Privacy policy

Privacy policy

This policy explains what personal data we process in connection with the kubicek.ai website and our artificial intelligence training and consulting services, for what purpose and on what legal basis, who we share it with, how long we keep it and what rights you have. We act in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on personal data processing.

Effective from 28 July 2026.

1. Who is the data controller

The controller of your personal data is Mediatoring.com s.r.o., registered office at Nádražní 385/34, 702 00 Ostrava, Czech Republic, company ID: 04954025, VAT ID: CZ04954025, registered in the Commercial Register kept by the Regional Court in Ostrava, file no. C 74487.

We have not appointed a data protection officer, as we are not required to do so by law. Please use the contact details above for all matters concerning personal data.

2. What data we process, why and on what legal basis

a) Enquiries, contact forms and communication by e-mail or phone
Data processed: name and surname, e-mail, phone number, company name, message content. Purpose: to answer your question and prepare a quotation. Legal basis: steps prior to entering into a contract under Art. 6(1)(b) GDPR, or our legitimate interest in replying under Art. 6(1)(f) GDPR. Retention: 3 years from the last communication.

b) Ordering and delivery of training, consulting and other services
Data processed: identification, billing and contact details, details of training participants, data needed to issue a certificate. Purpose: performance of the contract, bookkeeping and compliance with tax obligations. Legal basis: performance of a contract under Art. 6(1)(b) GDPR and compliance with a legal obligation under Art. 6(1)(c) GDPR. Retention: for the duration of the cooperation and a further 10 years from the end of the tax period for tax and accounting documents.

c) Newsletter
Data processed: first name or nickname and e-mail address. Purpose: sending news, tips and information about AI training. Legal basis: your consent under Art. 6(1)(a) GDPR, which you may withdraw at any time. Retention: until consent is withdrawn. You can unsubscribe using the link in every e-mail or by writing to our e-mail address.

d) References, feedback and participant reflections
Data processed: name, company name, text of the review. Purpose: publishing the reference and improving our training. Legal basis: your consent under Art. 6(1)(a) GDPR. Retention: until consent is withdrawn.

e) Website operation, security and stability
Data processed: IP address, browser and operating system information, date and time of access, requested address. Purpose: keeping the website running, protection against attacks and misuse, troubleshooting, logs of sent e-mails. Legal basis: our legitimate interest under Art. 6(1)(f) GDPR. Retention: no longer than 12 months.

f) Traffic measurement and analytics
Data processed: truncated IP address, device and browser information, pages visited, traffic source. Purpose: traffic statistics and improving the website content. Legal basis: your consent under Art. 6(1)(a) GDPR for tools that store cookies or similar identifiers. See section 3 for details.

g) Comments and discussions on the website
Data processed: name, e-mail, website address if provided, IP address and the comment text. Purpose: publishing the comment and spam protection. Legal basis: your consent under Art. 6(1)(a) GDPR. Retention: until the comment is deleted.

Providing your data is voluntary. However, without the data marked as mandatory in our forms we cannot reply to you or deliver the service.

3. Cookies and third-party tools

The website uses cookies and similar technologies. We distinguish between:

  • Necessary cookies – required for the website to work, for logging into the administration, for remembering the selected language (WPML) and for security. Stored on the basis of our legitimate interest.
  • Analytics cookies – used to measure traffic (Google Analytics via Google Tag Manager, internal WordPress statistics). Stored on the basis of your consent.
  • Embedded content cookies – if a page contains an embedded video (e.g. YouTube) or content from another service, that service may set its own cookies and read information about your device.

You can delete or block cookies at any time in your browser settings. Blocking necessary cookies may limit the functionality of the website. The website also loads fonts from Google Fonts, which transfers your IP address to Google servers.

4. Who we share your data with

We do not sell personal data. We share it only to the extent necessary with the following categories of recipients and processors:

  • our web hosting and e-mail provider (Mediatoring.com s.r.o. – MBhosting, MailKlient),
  • Intuit Mailchimp – newsletter delivery,
  • Google Ireland Ltd. / Google LLC – Google Analytics, Google Tag Manager, Google Search Console, Google Fonts,
  • Automattic Inc. – Gravatar service and comment spam filtering,
  • providers of embedded videos and social networks, if you display their content on a page,
  • Patreon Inc. – only if you sign in to supporter content,
  • providers of AI tools (e.g. OpenAI) – only for website features that explicitly use such a tool and only if you use them,
  • our external accountant, tax adviser, lawyer and auditor,
  • public authorities where required by law.

We have a data processing agreement under Art. 28 GDPR in place with all processors.

5. Transfers outside the EU and EEA

Some of the processors listed above (in particular Google, Intuit Mailchimp, Automattic, Patreon and OpenAI) are established or operate servers in the United States. In such cases the transfer relies on the European Commission adequacy decision under the EU‑U.S. Data Privacy Framework, or on standard contractual clauses approved by the European Commission together with additional technical and organisational safeguards.

6. How long we keep your data

We keep data only for as long as necessary for the given purpose, as stated for each purpose in section 2, or for the period required by law (in particular the Czech Accounting Act and the VAT Act). After that period we delete or anonymise the data.

7. Your rights

In relation to the processing of your personal data you have the following rights:

  • right of access – to learn what data we process about you and to obtain a copy,
  • right to rectification of inaccurate or incomplete data,
  • right to erasure (the “right to be forgotten”) where there is no longer a reason for the processing,
  • right to restriction of processing,
  • right to data portability for data you have provided on the basis of consent or a contract,
  • right to object to processing based on legitimate interest, including objection to direct marketing,
  • right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal,
  • right to lodge a complaint with a supervisory authority.

To exercise your rights write to [email protected] or to our registered address. We will respond within one month at the latest. The competent supervisory authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.

8. Automated decision-making and profiling

We do not carry out automated decision-making or profiling that would have legal effects for you or otherwise significantly affect you.

9. Data security

We use encrypted data transfer (HTTPS), access rights management, strong passwords and two-factor authentication, regular updates and backups, protection against repeated login attempts and other technical and organisational measures. Only people who need the data for their work have access to it, and they are bound by confidentiality.

10. Children

Our services are intended for adults and companies. We do not knowingly collect personal data of persons under 16. If we find that we have obtained such data without the consent of a legal guardian, we will delete it.

11. Terms and conditions

The contractual terms for our services are set out in the General Terms and Conditions of Mediatoring.com s.r.o.

12. Changes to this policy

We may update this policy, for example when we start using a new tool or when the law changes. The current version is always published on this page; we will inform you about material changes by e-mail or by a notice on the website.