Privacy Policy
Last updated: 18 August 2026
This page explains what happens to your data when you visit this site and when you register for the pitch training. Every item below matches something the site actually does — there is nothing here for decoration.
1. Who is responsible
[LEGAL NAME], [REGISTERED ADDRESS], company number [IČO], is the controller of the personal data described below.
For anything on this page, including the requests in section 8, write to [CONTACT EMAIL].
2. What is collected, and why
When you register for the training
- Your name and email address — to send you the link to the screening you booked, and a reminder before it starts.
- Which screening you chose — so the reminder goes out at the right time.
- Where you came from — the
utm_source,utm_medium,utm_campaign,utm_contentandutm_termparameters of the link you arrived on, thefbclidparameter Meta adds to ad clicks, the page that referred you, and the URL you landed on. - Your browser's user agent string.
Legal basis for your name, email and chosen screening: Article 6(1)(b) GDPR — taking steps at your request and delivering the free training you signed up for. The attribution fields are processed on the basis of your consent, as described in section 3.
When you browse without registering
Nothing is recorded until you answer the cookie banner. Accept, and page views and clicks on the registration button are recorded as described in section 3. Decline, and nothing is recorded at all — the page works exactly the same.
Always
Your IP address and user agent reach the server with every request, as they do on any website. They are used to serve the page and to keep it from being abused, and are not stored in the registration database. Legal basis: Article 6(1)(f) — legitimate interest in running a working site that is not being attacked.
3. Cookies, local storage and analytics
Nothing is written to your device, and nothing is reported to any analytics or advertising service, until you accept on the banner. You can change your answer at any time through Cookie settings at the bottom of the home page.
| What | Where | Purpose | Set when |
|---|---|---|---|
kj_consent | Local storage | Remembers your answer to the banner | Always — without it your choice could not be honoured |
ph_…_posthog | Local storage and cookie | PostHog: recognises a returning browser, so one person is not counted as several | Only after you accept |
_fbc, _fbp | Cookie | Meta: connects an ad click to a registration | Only after you accept, and only while the Meta Pixel is switched on |
If you accept, the following is recorded:
- Page views, clicks on the registration button, and completed registrations.
- Your IP address, user agent, and the attribution parameters listed in section 2.
- After you register, your email address, name and registration id, so a registration can be attributed to a person rather than to an anonymous browser.
Legal basis: your consent, Article 6(1)(a) GDPR, together with the rules on storing information on your device. Withdrawing consent is as easy as giving it, and withdrawal does not affect processing that was lawful before you withdrew.
4. Who receives your data
- Supabase — the database registrations are stored in. Region: [SUPABASE REGION].
- PostHog — product analytics, on their EU cloud
(
eu.i.posthog.com). Only after you accept. - Meta Platforms Ireland — advertising measurement, through the Conversions
API. Only after you accept. What is sent: your email address and first name as irreversible
SHA-256 hashes, never in plain text; the
_fbcand_fbpidentifiers; your IP address; your user agent; and the URL of the page. This is what lets me see that an ad produced a registration. - Vercel — hosting. Region: [VERCEL REGION].
- [EMAIL PROVIDER] — sends you the joining link and the reminder.
Each of these processes your data on my instructions under a data processing agreement, with one exception: Meta also acts as an independent controller for its own purposes, which are governed by Meta's own privacy policy.
5. Transfers outside the EU
Meta processes data in the United States. [CONFIRM the transfer mechanism that applies to your Meta account — EU–US Data Privacy Framework or Standard Contractual Clauses — and check the same for every provider in section 4.]
6. How long it is kept
- Registrations: [RETENTION PERIOD — e.g. until you ask to be removed, or N years after the last training you registered for].
- Analytics: for as long as the retention setting on the PostHog project allows — [CHECK AND STATE IT].
- Data at Meta: according to Meta's own retention rules.
7. Automated decision-making
None. Nothing on this site makes an automated decision about you.
8. Your rights
You have the right to access your data, to have it corrected or erased, to have its processing restricted, to receive it in a portable form, to object to processing based on legitimate interest, and to withdraw consent at any time. Write to [CONTACT EMAIL] and you will get an answer within one month.
You can also complain to the Czech data protection authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, [VERIFY CURRENT WEBSITE AND EMAIL].
9. Children
This site is aimed at people building companies and is not directed at children under 16, and no data is knowingly collected from them.
10. Changes to this policy
If what the site does with your data changes, this page changes with it, and the date at the top is updated. Material changes affecting data already collected will be sent to registered participants by email.