Legal
Privacy policy
Last updated · 30 July 2026
This page explains what personal data this site collects, why, and what you can do about it. It covers the newsletter signup and the paid consultation form - the only two places the site asks you for anything.
Who is responsible
The data controller is the person below. Write to that address for anything on this page - access, correction, deletion, or a complaint.
- ask@anetakahleova.comAneta Kahleová
What is collected
Nothing is collected until you submit a form. Browsing the site does not require you to identify yourself.
- Newsletter signup
- Your email address, which form you used, your language, the country your request came from, your IP address, and the time you signed up.
- Paid consultation
- Your email address, the question or brief you write, your language, an Instagram handle if you choose that as the reply channel, and the payment reference, amount and currency reported by Stripe.
- Digital product purchase
- Your email address, your language, and the payment reference, amount and currency reported by Stripe. The email is used to send you the download link and nothing else.
- Payment details
- Card data is entered on Stripe’s own checkout page and never reaches this site. Only Stripe’s reference IDs and the amount are stored here.
- Traffic measurement
- Vercel Analytics counts page views without cookies and without building a profile of you.
Why, and on what legal basis
- Newsletter - consent
- Art. 6(1)(a) GDPR. You asked to receive it, and you can withdraw at any time using the unsubscribe link or by writing to the address above.
- Answering a paid consultation - contract
- Art. 6(1)(b) GDPR. Your email and question are what make it possible to deliver the answer you bought.
- IP address and spam filtering - legitimate interest
- Art. 6(1)(f) GDPR. Automated signups were a real problem; the IP and an automated spam verdict exist so bot registrations can be recognised and stopped. They are not used to target or profile you.
- Accounting records - legal obligation
- Art. 6(1)(c) GDPR. Records tied to a payment have to be retained for the periods tax law requires.
Who else processes it
These providers process data on instruction, under a processing agreement. No personal data is sold, and none is shared for advertising.
- Stripe
- Payment processing and the checkout page.
- Resend
- Sending email and holding the newsletter contact list.
- Neon
- The database the site’s own records live in.
- Vercel
- Hosting, cookieless analytics, and bot protection on the forms.
How long it is kept
- Newsletter
- Until you unsubscribe or ask for deletion, whichever comes first. After that the address is removed.
- Consultation records
- Kept while the request is being handled, then for as long as tax and accounting law requires for the associated payment.
- IP address
- Stored with the signup record and removed together with it. Ask for deletion and it goes.
Your rights
Under the GDPR you can ask for a copy of your data, have it corrected or deleted, have its use restricted, object to processing based on legitimate interest, receive it in a portable format, and withdraw consent at any time. Withdrawing consent does not undo processing that already happened lawfully.
Write to the address above and you will get an answer within one month. If you are not satisfied, you can complain to the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, uoou.cz) or to the supervisory authority where you live.
Cookies
This site sets no advertising or tracking cookies. Analytics is cookieless. If you go through checkout, Stripe sets its own cookies on its own page - their policy governs that.