Privacy Policy

Controller:

EPPM Services s.r.o.

Registered with the Municipal Court in Prague, Section C, Insert No. 183151

Address: nám. 14. října 1307/2, 150 00 Prague 5 – Smíchov, Czech Republic

Email: info@eppm-services.com

Website: www.eppm-services.com

Contact: Miroslav Czadek

1. About This Policy

We respect your privacy and process your personal data in compliance with EU Regulation 2016/679 (GDPR). This policy informs clients, website users, customers, and participants of our training, workshops, and consultations about how we collect and use personal data.

2. What Data We Collect

We process personal data that you voluntarily provide in person, via our website, email, phone, or messaging apps (e.g., MS Teams, Zoom, Messenger).

We may collect:

• Identification data: Name, surname, title, address, date of birth, company ID, phone, email

• Contact data: Email, phone number, mailing address, social media profiles

• Order details: Purchased services/products, payment info, loyalty cards

• Web behavior data: Pages visited, links clicked, device info, IP address, browser and OS, cookies

• Inferred data: Gender, age, preferences, financial situation, purchasing behavior

• Photos: Group or individual photos from events (only used with consent)

Special categories (only for coaching or therapy and only if provided voluntarily):

• Health information, past illnesses, medication

• Ethnic origin, racial background

• Religious or philosophical beliefs

• Sexual orientation

3. Why We Process Your Data

A) To perform a contract:

To deliver services/products and maintain communication.

Legal basis: Contract performance

B) To comply with laws:

E.g., accounting, tax, and archiving regulations.

Legal basis: Legal obligation

C) For our legitimate interests:

• Legal claims or dispute resolution (data retained for 3 years after contract ends)

• Direct marketing to current clients (you may opt out anytime)

Legal basis: Legitimate interest

D) Based on your consent:

• Sending offers if you’re not our client

• Publishing identifiable event photos

You may withdraw your consent at any time.

4. Who Has Access to Your Data

Your data may be shared with trusted third parties (data processors), including:

• IT and cloud providers: Google, Apple, Wix, Microsoft

• Marketing platforms: Facebook, LinkedIn, Twitter

• Accounting tools: iDoklad, Cloze

• Consultants, external trainers, and sales reps

We ensure that all processors comply with GDPR requirements through binding contracts.

Authorities may also request data when legally required (e.g., audits or investigations).

5. Data Retention

We retain your data only for as long as necessary:

• Contracts: During the business relationship + 3 years

• Legal obligations: As required by specific laws

• Marketing: Up to 3 years or until you opt out

• Consent-based use: Until consent is withdrawn

6. Your Rights

Under GDPR, you have the right to:

• Access your data and request a copy

• Correct incomplete or inaccurate data

• Delete data under certain conditions

• Restrict how your data is used

• Transfer your data to another provider

• Object to processing for marketing or other legitimate interests

• Withdraw consent at any time

• File a complaint with the Data Protection Authority (www.uoou.cz)

7. How to Reach Us

For questions, data requests, or complaints, contact us at:

Email: info@eppm-services.com

Phone: +420 724 950 998

Mailing Address: nám. 14. října 1307/2, 150 00 Prague 5 – Smíchov

We respond within one month. In complex cases, this may be extended by up to two additional months.

​