Privacy
Privacy policy
Here you can find out what personal data I process about you on tym.tomcotym.cz, why, for how long, who I share it with and what rights you have. I write plainly and only about what the website actually does.
1. Who processes your data
Tom Tomčo, self-employed individual (OSVČ)
Company ID (IČO) 05347190
Doubravice 125, 511 01 Hrubá Skála, Czech Republic
Email: info@tomcotym.cz
I am the controller of personal data under Regulation (EU) 2016/679 (GDPR). I have not appointed a data protection officer, so please contact me directly at the email address above about anything related to your data.
2. What data, why and for how long
The form on the website (request for a presentation or a question)
- Data: name, email, phone number (optional), your experience of network marketing, the text of your message, the time of sending, the wording of your consent and the language version of the website.
- Purpose: to reply to you and send you a link to the private presentation.
- Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the box in the form and which you can withdraw at any time.
- Retention period: 5 years from sending, after which the enquiry is deleted automatically. Sooner if you withdraw your consent.
Free PDF in exchange for your email
- Data: email address, your first name (optional), the time and page of sign-up, the wording and version of your consent, the IP address and browser type when you gave and confirmed your consent, and a record of the emails I have sent you.
- How it works: you enter your email in the form and tick the consent box. I send you an email with a confirmation link, and after you confirm, you receive a link to the PDF. After that I may send you a few follow-up emails about team building and network marketing.
- Purpose: to send you the PDF and the follow-up emails you asked for, and to be able to prove your consent.
- Legal basis: your consent (Article 6(1)(a) GDPR).
- Where I store the data: in my own CRM system, from which I send the emails through my own mailbox.
- Retention period: until you unsubscribe. You can unsubscribe with one click in any email or by writing to info@tomcotym.cz. I keep a record of your consent and of your unsubscribing, so that I can show I acted correctly and so that I send you nothing after you unsubscribe.
Video presentation (/prezentace/)
- Data: name, email, phone number (optional), who invited you, how much of the presentation you actually watched (as a percentage), the time of registration and visits, and the interest button you click.
- Purpose: to play you the presentation and let the person who invited you know, so they can get in touch with you.
- Legal basis: your consent in the form before the video.
- Who will see it: me and the person who invited you (a member of my team). They receive an email about your registration, about what you watched and about your interest.
- Retention period: 5 years from registration, after which the contact is deleted automatically.
Newsletter
- Data: email, possibly your name, the time and way you signed up, and how you interact with the newsletter (opens, clicks).
- Purpose: to send you news, tips and invitations to webinars.
- Legal basis: your consent when you subscribe.
- Retention period: until you unsubscribe. You can unsubscribe with one click in every email or by writing to info@tomcotym.cz.
- Processor: I send the newsletter through the Ecomail service (Ecomail.cz, s.r.o.).
Emails and CRM
- I send you only emails related to what you asked for: a reply to your enquiry and a link to the presentation.
- I may also keep contacts from the form and the presentation in my own contact management system, CRMXone, which I run myself. The same purposes and retention periods as above apply to them.
3. Who I share your data with
I do not sell your data and I do not pass it on to anyone for their own purposes. Only the following recipients and processors, who help me run the website and communication, work with it:
| Who | What for |
|---|---|
| The person who invited you (a member of my team) | Your contact details and the status of your video presentation viewing, so they can get in touch with you. |
| Váš Hosting s.r.o. (Czech Republic) | Hosting of the website, the database and sending emails. |
| CRMXone (my own system) | Contact management and communication. |
| Google Ireland Limited (and Google LLC, USA) | Google Analytics visitor measurement (only with your consent to analytics cookies) and indexing of the website in Google Search (Google Search Console). Technically also playing videos through YouTube in enhanced privacy mode, where Google can see your IP address. |
| Microsoft Ireland Operations Limited (and Microsoft Corporation, USA) | Indexing of the website in the Bing search engine (Bing Webmaster Tools). Analysis of website usage with Microsoft Clarity, only with your consent to analytics cookies. |
| Ecomail.cz, s.r.o. (Czech Republic) | Sending the newsletter and managing the subscriber list. |
| Meta Platforms Ireland Limited (Facebook, Instagram, Messenger, WhatsApp) | Communicating with you when you write to me or share a link through these services, and my pages and posts on social networks. I would use Meta's advertising and measurement tools (such as Meta Pixel) only with your consent. |
Where the law requires it, I will also share data with public authorities (for example at the request of a court or the police).
4. Cookies and visitor measurement
- Necessary cookies (no consent needed, the website does not work without them): saving your cookie choice (
tmt_consent, 12 months), access to the video presentation (tmt_prez, 60 days) and protection of the forms against spam. - Analytics cookies (only with your consent): Google Analytics 4, Microsoft Clarity. They help me understand which parts of the website help people.
You can change your consent at any time using the ‘Cookie settings’ link in the footer of the website.
5. Transfers outside the EU
Some processors (Google, Microsoft, Meta) may also process data in the USA. Such transfers are governed by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
6. Your rights
- Access: you can ask what data I hold about you and get a copy of it.
- Rectification: I will correct any inaccurate data.
- Erasure: you can ask me to delete your data, unless I am required by law to keep it.
- Restriction of processing and data portability.
- Objection to processing based on legitimate interest.
- Withdrawal of consent at any time, by email to info@tomcotym.cz. Processing carried out before the withdrawal remains lawful.
- Complaint to the Czech supervisory authority, the Úřad pro ochranu osobních údajů (ÚOOÚ, the Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.
I will respond to your request without undue delay, and no later than within one month. I do not carry out automated decision-making or profiling with legal effects.
7. Security and closing notes
The website runs on an encrypted connection (HTTPS), and only people who need it have access to the data.
I may update this policy when the website or the law changes. The current version is always on this page, with the date of validity at the top.