[Operator details pending confirmation], trading as "7HourTeacher", is committed to protecting the privacy and personal data of every visitor, teacher and platform user. This draft covers data protection for software and teaching tools; the applicable jurisdiction and compliance arrangements require review.
1. Data controller
[Operator details pending confirmation] operates "7HourTeacher". Controller/processor roles for teacher-managed student data must be agreed before use of this website. Contact: contact form.
We do not appoint a Data Protection Officer because our processing does not meet the thresholds in Art. 37 GDPR. You can still raise any data-protection matter directly with the controller using the contact above.
2. Principles we follow
- Lawfulness, fairness, transparency — clear language, no hidden processing.
- Purpose limitation — collected for the purposes listed in the Privacy Policy only.
- Data minimisation — we ask for the minimum needed to operate requested software features.
- Accuracy — you can correct your data at any time from your account or by email.
- Storage limitation — defined retention periods (see Privacy Policy §6).
- Integrity and confidentiality — TLS in transit, encryption at rest, row-level security, hashed passwords.
- Accountability — we keep an internal record of processing activities (Art. 30 GDPR).
3. Lawful bases we rely on
- Art. 6(1)(b) — performance of a contract (providing platform access and software features).
- Art. 6(1)(c) — legal obligation (Czech accounting, tax, invoicing).
- Art. 6(1)(f) — legitimate interest (site security, fraud prevention, aggregated analytics).
- Art. 6(1)(a) — your consent (marketing emails, non-essential cookies).
4. Your rights as a data subject
Under Articles 15–22 GDPR you may at any time:
- Request access to your personal data.
- Ask us to rectify inaccurate or incomplete data.
- Ask us to erase your data ("right to be forgotten").
- Ask us to restrict processing.
- Receive your data in a portable, machine-readable format.
- Object to processing based on legitimate interest.
- Withdraw consent at any time (with no effect on prior lawful processing).
- Not be subject to fully automated decisions with legal effect — we do not perform such automated decision-making.
To exercise any right, write to contact form. We confirm receipt within 72 hours and respond fully within 30 days (extendable by two months for complex requests, as permitted by Art. 12(3) GDPR).
5. Processors we use
We sign Data Processing Agreements (Art. 28 GDPR) with every processor that handles personal data on our behalf:
- Cloud hosting provider — hosting, database, authentication (EU region).
- Payments — online checkout is not live; provider arrangements require confirmation.
- Transactional email provider — sends platform messages and password resets.
- Privacy-friendly analytics — aggregated, no individual profiling.
6. International data transfers
We keep personal data inside the European Economic Area whenever possible. Where a sub-processor unavoidably operates outside the EEA, transfers are protected by the European Commission's Standard Contractual Clauses (Art. 46 GDPR) or by an adequacy decision (Art. 45 GDPR).
7. Data breach procedure
In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:
- Notify the Czech Data Protection Authority within 72 hours (Art. 33 GDPR).
- Inform affected users without undue delay where the risk is high (Art. 34 GDPR).
- Document the breach, its effects, and the remedial action taken.
8. Children
Our services are not directed at children under 16. Where a student is under 16, a parent or legal guardian must provide appropriate consent for their use of the teacher-managed learning tools.
9. Complaints
If you believe we have processed your data unlawfully, please contact us first so we can put it right. You also have the right to lodge a complaint with the supervisory authority:
Úřad pro ochranu osobních údajů — Pplk. Sochora 27, 170 00 Praha 7, Czechia — www.uoou.cz.
10. Further information
For the full detail on what we collect, why, and for how long, please read our Privacy Policy.