Privacy policy

This page explains how we process personal data when you visit our website, enquire about studying with us, contact the school or register for an open day.

Who is responsible for your data

The data controller is Anglicko-české gymnázium AMAZON, s.r.o., company registration number 28228235, Rytířská 406/10, 110 00 Prague 1, Czech Republic. You can contact us at info@acga.cz, on +420 224 234 826 or through Czech data box g4tmigk.

Our data protection officer is Langmeier & Co., advokátní kancelář s.r.o., email poverenec@acga.cz, telephone +420 222 200 250. Please contact the officer with privacy questions or to exercise your rights.

What we collect and why

Study enquiries and correspondence: we use your name, email address and any phone number provided in the contact form to respond to your study enquiry and follow up. Further correspondence also involves processing the messages you send us. This is based on our legitimate interest in handling enquiries under Article 6(1)(f) GDPR. Specific steps towards a study agreement taken at your request are based on Article 6(1)(b) GDPR.
Open days: we use the applicant’s full name, the parent or guardian’s email address, the chosen date and any optional phone number to reserve a place, arrange your visit and send related information. The legal basis is our legitimate interest in organising the visit you have requested, under Article 6(1)(f) GDPR.
Transfers: we process the applicant’s full name, the parent or guardian’s email address, any optional phone number, transfer application, motivation letter and school reports for the last two completed years you submit to assess your request and discuss the next steps. Steps taken at your request before entering a study agreement are based on Article 6(1)(b) GDPR. When conducting statutory proceedings and maintaining school records, we meet legal obligations under Czech Education Act No. 561/2004 Coll., based on Article 6(1)(c) GDPR.
Website operation and security: connecting to the server involves processing technical information, including your IP address, request time, requested page and browser information. Form protection uses a short-lived pseudonymous identifier derived from the IP address. Our purpose and legitimate interest under Article 6(1)(f) GDPR are to operate the website securely and prevent misuse.
Privacy preferences and external content: we store your cookie preferences and a record of your choice. Loading the optional external map is based on your consent under Article 6(1)(a) GDPR. See our cookie policy for details.

We receive information directly from you or from a parent or guardian acting for an applicant. Form submissions also record the time, language and privacy notice version. Required fields are needed to handle the relevant request; the form cannot be submitted without them. Phone numbers are optional. The forms do not include a free-text message field. Do not include information in your attachments that is unnecessary for assessing the transfer, particularly unrelated health information.

Handling an open day registration, study enquiry or transfer application does not depend on newsletter consent or acknowledgement of this notice. Processing for these purposes relies on the legal bases described above. Submitting a form alone does not give consent to marketing. Newsletter subscriptions require a separate, optional choice and confirmation by email. This website does not carry out profiling or automated decision-making with legal or similarly significant effects.

If you choose to subscribe in the open day or study enquiry form, we use your email address to send the newsletter of Anglicko-české gymnázium AMAZON, s.r.o. with news about the school, studying and school events. The legal basis is your consent under Article 6(1)(a) GDPR and prior consent to commercial communications under Section 7(2) of Czech Act No. 480/2004 Coll. Refusing or withdrawing consent does not affect your open day registration, study enquiry or transfer application.

We send a verification link to the supplied email address and activate the subscription only after you confirm on the page it opens. We record the email address, language, request source, subscription status, request, confirmation and end times, and the consent and privacy information shown when you subscribed. We do not copy the applicant’s name, phone number or transfer documents into the newsletter records or create marketing profiles. For open day registrations, the subscription applies to the parent or guardian’s contact email.

You can withdraw consent at any time through the link in each newsletter or by emailing info@acga.cz. Unsubscribing is free and does not require an account. It applies to subscriptions from either form. Withdrawal does not affect the lawfulness of earlier processing.

We delete unconfirmed requests after 7 days. A subscription lasts until you withdraw consent, for at most 3 years after confirmation; we then end it and require new consent for a further subscription. We keep evidence of confirmed consent and its termination for at most 3 years after the subscription ends to demonstrate lawful sending and defend legal claims, based on our legitimate interest under Article 6(1)(f) GDPR, then delete it. We retain a minimal fingerprint of an unsubscribed email address while operating the newsletter to prevent further unsolicited messages and meet our obligations under Section 7 of Czech Act No. 480/2004 Coll. and Article 6(1)(c) GDPR; it is not used for marketing. Resubscribing requires a new voluntary request and confirmation.

Who can access the information

Authorised school staff access information according to their responsibilities. Hosting, email and IT service providers supporting the website and our professional advisers may process it to the extent necessary for their work. Information is provided to public authorities where required by law. Form attachments and registration exports are not publicly accessible and require authorised access.

If you allow external maps, technical information is sent directly to the UK-based OpenStreetMap Foundation. The map provider describes processing in the United Kingdom and the Netherlands and a worldwide server network for map tiles. Its policy explains this processing and how to exercise your rights: OpenStreetMap Foundation – Privacy Policy. The embedded map does not load without consent.

How long we retain information

We keep enquiry details while handling the enquiry and related follow-up correspondence.
Open-day registrations are used until the event takes place or is cancelled and related organisational matters have been resolved.
Transfer documents are retained while assessing the request and completing the next steps. Where they become part of school records, retention follows applicable law and the school’s records and disposal rules.
Information may be kept longer where necessary to meet a legal obligation or establish, exercise or defend legal claims, for the relevant limitation period or the duration of a dispute. Once the purpose and these grounds no longer apply, we delete the information.
Privacy preferences are valid for 180 days, and the server record of a choice is retained for 180 days. The request-limiting identifier is valid for no more than 20 minutes. Operational logs are used for as long as needed to assess operation and resolve any security incident.

Your rights

Subject to the conditions in the GDPR, you may request access and a copy of your data, rectification, erasure or restriction of processing. You may object to processing based on legitimate interests. Data portability applies to automated processing based on consent or a contract. You can withdraw consent to loading the external map at any time in the cookie settings, without affecting the lawfulness of processing before withdrawal.

Send your request to poverenec@acga.cz or the school’s postal address. If there are reasonable doubts about your identity, we may request verification to avoid disclosing your information to someone else. We normally respond within one month and will explain any lawful extension within that period.

You may also lodge a complaint with the Czech Office for Personal Data Protection. Change your optional-service preferences at any time using the Cookies button at the bottom left or our cookie policy page.