Skip to content

Policy · updated 11 October 2026

Privacy policy

How we handle your data – in line with the GDPR.

In short

  • Only what's neededThe details we need to sign you up for groups and events.
  • We never sell themWe share them only when the law requires it or with services that work for us.
  • You're in controlYou can see, correct or delete them at any time.
Contents · 12 parts
  1. 01Introduction
  2. 02Data controller
  3. 03What data we process
  4. 04Purposes of processing
  5. 05Legal bases for processing
  6. 06How long we keep data
  7. 07Your rights
  8. 08Sharing data with third parties
  9. 09Cookies and visitor statistics
  10. 10Data security
  11. 11Contact
  12. 12Policy updates

Introduction

Your privacy matters to us. This privacy policy explains how we collect, use and protect your personal data and your children's personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, known as the General Data Protection Regulation (GDPR).

Data controller

The controller of your personal data is:

Name
KST Academy, z.s.
Registered office
Švédská 279, Horní Předměstí, 541 01 Trutnov
Company ID (IČO)
05057752
E-mail
info@kst.academy
Phone
+420 721 110 694

What data we process

We collect and process only the data you give us or that is needed to sign up for sports groups or events:

  • About the parent (legal guardian) – first name, surname, e-mail (and that of the second parent, if given) and phone number.
  • About the child – first name, surname and Czech personal identification number (rodné číslo); for Kindergarten in Motion also the kindergarten and class, for groups a nickname and T-shirt size.
  • Payment and billing details – needed to pay the membership fee.
  • Messages – what you write to us in a sign-up form, the contact form or by e-mail.
  • Photos and videos – from training sessions, camps and events.

If you choose to tell us about your child's health (e.g. allergies), we use it only to keep them safe during training.

Purposes of processing

We process your personal data for the following purposes:

  • To sign up your child, organise training sessions and events, and communicate with parents.
  • To fulfil our contractual obligations (membership, payments).
  • To keep a register of members and apply for sports subsidies.
  • To send marketing communications (if you have given your consent).
  • To publish photos and videos on our website and social media (if you have given your consent).
  • To improve our services and website (anonymous visitor statistics).
  • To meet our legal obligations (e.g. accounting).

We do not make automated decisions about you and do not create profiles of you.

Legal bases for processing

We process your personal data on the basis of:

  • Performance of a contract – Article 6(1)(b) GDPR
  • Consent – Article 6(1)(a) GDPR
  • Compliance with a legal obligation – Article 6(1)(c) GDPR
  • Legitimate interest – Article 6(1)(f) GDPR, where necessary.

We need the details in the sign-up form to accept your child into a group – without them we cannot sign them up. You can withdraw your consent at any time by e-mail; this does not affect processing carried out before you withdrew it.

How long we keep data

We keep your personal data only for as long as strictly necessary:

  • To fulfil the purpose for which the data was collected (e.g. for the length of the child's membership).
  • Contact form enquiries for as long as needed to deal with them.
  • Data processed on the basis of consent until consent is withdrawn.
  • For as long as legal obligations apply (accounting records are archived for 10 years).

After this period the data will be securely deleted.

Your rights

You have the following rights:

  • Right of access

    You can ask for a copy of your personal data.

  • Right to rectification

    You can ask us to correct inaccurate data.

  • Right to erasure (“right to be forgotten”)

    You can ask us to delete data that is no longer needed.

  • Right to restriction of processing

    You can ask us to restrict processing in certain cases.

  • Right to data portability

    You can ask us to transfer your data to another controller.

  • Right to object

    You can object at any time to processing based on legitimate interest.

  • Right to withdraw consent

    You can withdraw your consent (e.g. to publishing photos) at any time.

  • Right to lodge a complaint

    With the Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 727/27, 170 00 Praha 7 (uoou.gov.cz), if you believe your right to the protection of personal data has been breached.

To exercise your rights, e-mail info@kst.academy. We will reply within one month at the latest.

Sharing data with third parties

We do not share your personal data with third parties, except where necessary:

  • To meet legal obligations (e.g. public authorities, subsidy providers, accountants).
  • Skupy – a team app for messages to parents and organising training (skupy.cz).
  • Vercel – website hosting and anonymous visitor statistics.
  • Resend – delivering submitted forms to our e-mail inbox.

All processing complies with the GDPR and is based on data processing agreements. Vercel and Resend may also process data in the USA – always under the EU–US Data Privacy Framework or the EU standard contractual clauses.

Cookies and visitor statistics

This website does not use advertising or tracking cookies, so we don't ask you about them.

  • Visitor statistics – are measured anonymously with Vercel Web Analytics, without cookies and without linking to any individual.
  • Light / dark mode – is remembered only by your browser and is never sent anywhere.

Data security

We protect your personal data with modern technology and strict organisational measures to prevent unauthorised access, alteration or loss of data.

Policy updates

This policy may be updated from time to time.

Last updated: 11 October 2026