are handled by the payment provider and we never see or store them. If you subscribe to the newsletter we process your e-mail address until you unsubscribe. To operate the service we use processors: Supabase, Inc. (database, authentication, hosting of your data), Stripe, Inc. (payments and subscription management), Resend Labs, Inc. (transactional e-mails and newsletter), Cloudflare, Inc. (delivery, security and approximate geolocation of the request) and Google Ireland Ltd. (Google Analytics — only with your consent). Because of Supabase, Stripe, Resend, Cloudflare and Google, some data is transferred to the USA on the basis of standard contractual clauses approved by the European Commission. We do not sell your data, do not use it for automated decision-making or profiling, and do not share it with anyone else unless required by law.
Legal bases and purposes
We process account and course data to perform our contract with you (Art. 6(1)(b) GDPR); billing and accounting data to comply with our legal obligations (Art. 6(1)(c)); security logs and abuse prevention on the basis of our legitimate interest (Art. 6(1)(f)); and the newsletter and analytics cookies only on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time.
How long we keep your data
Account, subscription and course data is kept for as long as your account exists and is deleted within 30 days of your deletion request. Accounting documents are kept for 10 years as required by law. Newsletter contacts are kept until you unsubscribe. Sign-up verification codes expire after 10 minutes. Technical logs are kept for a maximum of 12 months. Course drafts you have not saved yet stay only in your browser's local storage.
Data security
All communication runs over encrypted HTTPS, passwords are stored only as salted hashes, and access to the database is protected by row-level security so that each user can only reach their own data. Access to administration is limited to the provider.
Your rights
You have the right to access your data, and to its correction, erasure, restriction of processing, or to object. You can exercise your rights by email at info@equicourse.eu. If you believe that we are handling your data in breach of legal regulations, you also have the right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ).
Cookies and analytics
We use necessary technical cookies for the operation of the application, security, and to keep you signed in. Optional analytics tools for improving our services are only activated with your consent. You can find detailed settings on the Cookie settings page.