Privacy Policy

This Privacy Policy describes how trenfeld collects, uses, and protects your personal information. We are committed to protecting your privacy and handling your data responsibly. This policy applies to all visitors and users of our website and services related to watercolour landscape painting courses and classes.

Who We Are

We operate as a watercolour painting course provider based in Brno, specializing in beginner watercolour classes, Moravian landscape painting techniques, and colour mixing instruction. As the data controller, we determine how your personal information is collected and used. We take responsibility for ensuring your data is processed fairly and transparently in accordance with applicable data protection regulations.

Information We Collect

We collect information in several ways:

Contact Form Data: When you inquire about courses, register for classes, or contact us, we collect your name, email address, phone number, and any messages you submit.
Course Registration: For course participants, we collect registration details including contact information, course preferences, and payment information processed through secure third-party providers.
Usage Data: We automatically collect information about how you interact with our website, including pages visited, time spent, and technical information about your device and browser.
Cookies: We use cookies and similar tracking technologies to improve your browsing experience and understand how our website is used.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: When you voluntarily submit contact forms or subscribe to our communications, we process your data with your explicit consent.
Legitimate Interest: We use website usage data to improve our services, enhance user experience, and maintain website security.
Contractual Necessity: For course participants, we process information necessary to fulfill our service agreements and provide the courses you have enrolled in.
Legal Obligation: We may process data when required by applicable law or regulatory requirements.

How We Use Your Information

We use the information we collect for the following purposes:

Responding to your inquiries and providing information about our courses
Processing course registrations and managing participant enrollment
Delivering course materials and class notifications to enrolled students
Processing payments and managing course-related transactions
Improving our website functionality and user experience
Analyzing website traffic and user behavior to optimize our services
Sending marketing communications if you have opted in to receive them
Maintaining website security and preventing fraudulent activity
Complying with legal obligations and protecting our rights

Data Retention

We retain your personal data for specific periods based on the type of information and its purpose:

Contact Form Inquiries: Messages and associated contact data are retained for up to 24 months following your last interaction, allowing us to reference previous communications and course interests.
Course Registration Data: Information for enrolled participants is retained for the duration of the course plus 12 months thereafter for administrative and quality assurance purposes.
Website Analytics and Usage Data: Aggregated analytics data is retained for up to 14 months to track website performance and user behavior trends.
Cookies: Most cookies expire after 12 months, though session cookies are deleted when you close your browser.
Server Logs: Technical server logs containing IP addresses and access information are retained for up to 12 months for security and troubleshooting purposes.
Payment Information: We do not store full payment details; payment processors retain this information according to their security standards and regulatory requirements.

Your Rights

You have the following rights regarding your personal data:

Right of Access: You can request to see what personal data we hold about you.
Right to Rectification: You can request that we correct inaccurate or incomplete information.
Right to Erasure: You can request deletion of your data in certain circumstances, subject to our legal obligations.
Right to Restrict Processing: You can request that we limit how we use your information.
Right to Data Portability: You can request a copy of your data in a portable format.
Right to Object: You can object to certain types of processing, including marketing communications and profiling.
Rights Related to Automated Decision-Making: You have rights regarding automated processing and profiling.

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days or as required by law.

Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us recognize you and improve our services. We use both essential cookies necessary for website functionality and optional cookies for analytics and user experience improvement. You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect website functionality. For detailed information about cookies, please refer to our separate Cookie Policy.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure server infrastructure, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Third-Party Services

Our website may use third-party services for analytics, payment processing, and other functions. These service providers are contractually obligated to protect your data and use it only for specified purposes. We are not responsible for their privacy practices. We recommend reviewing their privacy policies. We do not sell or share your personal data with unrelated third parties for marketing purposes.

Supervisory Authority

If you believe we have violated your data protection rights or have concerns about how we process your information, you have the right to lodge a complaint with the competent data protection authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů). You can file a complaint directly with them without prejudice to any other administrative or judicial remedy available to you.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by updating the "Last updated" date at the top of this policy. Your continued use of our website following any changes constitutes your acceptance of the updated policy. We encourage you to review this policy regularly to stay informed about how we protect your information.