Privacy Policy and Cookies
Effective from 19 September 2026
1. Who is the data controller
The controller of personal data processed in connection with the website https://muj-kurz.cz and the sale of the course “What You Need to Know Before You Start Programming with AI” is Václav Kvasnička, registered address Polední 24, 147 00 Praha 4, Czech company ID (IČO): 67751601. For any privacy-related questions, contact us at info@muj-kurz.cz.
2. What data we process
- Email address - to create your account, send you a sign-in link (magic link), and communicate about your order.
- Billing details (name, address, tax ID) - only if you provide them at checkout, to issue a tax document.
- Order and payment data - date, amount, payment status, and the Stripe transaction identifier. We never process or store your card number - only the Stripe payment gateway has access to it.
- Password - if you set one in the member area, we only store an irreversible hash of it, never the password itself.
- Contact form - the email address, subject and message text you write to us.
- IP address and timing of sign-in attempts - to protect against abuse (password guessing, magic-link abuse); kept only for a short time.
- Website visit data (analytics) - which pages you view, which device and browser you use and - only if you give consent in the cookie banner - a pseudonymous identifier stored in a cookie. Without your consent no analytics cookie is stored and no identifiers are sent; Google receives only anonymous technical data about the visit (see section 6).
3. Why we process this data (legal basis)
- Processing your order, granting course access, and invoicing - performance of a contract (Art. 6(1)(b) GDPR).
- Issuing and retaining accounting records - legal obligation under Czech accounting law (Art. 6(1)(c) GDPR).
- Answering your enquiry from the contact form - steps prior to entering into a contract / legitimate interest in replying to enquiries (Art. 6(1)(b) and (f) GDPR). We keep messages for as long as needed to handle the enquiry and a reasonable period afterwards in case of follow-up.
- Protecting against sign-in abuse (rate limiting) - legitimate interest in website security (Art. 6(1)(f) GDPR).
- Visitor statistics (Google Analytics) - your consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll.). You can withdraw your consent at any time (see section 6) without affecting processing carried out before the withdrawal.
4. How long we keep it
Accounting records (invoices) are kept for the period required by Czech accounting and VAT law (typically 10 years). Account data is kept for as long as your course access is valid, plus a reasonable period after; on request we will delete your account earlier unless we are legally required to retain accounting records. Sign-in attempt records are automatically deleted within minutes to hours of being created.
5. Who we share data with
We never sell your data to third parties. We use the following processors/recipients:
- Stripe - the payment gateway processing your card payment and any billing details entered at checkout.
- Google (reCAPTCHA) - protects the sign-in and contact forms against automated attacks. On the sign-in page and once you open the contact form, your IP address, technical browser data and on-page behaviour are sent to Google (no clicking required), which evaluates them under its own privacy policy. The legal basis is our legitimate interest in website security.
- Google (Google Tag Manager, Google Analytics) - measuring website traffic. Google Tag Manager is loaded on every visit, so Google receives your IP address and technical browser data; analytics cookies and identifiers, however, are used only if you give consent. The operator is Google Ireland Limited; data may also be transferred to the USA (Google participates in the EU-US Data Privacy Framework). See Google's privacy policy.
- Our web hosting provider (VAS-SERVER.CZ), which hosts the website and database.
- Our email service provider, used to send transactional emails (sign-in links, order confirmations).
6. Cookies
Cookies are small files that a website stores in your browser. We use two kinds.
Strictly necessary (no consent required)
Sign-in and form security would not work without them, so storing them does not require your consent under applicable EU/Czech ePrivacy rules.
| Cookie / storage | Purpose | Duration |
|---|---|---|
PHPSESSID | Keeps you signed in and preserves form state | Until browser close / 1 year for "stay signed in" |
_nss | Technical secure-connection flag | Session |
_GRECAPTCHA (Google, domain google.com) | Protects the sign-in and contact forms against bots (reCAPTCHA) | 6 months |
cookieConsent (browser storage) | Remembers your choice in the cookie banner | Until changed or cleared |
Analytics (only with your consent)
If you choose "Accept all" in the cookie banner, we load Google Tag Manager, which runs visitor-traffic measurement (Google Analytics) and stores these cookies:
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes visitors for traffic statistics | 2 years |
_ga_<ID> | Keeps session state for traffic statistics | 2 years |
Google Tag Manager is loaded on every visit, but without your consent storage for analytics is denied (Google Consent Mode): no analytics cookies are stored and Google Analytics receives no identifiers, only anonymous technical data about the visit (page address, referring site, browser and device type, IP address), from which it estimates overall traffic. You can give or withdraw consent at any time with the button below or the "Cookies" link in the site footer; when you withdraw, we delete the analytics cookies.
The website also loads fonts from Google Fonts
(fonts.googleapis.com, fonts.gstatic.com)
and libraries (Bootstrap) from the jsDelivr public CDN. Loading
the page therefore also sends your IP address to these
providers - this is a technical requirement to display the page,
not cross-site tracking.
7. Your rights
Regarding your personal data, you have the right to:
- access the data we process about you,
- correct inaccurate data,
- request erasure (unless we are legally required to retain it),
- restrict processing,
- data portability,
- object to processing based on legitimate interest.
To exercise any of these rights, email info@muj-kurz.cz. If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic - uoou.gov.cz - or with your own country's supervisory authority if you are located elsewhere in the EU.
8. Security
The website runs exclusively over secure HTTPS, passwords are stored as an irreversible hash, and database access is limited to essential systems only. Payment data is handled exclusively by the certified Stripe payment gateway.