What I know about you and why

Aleš Kocián, company ID 73090301, registered at Ortenovo náměstí 929/31, 170 00 Praha 7, Czech Republic. Write to me at ales@kocianales.cz. Use the same address to exercise any of the rights below.

From your message I learn your name, e-mail, possibly a phone number and what you wrote. It reaches me by e-mail and I use it to reply and arrange a session. You aren't signed up for anything. If I ever start sending something regularly, you'll sign up for that separately and yourself.

Star ratings are anonymous. To stop one person voting twice, only a fingerprint made from the address and the article is stored, and the address can't be worked back from it. The number of people who opened and finished an article is counted too, only as daily totals.

A comment is stored with the name you enter and published once I approve it. I do not ask for an e-mail or anything else. If you want a comment taken down, write to me.

The booking is stored in the system I work with: your name, contact details and the time of the session. You get a confirmation link by e-mail. Without confirmation the slot frees itself within a day and the data around it loses its purpose.

So that I don't offer you a time I can't make, the system looks into my Google calendar, and only at when I'm busy. Event titles are never read. Confirmed sessions are written into the calendar so they don't clash.

There's more of it here and it's more sensitive. I keep body measurements, test results, training plans and notes from sessions. That includes what you tell me about your health: injuries, pain, limitations, possibly a report from your doctor that I build the training around. Under the GDPR these are special category data and they're handled more strictly than a name and a phone number.

I process them on the basis of your explicit consent, which you sign on paper or give in the portal. You get the full wording beforehand and keep it among your documents in the portal. Consent can be withdrawn at any time and the withdrawal applies going forward.

Only you and I can get into the portal. Clients can't see each other's data and nothing from the portal is published anywhere, neither testimonials nor photos, without your explicit permission.

The portal remembers the type of device (iPhone, Android or computer) and the time of each sign-in. I use it to send you instructions for your phone.

Nobody I would hand it to for their own purposes. There are, however, services the whole thing runs on, and those can reach it technically:

• Cloudflare, Inc. Running the website and the portal, and file storage. Client documents sit on storage with the location enforced within the European Union.
• Resend. Sending e-mails, that's booking confirmations or notifications about a new plan.
• Google. My calendar, which is read for availability and where confirmed sessions are written.

All of them process the data solely to keep the service running and under a data processing agreement.

For as long as we train together, and after that only for as long as necessary. Messages from the form that never turned into cooperation have no reason to stay.

The website has no advertising code, doesn't track you across other sites and shows no consent banner, because there's no reason for one. The portal uses a single cookie, for signing in. Without it you would be logged out after every click.

The site only remembers your language, light or dark mode and which articles you have read. Visits and article reads are counted as plain numbers, with no cookies and nothing about you.

Write to me any time. You have the right to:

• know what data I keep about you and have it corrected,
• have it erased or its processing restricted,
• receive it in a format you can take elsewhere,
• withdraw consent and raise an objection,
• file a complaint with the Czech Data Protection Authority if my answer does not satisfy you.

I answer requests within a month, usually much sooner. You don't need to give a reason.