Privacy Policy and Cookies

1. Data controller

Théravádový buddhismus, z. s. (Theravada Buddhism, registered society)
U Zámečku 1666, 530 03 Pardubice
Company ID (IČO): 01982443, VAT ID (DIČ): CZ01982443
Email: buddha@sasana.cz
Contact person: Mgr. Ladislav Král, Secretary (see Contacts)

2. What data we process

• Registration and account: name, email and password (stored only as a hash, never in readable form).
• Course study: progress in lessons, test results and issued certificates.
• Event registrations: data entered when registering for a specific event.
• Comments on articles: the content of the comment and its link to your account.
• Newsletter subscription: email, optionally your name, and the times of subscription, confirmation and any unsubscription.
• Cookies: see section 7 below.

3. Purpose and legal basis of processing

• Providing the service (maintaining a user account, access to courses, issuing a certificate) - performance of a contract.
• Communication at your request (contact form, enquiries) - legitimate interest / performance of a contract.
• Sending news by email - based on your consent, which you confirm via a link in the email and which you can withdraw at any time using the “Unsubscribe” link in every email.
• Essential cookies for the operation of the website (sign-in, remembering your choice in the cookie banner) - legitimate interest.
• Statistics cookies (Google Analytics 4 - anonymised website traffic) - only with your consent, which you can withdraw at any time.
• Marketing cookies (embedded Spotify player, YouTube videos embedded in articles and course lessons, embedded Facebook and X previews on the home page) - only with your consent, which you can withdraw at any time.
• Unclassified cookies (a catch-all category for future third-party technologies that cannot be clearly assigned to any of the categories above - the website currently uses none) - only with your consent, which you can withdraw at any time.

4. Retention period

We keep data linked to a user account for as long as the account exists and for a reasonable period afterwards because of limitation periods. We keep the email address for the newsletter for as long as you are subscribed; after you unsubscribe we keep only a record of the unsubscription (so that you do not receive news again by mistake) and delete it on request. We remember your choice in the cookie banner for 1 year at most, after which we will ask for your consent again on your next visit.

5. Recipients of data

We share data only to the necessary extent with the providers we use to run the website:

• hosting and database provider,
• Bunny Stream - playing the videos in video courses,
• Cloudflare, Inc. (Cloudflare Turnstile) - protection of sign-in and registration against automated attacks; when used, it processes technical data about the browser and the IP address (legitimate interest in securing the website),
• Google Ireland Limited (Google Analytics 4) - anonymised traffic statistics, only after consent is given,
• Spotify - embedded playlist player on the home page, only after consent is given,
• Google LLC / YouTube (via the privacy-enhanced domain youtube-nocookie.com) - videos embedded in articles and course lessons and the embedded channel preview on the home page, only after consent is given,
• Meta Platforms Ireland Limited (Facebook) - embedded preview of the Facebook page on the home page, only after consent is given,
• X Corp. - embedded X timeline on the home page, only after consent is given,
• social networks (Facebook, Instagram, X, YouTube) - for content that the editors deliberately publish there as well (unrelated to the embedded previews/videos above).

We evaluate and store cookie consent ourselves, without a third-party consent management tool (such as Cookiebot). However, with your consent, statistical data from Google Analytics 4 and embedded YouTube videos are processed by Google within the Google group (Google Ireland Limited, or Google LLC based in the USA) - transfers of data outside the EU are governed by the EU-U.S. Data Privacy Framework. According to Google’s documentation, Google Analytics 4 does not store visitors’ full IP addresses. We embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com), which sets only a minimum of cookies before the video is played.

6. Your rights

Under the GDPR you have the right to:

• access your personal data,
• rectification of inaccurate data,
• erasure of data (“right to be forgotten”),
• restriction of processing,
• data portability,
• object to processing,
• withdraw your consent to optional cookies at any time,
• lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz).

You can exercise your rights at buddha@sasana.cz.

7. Cookies

The website uses cookies that are necessary for its operation and - only with your consent - statistics cookies (Google Analytics 4), marketing cookies (embedded Spotify player, embedded YouTube videos, embedded Facebook and X previews on the home page) and unclassified cookies (a catch-all category for future technologies, the website currently uses none). You can change your settings at any time:

Overview of the cookies used by the website

The “Unclassified” category in the cookie settings is a catch-all category for future third-party technologies that cannot be clearly assigned to any of the categories above - the website currently uses no such cookies, so it has no row of its own in the table.

This wording is a working template prepared with the help of AI and does not replace legal advice - before deployment we recommend having the text reviewed by a lawyer specialising in the GDPR.