Where it breaks Case studies How I work Services My Story
Book a call
← Back

Privacy Policy

01

Who is the data controller

The data controller is Eva Šťastná, Company ID (IČO) 75405075, registered at Luční Chvojno 48, 403 34 Ústí nad Labem, Czech Republic. For any matters concerning the processing of your personal data, you can contact me at eva@evastastna.com.

02

What data I process, for what purpose, and on what legal basis

a) Diagnostic test

Data processed: your answers to the diagnostic questions, the resulting profile, your name, email, company name, and role if provided to receive your result.

Purpose: evaluating the test, sending your result profile to your email, and my internal assessment of whether and how I can help you.

Legal basis: your consent given by completing and submitting the test (Art. 6(1)(a) GDPR).

b) Booking a call via Cal.com

Data processed: name, email, and any other information you provide when booking. This data is entered directly into the Cal.com system.

Purpose: arranging and conducting the call.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

03

Automated decision-making

Based on your answers, the diagnostic test assigns you one of four informational profiles. This does not constitute automated decision-making with legal effects or similarly significant impact within the meaning of Art. 22 GDPR - the result is purely informational, creates no rights or obligations, and serves as a basis for a potential follow-up conversation with me personally.

04

Who I share data with

To operate the website and provide my services, I use the following processors:

  • Resend (Resend, Inc., USA) - sending emails with diagnostic test results.
  • Cal.com (Cal.com, Inc., USA) - call booking and management. Data entered during booking is processed by Cal.com as an independent controller under its own privacy policy.
  • Vercel (Vercel Inc., USA) - website hosting.

I have a data processing agreement in place, in accordance with Art. 28 GDPR, with the processor that processes personal data on my instructions (Resend).

05

Transfers of data outside the EU/EEA

Resend and Vercel are companies headquartered in the USA. Transfers of personal data to the USA are safeguarded through Standard Contractual Clauses approved by the European Commission, or through the relevant provider's participation in the EU-US Data Privacy Framework where currently certified. Please refer to each provider's own privacy policy for the current transfer mechanism they rely on.

Cal.com also processes data entered during call booking in the USA, as an independent controller under its own privacy policy, available at cal.com.

06

How long I retain your data

Diagnostic test results are retained for as long as necessary to handle your inquiry, up to 24 months from the last contact, unless a contractual relationship is established between us. In that case, data is retained for the duration of the collaboration and thereafter as required by law (e.g. tax and accounting regulations, typically 5 years from the end of the relevant tax period).

Booking data is retained by Cal.com under its own policy; on my end, I retain only the data necessary to prepare for and conduct the call.

07

Your rights

You have the right to:

  • access your personal data,
  • correct inaccurate data,
  • request erasure of your data,
  • restrict processing,
  • data portability,
  • object to processing based on legitimate interest,
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

To exercise any of these rights, contact me at eva@evastastna.com.

08

Right to lodge a complaint

If you believe the processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority. In the Czech Republic, this is:

The Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
www.uoou.cz

If you reside in another EU member state, you also have the right to lodge a complaint with the supervisory authority in your own country.

09

Cookies

This website uses only technically necessary data stored in your browser (localStorage) - specifically, your saved language preference. This is not a cookie in the tracking sense and does not require consent under applicable privacy laws. The website does not use Google Analytics or any other third-party tracking or marketing tools.

10

Changes to this policy

I may update this policy from time to time, for example in connection with changes to the data I process or to applicable law. The current version is always available on this page.

Last updated: July 6, 2026