Privacy Policy (GDPR)
Effective date: 4 May 2026
These Privacy Policy terms (hereinafter "Policy") describe what personal data we process, for what purpose, on what legal basis, and for how long. We also inform you of your rights in connection with the processing of personal data under Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter "GDPR") and Act No. 110/2019 Coll. on the Processing of Personal Data.
1. Data Controller
The controller of your personal data is:
Inka Bartošová, inka@evaluace.com
IPA spol. s r. o., Company ID: 18198317, VAT ID: CZ18198317
Registered address: Pražská 1201, 250 92 Šestajovice, Czech Republic
Website: www.evaluace.com
I am not required to appoint a Data Protection Officer (DPO) under Article 37 GDPR. For questions and to exercise your rights, please contact me at the email address above.
2. What Personal Data I Process and Why
2.1 Evaluation Questionnaires
As part of specific evaluation projects, I may temporarily publish a data collection questionnaire on this website. Each questionnaire forms part of a specific evaluation carried out for a particular client. The questionnaire collects personal data to the extent necessary for the given evaluation, typically:
- first and last name (unless the questionnaire is anonymous),
- email address (if required for feedback or confirmation),
- job title, organisation, or other professional context relevant to the evaluation.
The exact scope of data collected is stated directly in the questionnaire or its accompanying text.
Purpose of processing: conducting the evaluation — collecting and analysing data, preparing an evaluation report for the client.
Legal basis: processing is carried out on the basis of your consent (Article 6(1)(a) GDPR), which you provide by completing and submitting the questionnaire. Consent may be withdrawn at any time (see Section 6).
2.2 Newsletter
If there is interest, I may send a newsletter several times a year with current information and events from the world of evaluation, participatory approaches to facilitation, and related topics. In that case, I will process exclusively:
- first and last name,
- your email address.
Purpose of processing: sending the newsletter and information about my professional activities.
Legal basis: your explicit consent (Article 6(1)(a) GDPR), given by ticking the relevant box when subscribing. Consent may be withdrawn at any time by sending an email to inka@evaluace.com with the word UNSUBSCRIBE in the subject line, or by replying directly to any newsletter. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
2.3 Technical Website Data
When you visit the website, certain technical data may be recorded automatically (IP address, browser type, date and time of access). This data is used exclusively to ensure the technical operation and security of the website and is processed by the hosting provider (see Section 4).
3. Legal Basis for Processing — Overview
All personal data is processed solely on the basis of one of the legal grounds under Article 6 GDPR:
- Consent (Article 6(1)(a) GDPR): completing an evaluation questionnaire or subscribing to the newsletter.
- Legitimate interest (Article 6(1)(f) GDPR): technical operation and security of the website.
I do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.
4. Recipients and Processors of Personal Data
I do not sell your personal data or provide it to third parties for marketing purposes. Access to your data may be granted only to:
- Hosting provider: Webnode, solely for the purpose of technical website operation.
- Evaluation client (recipient, not processor): evaluation results (report, data analysis) are provided to the client for whom the evaluation is carried out. Results are anonymised or pseudonymised where the purpose of the evaluation so permits.
Transfers to third countries: Personal data is not transferred outside the European Economic Area (EEA).
5. Data Retention
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected:
- Evaluation questionnaire data: for the duration of the evaluation and processing of outputs, generally no longer than 3 months after the close of data collection. Thereafter, personal data will be deleted or anonymised. The questionnaire will be removed from the website once data collection ends.
- Newsletter data: for the duration of active subscription, i.e. until consent is withdrawn. Following unsubscription, data will be deleted within 30 days.
- Technical website data (logs): for the period determined by the hosting provider, typically 30–90 days.
6. Your Rights as a Data Subject
As a data subject, you have the following rights under GDPR (Articles 15–22):
- Right of access (Article 15): you have the right to obtain confirmation as to whether I am processing your personal data and, if so, to request a copy of that data and information about the processing.
- Right to rectification (Article 16): you have the right to have inaccurate personal data corrected or incomplete data completed.
- Right to erasure — "right to be forgotten" (Article 17): you have the right to request the deletion of your personal data where the purpose of processing has ceased, you have withdrawn your consent, or the data has been processed unlawfully.
- Right to restriction of processing (Article 18): you have the right to request restriction of processing in cases provided for by the GDPR (e.g. while the accuracy of the data is being verified).
- Right to data portability (Article 20): you have the right to receive your personal data that you have provided to me in a structured, commonly used, and machine-readable format, where processing is carried out by automated means on the basis of consent or a contract.
- Right to object (Article 21): you have the right to object to processing carried out on the basis of legitimate interest.
- Right to withdraw consent (Article 7(3)): where processing is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before its withdrawal. You may withdraw consent by sending an email to the address given in Section 1.
- Right to lodge a complaint (Article 77): you have the right to lodge a complaint with the supervisory authority (Office for Personal Data Protection, www.uoou.gov.cz).
7. How to Exercise Your Rights
Please exercise your rights by sending an email to the controller's address given in Section 1. I will respond without undue delay, and no later than 30 days from receipt of your request (in exceptional cases this period may be extended to 60 days, of which I will inform you).
There is no charge for handling requests. If requests are manifestly unfounded or excessive (in particular where they are repetitive), I may charge a reasonable fee or refuse to act on the request.
8. Cookies and Tracking Technologies
This website may use cookies (small text files stored in your browser). I distinguish between:
- Strictly necessary cookies: these ensure the basic functioning of the website (e.g. session cookies). These cookies do not require your consent.
- Analytical and marketing cookies: I do not use these. If I were to do so, I would require your prior consent via a cookie management banner. Consent can be withdrawn at any time in the cookie settings.
9. Changes to This Policy
I may update this Policy from time to time in response to changes in my activities or applicable law. The current version is always available on this page. The date of the last update is shown at the top of the document.
If any material changes are made that affect your rights (e.g. a new purpose of processing, new recipients), I will notify you by email if I hold your address, or via a notice on the website.
This Policy has been prepared in accordance with the GDPR (Regulation (EU) 2016/679) and Act No. 110/2019 Coll. on the Processing of Personal Data.