Privacy Policy

This policy explains what personal data we process when you use the Kriticky.cz / ThinkCritical.eu learning portal (the "Portal"), why we process it, and what rights you have.

Who processes your data

The controller of your personal data is FENDR s.r.o., Company ID (IČO) 07899653, with its registered office at Nerudova 390, 472 01 Doksy, Česká republika. For any questions about your personal data, please write to us at mysli@kriticky.cz.

What data we process

• Account data: name, email address and password (we store only a secure hash; we never know the password itself).
• Sign-in with Google: if you choose this option, Google provides us with your name, email address and Google account identifier. We never see your Google password.
• Learning data: completed lessons, points earned in games and quizzes, daily streaks and your chosen language.
• Technical data: the sign-in cookie and server logs (IP address, time of request), which we need to operate and secure the Portal.

We do not run advertising, we do not track you with third-party analytics tools, and we do not sell your data.

Purposes and legal bases

• Providing the Portal (account, courses, progress tracking) – performance of the contract you enter into by registering (Art. 6(1)(b) GDPR).
• Security and prevention of misuse – our legitimate interest (Art. 6(1)(f) GDPR).
• Responding to your enquiries – legitimate interest or, where applicable, steps taken prior to entering into a contract.

Cookies

We use only strictly necessary cookies: the sign-in cookie (valid for 30 days) and short-lived cookies for signing in with Google. Your choice of light or dark mode is remembered by your browser (local storage). Consent is not required for these strictly necessary cookies.

Who has access to your data

• Hostinger – our hosting provider, on whose servers the Portal and its database run.
• Google – only if you choose to sign in with Google.

We have concluded GDPR-compliant contractual terms with our processors. We do not otherwise disclose your data to anyone unless required by law.

How long we keep your data

We keep account and learning data for as long as your account exists. When your account is closed, we delete the data within 30 days at the latest, except for data we are required by law to retain. Server logs are deleted automatically in accordance with the hosting provider's settings.

Your rights

You have the right of access to your data, the right to rectification, erasure, restriction of processing and data portability, and the right to object. Simply write to mysli@kriticky.cz. On request, we will close your account together with your data.

You also have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.gov.cz) or the supervisory authority in your EU country of residence.

Changes to this policy

We may update this policy. We will inform you of any material changes on the Portal or by email.