Privacy Policy

This is an English translation of the Czech original, provided for convenience. In the event of any inconsistency, the Czech version prevails.

1. Controllers and who is responsible for what

1.1 This document explains how we process the personal data of customers, clients, event participants and visitors to the websites www.healandglow.cz, www.hanavolfova.cz, www.hanavolfova.com and hanavolfova.podia.com (the “Website”), and what rights you have.

1.2 There are two controllers, and each is responsible for the data relating to its own products and services:

1.3 The same contact details apply to both controllers: info@hanavolfova.cz, or by post to Korunní 2569/108G, 101 00 Praha 10. If you do not know which controller processes your data, simply write to this e-mail address and we will handle your request.

1.4 Processing is governed by Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data. We have not appointed a data protection officer, as we are not required to do so by law.

2. What data we process

2.1 Depending on how you are in contact with us, we process in particular:

• identification and contact data: first name, surname, e-mail, telephone, address and, where applicable, Company ID (IČO) and VAT ID (DIČ),
• data for individual work: date and, where applicable, time and place of birth, if you provide them in connection with a consultation, mentoring or a personalised recording,
• order and payment data: products purchased, invoices, payment method, instalment status (we do not see card numbers; they are processed by the payment gateway),
• account and members’ area data: login e-mail, progress in the programme, comments and posts,
• communications: e-mails, messages and answers in questionnaires and application forms,
• recordings: image, voice and name, if you take part in a live online event with your camera or microphone switched on (live events are recorded; you are informed of this and confirm it when purchasing a ticket), and photographs and videos from offline events,
• testimonials and reviews that you send us yourself or publish publicly (e.g. on Google or Facebook); for reviews on the Website we state only your first name and, where applicable, the initial of your surname, and we will remove a review without undue delay at your request,
• technical data: IP address, information from cookies and about behaviour on the Website (see Article 5).

2.2 Health data. Before an individual consultation, mentoring or individual breathwork session, Hana Volfová may ask you to complete an intake questionnaire. It also contains questions about your physical and mental health, medication, pregnancy or care by a specialist. This is a special category of personal data. We process it:

• only on the basis of your explicit consent (Article 9(2)(a) GDPR), which you give by ticking a box in the questionnaire,
• only to the extent that you voluntarily provide it, and solely so that the session is safe and tailored to you,
• with access restricted to Hana Volfová; we do not share it for marketing purposes or with anyone else.

You may withdraw your consent at any time by e-mail. Withdrawal does not affect processing carried out before it.

2.3 We do not intentionally process other special categories of data (e.g. concerning origin, religion, sexual orientation or political opinions). If you share such data yourself (e.g. in an e-mail or in the community), we will use it only to reply to your message.

2.4 Our products and services are intended for persons over 18 years of age.

3. Purposes, legal bases and retention periods

3.1 We process data only for the following purposes and only for as long as necessary:

3.2 You may unsubscribe from e-mails at any time using the link in the footer of each e-mail. If you do not wish to be seen or heard on the recording of a live event, keep your camera and microphone switched off and use only your first name or a nickname in the chat.

3.3 We do not make automated decisions about you that have legal effects. We may send e-mails based on what you have purchased or clicked on (standard segmentation), which has no legal effects.

4. Recipients, tools and transfers outside the EU

4.1 We do not sell data. We transfer it only to the extent necessary to processors who provide us with technical services, on the basis of a data processing agreement:

4.2 Data may also be received by accounting, tax and legal advisers (bound by confidentiality) and by public authorities where required by law.

4.3 Transfers outside the EU. Some tools process data in the USA or other countries outside the EU. This takes place only where adequate protection is ensured: by an adequacy decision of the European Commission (including the EU-US Data Privacy Framework) or by standard contractual clauses. On request, we will tell you which safeguard applies to a particular tool.

4.4 Health data from questionnaires is stored in Tally and, as a notification of a new questionnaire, in Hana Volfová’s e-mail inbox. It is not transferred to newsletter, advertising or AI tools.

5. Cookies and measurement

5.1 The Website uses cookies and similar technologies:

• necessary (login to the members’ area, shopping cart, security, storing your cookie choice) without consent, because the Website does not function without them,
• analytical (Google Analytics) for traffic measurement, only with your consent,
• marketing (Meta pixel) for measuring the effectiveness of advertising and displaying relevant advertising on Facebook and Instagram, only with your consent.

5.2 You give or refuse consent in the banner on your first visit to the Website, and you may change it at any time in the cookie settings (link in the footer) or in your browser. Refusal does not affect your ability to make purchases.

5.3 For marketing purposes on social networks (Meta), we are joint controllers with Meta to the extent of data collection by the pixel; further processing is governed by Meta in accordance with its own policies.

6. Security and your rights

6.1 We protect data by technical and organisational measures appropriate to its nature: secure login with two-factor authentication, encrypted transmissions, restricted access and the selection of trustworthy processors. Only Hana Volfová has access to health data.

6.2 You have the right:

• of access to your data and to information about its processing,
• to rectification of inaccurate data or completion of incomplete data,
• to erasure, if the data is no longer needed, you withdraw your consent or the data has been processed unlawfully (except for data that we must retain by law, e.g. invoices),
• to restriction of processing, e.g. for the period during which the accuracy of the data is being verified,
• to portability of the data you have provided to us, in a machine-readable format,
• to object to processing based on legitimate interest; to direct marketing always with immediate effect,
• to withdraw consent at any time, without affecting processing carried out before the withdrawal,
• to lodge a complaint with the Office for Personal Data Protection (ÚOOU), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.

6.3 Send your request to info@hanavolfova.cz. We will respond without undue delay and no later than within 1 month; in complex cases this period may be extended by a further 2 months, of which we will inform you in good time. If we have doubts about your identity, we may ask you to verify it.

6.4 If a security breach occurs that could pose a high risk to your rights, we will inform you of it without undue delay.

7. Final provisions

7.1 We may update this document, e.g. when tools or legislation change. The current version is always available on the Website; we will inform you of material changes by e-mail.

7.2 This information is effective from 1 November 2026 and replaces the version effective from 1 January 2026.