Privacy notice
Last updated: 8 October 2026
In short: I collect only the personal data I need to answer you, hold Session Zero, coach you and issue invoices. I don't sell your data, use it for advertising or track you on this website.
1. Who is responsible for your data
The controller of your personal data is:
Eva Sandoval (ESA Coaching)
Sole trader registered in the Czech Trade Licensing Register (živnostenský rejstřík).
Company ID (IČO) 29823170. Not a VAT payer.
Registered
address: Uhřická 293, 257 91 Sedlec-Prčice, Czech Republic
Email: info@esacoaching.cz
I haven't appointed a data protection officer, as the law doesn't require one for a practice of this size. If you have any question about your data, write to me at the email address above.
2. What data I process, why, and for how long
| Purpose | Data | Legal basis (GDPR) | How long |
|---|---|---|---|
| Answering your questions | Name, email address, phone number or LinkedIn profile, content of your message | Steps taken at your request before a contract, Art. 6(1)(b); my legitimate interest in replying, Art. 6(1)(f) | Up to 12 months after our last contact, unless we start working together |
| Arranging and holding Session Zero | Name, email address or phone number, and the time we agree. The call itself is not recorded. | Steps taken at your request before a contract, Art. 6(1)(b) | Up to 12 months after Session Zero, unless we start working together |
| Coaching | Contact details, the coaching agreement, session dates, my brief session notes | Performance of the coaching agreement, Art. 6(1)(b) | While we work together and for 3 years after (the general limitation period for legal claims) |
| Information about your health, if you choose to share it | Only what is needed, kept to a minimum in my notes | Your explicit consent, Art. 9(2)(a), which you can withdraw at any time | Until you withdraw consent, and never longer than the session notes |
| Invoicing and accounting | Name, address, invoice and payment details | Legal obligation under Czech tax and accounting law, Art. 6(1)(c) | As long as Czech law requires (up to 10 years) |
| Testimonials | Your words, published under your first name or anonymously, as you choose | Your consent, Art. 6(1)(a), which you can withdraw at any time | Until you withdraw consent |
| Running this website | Technical data recorded by the hosting provider's servers: IP address, browser type, pages requested, date and time | My legitimate interest in running a secure website, Art. 6(1)(f) | For the short period set by the hosting provider |
I don't record coaching sessions. I don't use your data for marketing, and no decisions about you are made automatically or through profiling.
3. Who else can see your data
I use a few service providers who process data on my behalf and only on my instructions:
- website and email hosting: BanaHosting
- video calls: Whereby (private real-time meeting platform)
- my calendar provider
- an accountant or tax adviser, if I use one
I pass data to public authorities, such as the tax office, only when the law requires it. I never sell your data.
4. Transfers outside the EU
Some of these providers, such as my hosting provider BanaHosting, may process data outside the EU, for example in the United States or the United Kingdom. In that case the transfer is protected by an adequacy decision of the European Commission, the provider's certification under the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses.
5. Cookies and analytics
This website uses no cookies, analytics or advertising trackers. The details are in the cookie policy.
6. Your rights
You have the right to:
- access the personal data I hold about you and get a copy of it
- have inaccurate data corrected
- have your data erased when I no longer need it or have no legal reason to keep it
- restrict how I use your data
- receive the data you gave me in a common electronic format (data portability)
- object to processing based on my legitimate interest
- withdraw your consent at any time, without affecting processing that took place before
To use any of these rights, write to me at info@esacoaching.cz. I will reply within one month.
You can also file a complaint with the Czech data protection authority:
Úřad pro ochranu osobních údajů (Office for Personal Data Protection)
Pplk. Sochora
727/27, 170 00 Praha 7, Czech Republic
uoou.gov.cz
Out-of-court consumer dispute resolution: Czech Trade Inspection Authority (Česká obchodní inspekce), www.coi.cz.
7. Do you have to give me your data?
No. But without your name and contact details I can't arrange Session Zero or coach you, and Czech law requires certain details on an invoice.
8. Changes to this notice
If the way I handle your data changes, I will update this page and the date at the top.