Privacy policy
This page explains how we process personal data when you visit our website, enquire about studying with us, contact the school or register for an open day.
Who is responsible for your data
The data controller is Anglicko-české gymnázium AMAZON, s.r.o., company registration number 28228235, Rytířská 406/10, 110 00 Prague 1, Czech Republic. You can contact us at info@acga.cz, on +420 224 234 826 or through Czech data box g4tmigk.
Our data protection officer is Langmeier & Co., advokátní kancelář s.r.o., email poverenec@acga.cz, telephone +420 222 200 250. Please contact the officer with privacy questions or to exercise your rights.
What we collect and why
- Enquiries and correspondence: we use your name, email address, any phone number you provide and your message to respond and follow up. This is based on our legitimate interest in handling enquiries under Article 6(1)(f) GDPR. Specific steps towards a study agreement taken at your request are based on Article 6(1)(b) GDPR.
- Open days: we use the applicant’s name, contact email, chosen date and any optional phone number or note to reserve a place, arrange your visit and send related information. The legal basis is our legitimate interest in organising the visit you have requested, under Article 6(1)(f) GDPR.
- Transfers: we process the contact details, application, motivation letter and school reports you submit to assess your request and discuss the next steps. Steps taken at your request before entering a study agreement are based on Article 6(1)(b) GDPR. When conducting statutory proceedings and maintaining school records, we meet legal obligations under Czech Education Act No. 561/2004 Coll., based on Article 6(1)(c) GDPR.
- Website operation and security: connecting to the server involves processing technical information, including your IP address, request time, requested page and browser information. Form protection uses a short-lived pseudonymous identifier derived from the IP address. Our purpose and legitimate interest under Article 6(1)(f) GDPR are to operate the website securely and prevent misuse.
- Privacy preferences and external content: we store your cookie preferences and a record of your choice. Loading the optional external map is based on your consent under Article 6(1)(a) GDPR. See our cookie policy for details.
We receive information directly from you or from a parent or guardian acting for an applicant. Form submissions also record the time, language and privacy notice version. Required fields are needed to handle the relevant request; the form cannot be submitted without them. Phone numbers and notes are optional. Please do not include sensitive information unrelated to your request in a note.
Acknowledging this notice is not consent to marketing. We do not use form submissions to send newsletters. This website does not carry out profiling or automated decision-making with legal or similarly significant effects.
Who can access the information
Authorised school staff access information according to their responsibilities. Hosting, email and IT service providers supporting the website and our professional advisers may process it to the extent necessary for their work. Information is provided to public authorities where required by law. Form attachments and registration exports are not publicly accessible and require authorised access.
If you allow external maps, technical information is sent directly to the UK-based OpenStreetMap Foundation. The map provider describes processing in the United Kingdom and the Netherlands and a worldwide server network for map tiles. Its policy explains this processing and how to exercise your rights: OpenStreetMap Foundation – Privacy Policy. The embedded map does not load without consent.
How long we retain information
- We keep enquiry details while handling the enquiry and related follow-up correspondence.
- Open-day registrations are used until the event takes place or is cancelled and related organisational matters have been resolved.
- Transfer documents are retained while assessing the request and completing the next steps. Where they become part of school records, retention follows applicable law and the school’s records and disposal rules.
- Information may be kept longer where necessary to meet a legal obligation or establish, exercise or defend legal claims, for the relevant limitation period or the duration of a dispute. Once the purpose and these grounds no longer apply, we delete the information.
- Privacy preferences are valid for 180 days, and the server record of a choice is retained for 180 days. The request-limiting identifier is valid for no more than 20 minutes. Operational logs are used for as long as needed to assess operation and resolve any security incident.
Your rights
Subject to the conditions in the GDPR, you may request access and a copy of your data, rectification, erasure or restriction of processing. You may object to processing based on legitimate interests. Data portability applies to automated processing based on consent or a contract. You can withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Send your request to poverenec@acga.cz or the school’s postal address. If there are reasonable doubts about your identity, we may request verification to avoid disclosing your information to someone else. We normally respond within one month and will explain any lawful extension within that period.
You may also lodge a complaint with the Czech Office for Personal Data Protection. Change your optional-service preferences at any time using the Cookies button at the bottom left or our cookie policy page.