Privacy Policy

This Privacy Policy describes how we process the personal data of visitors to www.educasoft.cz in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and other applicable data protection legislation.

1. Data Controller

The controller of your personal data is:

(hereinafter referred to as “we”, “Educasoft” or the “controller”).

2. What personal data we process

Contact form

If you contact us through the contact form, we process in particular your e-mail address, the content of your message and any optional preferences or selections you provide in the form.

The following technical and marketing information related to your website visit may also be recorded together with the form submission: the page from which the form was submitted, the landing page of your visit, traffic source and medium, advertising campaign or UTM parameters, referring page or website, date and time of submission and IP address.

This information helps us understand where people interested in our services come from and evaluate the effectiveness of our marketing channels. Form submissions are also technically processed and stored through the Webflow platform.

Newsletter

If you subscribe to our newsletter, we process in particular your e-mail address, information about your consent and any subsequent withdrawal of consent, the date and time of subscription or confirmation, technical information required to demonstrate consent, such as an IP address where recorded, and information about your interaction with our newsletters, in particular delivery, opens and link clicks.

We may also use this information for basic subscriber segmentation and to automate e-mail communication based on interactions with previous e-mails. We use SmartEmailing to manage and send our newsletters. Newsletter subscriptions use a double opt-in process: after submitting the form, you will receive a confirmation e-mail and your subscription will only become active once you confirm it using the link in that e-mail.

Website analytics and advertising

If you give us your consent through our cookie banner, we may process information about your use of the website, including device and browser information, IP address or another technical identifier, approximate location derived from technical information, pages visited, duration and course of the visit, interactions with individual elements of the website, traffic source and advertising campaign, and information about conversions.

For these purposes, we use in particular Google Analytics 4, Google Ads, Microsoft Clarity and the LinkedIn Insight Tag. Microsoft Clarity allows us to create aggregated website usage reports, heatmaps and session recordings showing interactions such as clicks, cursor movement and scrolling.

We use the LinkedIn Insight Tag to measure the performance of our LinkedIn campaigns, in particular to evaluate conversions, traffic referred from LinkedIn and advertising effectiveness. When the LinkedIn Insight Tag is used, information such as website visit data, device and browser information, IP address, traffic source, website interactions and technical identifiers stored through cookies or similar technologies may be processed. We use the LinkedIn Insight Tag only on the basis of your consent to marketing cookies.

We also use Google Search Console to evaluate the performance of the website in Google search results. It mainly provides aggregated information on search queries, impressions and clicks and is not used by us to individually track specific website visitors.

3. Purposes of processing

We use data obtained through the contact form to handle your enquiry, communicate with you, prepare a proposal where appropriate, take steps towards a possible contractual relationship, keep records of our communication and protect our legal claims.

We use information about traffic sources, campaigns and other circumstances surrounding form submissions to evaluate the effectiveness of our website and marketing activities.

We process newsletter subscriber data to send newsletters and marketing communications, evaluate their effectiveness and, where appropriate, segment subscribers and automate e-mail communication.

We process analytical information to understand how visitors use our website and to improve its content,
structure, usability and performance. We process marketing information to measure advertising campaign performance, evaluate conversions and optimise online advertising.

We may also process technical information for website security, spam and abuse prevention and the management of your cookie preferences.

4. Legal basis for processing

Where you contact us in relation to our services, we may process your personal data in order to take steps at your request prior to entering into a contract under Article 6(1)(b) GDPR.

For other contact communications, we may process personal data on the basis of our legitimate interests under Article 6(1)(f) GDPR, in particular our interest in responding to enquiries, keeping records of communications, understanding the sources of enquiries and protecting our legal claims.

We send newsletters and related marketing communications on the basis of your consent under Article 6(1)(a) GDPR. You may withdraw this consent at any time.

Analytical and marketing tools are used only on the basis of your prior consent provided through the cookie banner. Non-essential cookies are activated only after the corresponding consent has been given. Technical cookies that are strictly necessary for the operation of the website may be used without your consent.

5. Who may have access to personal data

Personal data may, to the extent necessary, be made available to our employees and contractors and to providers of technical services that we use to operate the website.

• Webflow, Inc. – website hosting and the processing and storage of form submissions.
• SmartSelling a.s. / SmartEmailing – newsletter subscriber database management, consent records and newsletter delivery.
• Google Ireland Limited and other Google group companies – Google Analytics 4, Google Ads, Google Search Console and, where used, Google reCAPTCHA.
• LinkedIn Ireland Unlimited Company – the LinkedIn Insight Tag, which we use to measure advertising campaign performance, evaluate conversions and perform related marketing analytics.
• Microsoft group companies – Microsoft Clarity.
• Usercentrics A/S – Cookiebot, which we use to manage and record cookie consent.
• Vimeo – provision of embedded video content.

Personal data may also be made available to providers of IT, e-mail or administrative services and to public authorities where disclosure is required by law.

6. Retention periods

Data obtained through the contact form is retained for the time necessary to deal with your enquiry and any subsequent communication, generally for no longer than 2 years from the last relevant communication, unless a contractual relationship or another legal reason requires a longer retention period.

Where a contract is concluded, related personal data may be retained for the time necessary to perform the contract, comply with legal obligations and protect legal claims.

Copies of newsletter registrations stored in Webflow are retained only for the time required to verify successful transfer to SmartEmailing and in any event for no longer than 6 months from submission.

Personal data in SmartEmailing is processed for the duration of your consent to receive our newsletter. After you unsubscribe, we will no longer send you marketing communications. A minimum record required to demonstrate the consent and its withdrawal or to ensure that communications are not sent to you again may be retained for the period necessary to comply with legal obligations and protect our rights.

For Google Analytics 4, we intend to configure retention of user-level and event data for a maximum of 14 months, where this is configurable for the relevant type of data.

Cookie consent information is retained for the period necessary to respect and demonstrate your choice. Cookiebot normally stores the relevant consent state for up to 12 months.

7. Transfers outside the European Economic Area

Some of the providers we use are part of international groups or operate infrastructure outside the European Economic Area, in particular in the United States.

Where personal data is transferred outside the EEA, such transfers take place only in accordance with the GDPR, in particular on the basis of a European Commission adequacy decision, Standard Contractual Clauses or other appropriate safeguards.

8. Cookies

We use technical cookies and, subject to your consent, analytical and marketing cookies and similar technologies.

For detailed information about the technologies used, cookie categories and your choices, please see our Cookie Policy.

You can change your choice at any time using the cookie icon button in the bottom left corner of every page or the consent change link in the Cookie Policy.

9. Your rights

Depending on the circumstances, you have in particular the right to request access to your personal data, request correction of inaccurate or incomplete data, request erasure, request restriction of processing, object to processing based on legitimate interests, request data portability where the statutory conditions are met, and withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You may exercise your rights by contacting us at info@educasoft.cz.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) if you believe that your personal data is being processed unlawfully.

10. Automated decision-making

We do not carry out automated individual decision-making that produces legal effects concerning you or similarly significantly affects you.

We may use basic automation or segmentation in our e-mail marketing based on interaction with previous e-mails. Such processing does not result in decisions producing legal or similarly significant effects.

11. Security of personal data

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or unauthorised alteration.

Access to personal data is limited to persons and service providers who require it to perform their duties.

12. Changes to this Privacy Policy

We may update this Privacy Policy in particular where the tools we use, our data processing practices or applicable legal requirements change.

The current version will always be available at www.educasoft.cz.

Effective from: 14 September 2026