Privacy policy

This page explains how we process personal data when you visit our website, enquire about studying with us, contact the school or register for an open day.

Who is responsible for your data

The data controller is Anglicko-české gymnázium AMAZON, s.r.o., company registration number 28228235, Rytířská 406/10, 110 00 Prague 1, Czech Republic. You can contact us at study@acga.cz, on +420 224 234 826 or through Czech data box g4tmigk.

Our data protection officer is Langmeier & Co., advokátní kancelář s.r.o., email poverenec@acga.cz, telephone +420 222 200 250. Please contact the officer with privacy questions or to exercise your rights.

What we collect and why

• Study enquiries and correspondence: we use your name, email address and any phone number provided in the contact form to respond to your study enquiry and follow up. Further correspondence also involves processing the messages you send us. This is based on our legitimate interest in handling enquiries under Article 6(1)(f) GDPR. Specific steps towards a study agreement taken at your request are based on Article 6(1)(b) GDPR.
• Open days: we use the applicant’s full name, the parent or guardian’s email address, the chosen date and any optional phone number to reserve a place, confirm your booking and handle necessary organisational communication. Optional information emails and reminders are described separately below. The legal basis is our legitimate interest in organising the visit you have requested, under Article 6(1)(f) GDPR.
• Transfers: we process the applicant’s full name, the parent or guardian’s email address, any optional phone number, transfer application, motivation letter and school reports for the last two completed years you submit to assess your request and discuss the next steps. Steps taken at your request before entering a study agreement are based on Article 6(1)(b) GDPR. When conducting statutory proceedings and maintaining school records, we meet legal obligations under Czech Education Act No. 561/2004 Coll., based on Article 6(1)(c) GDPR.
• Website operation and security: connecting to the server involves processing technical information, including your IP address, request time, requested page and browser information. Form protection uses a short-lived pseudonymous identifier derived from the IP address. Our purpose and legitimate interest under Article 6(1)(f) GDPR are to operate the website securely and prevent misuse.
• Privacy preferences and external content: we store your cookie preferences and a record of your choice. Loading the optional external map is based on your consent under Article 6(1)(a) GDPR. See our cookie policy for details.

We receive information directly from you or from a parent or guardian acting for an applicant. Form submissions also record the time, language and privacy notice version. Required fields are needed to handle the relevant request; the form cannot be submitted without them. Phone numbers are optional. The forms do not include a free-text message field. Do not include information in your attachments that is unnecessary for assessing the transfer, particularly unrelated health information.

Handling an open day registration, study enquiry or transfer application does not depend on consent to optional emails or acknowledgement of this notice. Processing for these purposes relies on the legal bases described above. Submitting a form alone does not give consent to marketing. Optional emails about the selected date require a separate choice after booking and confirmation by email. This website does not carry out automated decision-making with legal or similarly significant effects. Meta advertising measurement and possible association with an account are described below.

Optional emails about your selected open day

After completing your booking, you can separately ask Anglicko-české gymnázium AMAZON, s.r.o. to send a few emails with practical information and reminders only for your selected date. Your booking is valid without this choice. It does not include school news or other dates. Emails are enabled only after the mailbox owner confirms; the confirmation link is valid for up to 7 days, until the event starts at the latest. The legal basis is your voluntary consent under Article 6(1)(a) GDPR.

We record the parent or guardian’s email, language, selected event, request status, times and wording of the request, confirmation and any withdrawal. We do not copy the applicant’s name, phone number or documents into these records. The school prepares and sends messages manually. We also record the message content, the selected event, a reference to the recipient’s consent and the result of handing the email to the mail service. We delete these records within 3 years after the event. Permission ends when the selected event starts. A changed or cancelled event does not authorise emails about another date. You can cancel at any time, free of charge, using the link in each email or by contacting study@acga.cz, without signing in or cancelling your booking. Withdrawing this choice does not affect the lawfulness of processing before withdrawal.

We remove unconfirmed requests within 7 days. We retain evidence of confirmed choices and their termination for at most 3 years after termination to demonstrate authorised sending and defend legal claims, based on legitimate interest. We then remove the address and evidence; while this feature operates, we keep only a minimal fingerprint of the address and event to prevent unsolicited re-enrolment. Another event requires a new separate choice and confirmation. Backups and mail logs are managed under the rules described on this page.

Meta advertising measurement

If Meta Pixel is enabled on this website, we load it only after your separate consent to Advertising measurement · Meta. It helps the school evaluate Facebook and Instagram advertising through page visits and successful form submissions, recorded as generic event types. Analytics consent, an open day booking or email permission does not authorise this measurement. Rejecting it does not affect the website or its forms.

The provider is Meta Platforms Ireland Limited, Ireland. Meta may receive your IP address, browser and device information, page URL, cookie and ad-click identifiers and event type. It may associate these with your account and use them for measurement and personalised advertising under its policies. Our integration does not send names, email addresses, phone numbers, form field contents or attachments; it does not use advanced matching or server-side Conversions API.

Advertising cookie storage and access rely on your consent under Section 89(3) of Czech Act No. 127/2005 Coll.; related processing for the school relies on consent under Article 6(1)(a) GDPR. The collection and transmission of Pixel data are subject to joint controllership terms between the school and Meta. Their responsibilities, including information and individual rights, are described in the Meta joint controller addendum. You may exercise your rights with the school or Meta.

The Pixel may store _fbp (browser identification) and _fbc (ad-click attribution) cookies, generally for 90 days. Meta’s subsequent processing, retention and possible transfers outside the European Economic Area, including the USA, and applicable safeguards are described in its privacy policy and cookie policy. The validity of our cookie preference does not determine Meta’s retention period.

Withdraw at any time using the Cookies button and Reject optional, or turn off advertising measurement in settings. We stop further events from our integration and remove accessible _fbp and _fbc cookies for this website. This cannot recall data already transmitted; request erasure and exercise other rights with the relevant controller.

Who can access the information

Authorised school staff access information according to their responsibilities. Hosting, email and IT service providers supporting the website and our professional advisers may process it to the extent necessary for their work. Information is provided to public authorities where required by law. Form attachments and registration exports are not publicly accessible and require authorised access.

If you allow external maps, technical information is sent directly to the UK-based OpenStreetMap Foundation. The map provider describes processing in the United Kingdom and the Netherlands and a worldwide server network for map tiles. Its policy explains this processing and how to exercise your rights: OpenStreetMap Foundation – Privacy Policy. The embedded map does not load without consent.

How long we retain information

• We keep enquiry details while handling the enquiry and related follow-up correspondence.
• Open-day registrations are used until the event takes place or is cancelled and related organisational matters have been resolved.
• Transfer documents are retained while assessing the request and completing the next steps. Where they become part of school records, retention follows applicable law and the school’s records and disposal rules.
• Information may be kept longer where necessary to meet a legal obligation or establish, exercise or defend legal claims, for the relevant limitation period or the duration of a dispute. Once the purpose and these grounds no longer apply, we delete the information.
• Privacy preferences are valid for 180 days, and the server record of a choice is retained for 180 days. The request-limiting identifier is valid for no more than 20 minutes. Operational logs are used for as long as needed to assess operation and resolve any security incident.

Your rights

Subject to the conditions in the GDPR, you may request access and a copy of your data, rectification, erasure or restriction of processing. You may object to processing based on legitimate interests. Data portability applies to automated processing based on consent or a contract. You can withdraw consent to loading the external map or advertising measurement at any time in the cookie settings, without affecting the lawfulness of processing before withdrawal.

Send your request to poverenec@acga.cz or the school’s postal address. If there are reasonable doubts about your identity, we may request verification to avoid disclosing your information to someone else. We normally respond within one month and will explain any lawful extension within that period.

You may also lodge a complaint with the Czech Office for Personal Data Protection. Change your optional-service preferences at any time using the Cookies button at the bottom left or our cookie policy page.