OH ADVISING s.r.o.

Brigádnická 140/72, Mokrá Hora
621 00 Brno, Czech Republic
Reg. No. (IČO): 21147329
Commercial Register: Krajský soud v Brně, File No. C 137639
oh.advising@gmail.com

Effective date: 1 October 2026

​

1. Data controller

The controller of personal data is OH ADVISING s.r.o., Brigádnická 140/72, Mokrá Hora, 621 00 Brno, Czech Republic, Registration No. IČO 21147329, email: oh.advising@gmail.com ("we", "us" or the "Controller").

This Policy explains how we process personal data of visitors to www.oh-advising.com and related pages, customers of consultations, mentoring, digital and physical products, and participants in any future retreats or events.

We have not appointed a Data Protection Officer. Please send privacy requests and questions to oh.advising@gmail.com.

2. Personal data we process

Depending on how you communicate with us or use our services, we may process:

• name, email address, telephone number, country and other contact details;

• enquiry, order, selected service or product, communication, invoicing and payment data;

• information needed to create a personalised product or provide a service, including date, time and place of birth;

• message content, questionnaire responses and information you voluntarily provide;

• technical Website-use data, including IP address, device and browser type, pages visited, time of visit and data from essential cookies.

For ordinary online services, we do not request health, mental-health, sexual-life, religious-belief or other special-category personal data. Please do not send such information in free-text messages. If it is exceptionally necessary for a particular future event, we will first establish a separate lawful basis and, where required, obtain explicit consent.

3. Purposes and legal bases

We process personal data to handle enquiries, communicate before a contract is concluded, prepare an offer, confirm an order, provide an ordered service or product, arrange payment and delivery, and provide customer support. The legal basis is taking steps at the data subject’s request before entering into a contract and, subsequently, performance of the contract.

By sending an enquiry or personal data, a person confirms that they have read this Privacy Policy and asks us to process the data needed to respond and, where relevant, take pre-contractual steps. Sending an enquiry alone does not create a contract or confirm an order. Contract formation and order confirmation are governed by the Public Offer Terms, especially clause 3.3.

We also process data to comply with accounting, tax and other legal duties; and to protect the Website, prevent misuse, keep essential administration and defend legal claims on the basis of our legitimate interests.

We do not currently send newsletters or other marketing communications. If this changes, we will send them only with separate consent or another lawful basis permitted by law, and will update this Policy beforehand.

We do not make automated decisions or carry out profiling that produces legal or similarly significant effects for you.

4. Retention

• general enquiries and ordinary communications: normally no longer than 12 months;

• contract, order and service information: during the relationship and normally no longer than 10 years after it ends, unless a longer period is required by law or needed for legal claims;

• accounting and tax documents: for the period required by Czech law;

• cookie data: for the period shown in cookie settings.

5. Recipients of personal data

We do not sell personal data. To the extent necessary for Website operation and provision of services, personal data may be accessible to:

• INTERNET CZ, a.s., Registration No. 26043319, Ktiš 2, 384 03 Ktiš, Czech Republic, trading as FORPSI. In connection with hosting and technical Website operation, it processes data on our behalf to the necessary extent;

• Stripe Payments Europe Limited and Stripe Technology Europe Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland. Customers enter payment information directly in Stripe’s secure environment; we do not store complete payment-card information. Stripe may act as an independent controller for certain regulated payment and security activities under its own privacy terms;

• Google LLC in connection with the email address oh.advising@gmail.com;

• Telegram Messenger Inc. for communications and manual consultation booking, where the client chooses to communicate through Telegram. Message content and basic account information are also subject to Telegram’s privacy policy. Please do not send special-category data or card details through Telegram;

• accountants, lawyers and professional advisers where necessary, and public authorities where required by law.

6. Transfers outside the EU and EEA

FORPSI states that it stores data in countries of the European Union. Stripe uses the Irish entities identified in section 5 for Czech businesses.

Some providers, especially Google, Stripe or Telegram, may in certain circumstances access or process data outside the European Union and the European Economic Area. Where this happens, transfers will take place only under an adequacy decision or appropriate GDPR safeguards, such as the European Commission’s Standard Contractual Clauses.

Telegram states that it stores data of EU and UK users in the Netherlands, but its group may also transfer data to entities outside the EU/EEA. Communications through Telegram are therefore voluntary.

7. Your rights

Subject to GDPR conditions, you may request access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interests.

Please send requests to oh.advising@gmail.com. We normally respond within one month. You also have the right to lodge a complaint with the Czech Data Protection Authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

8. Cookies

We use essential cookies for secure and functional operation of the Website. These do not require consent.

Analytics, marketing and other non-essential cookies are activated only after the visitor’s active consent through the cookie banner. “Reject” will be available in the same layer and as easily as “Accept”. Consent may be withdrawn at any time through the “Cookie settings” link on the Website.

We do not currently use marketing cookies unless they are separately activated on the basis of consent. The current list of cookies, providers, purposes and retention periods will be displayed in cookie settings after a technical Website review.

9. Security and children

We use appropriate technical and organisational measures to protect personal data. Access is limited to people who need it.

Our services are not intended for persons under 18 without consent from a legal representative. If we learn that we have obtained a child’s data without the required permission, we will take appropriate steps to delete it.

10. Changes and language versions

We may update this Policy where reasonably necessary. The current version and its effective date will always be published on the Website.

This Policy is available in Czech, English and Russian. To the extent permitted by law, the Czech version prevails in case of discrepancies.