Student Trainee Center logoApply

Privacy policy

This page explains which personal data we process when you visit our websites, why we do it and what rights you have.

Last updated:

At a glance

  • Google Analytics only with consent

    It does not run without your consent.

  • No personalised advertising

    We do not use the data for remarketing or link it to Google accounts.

  • Only what is necessary

    Google receives a shortened IP address, and Sentry does not store it at all.

  • Your choice

    Change your consent anytime in the site footer.

Basic information

Controller

The controller of your personal data is Studentské Trenérské Centrum, z. s., company ID (IČO) 298 50 053, registered office at Sokolská 1883/8, 120 00 Praha 2 – Nové Město, Czech Republic, registered in the register of associations at the Municipal Court in Prague under file number L 82400. You will find our contact details at the end of this page.

What this policy covers

This policy applies to the websites studentstc.cz, blog.studentstc.cz and org.studentstc.cz.

Providing your data is not a statutory or contractual requirement. However, without the processing described in “Website delivery and security”, we cannot run the websites securely.

How and why we process data

Website delivery and security

Legitimate interest

Our websites are delivered and protected against attacks by Cloudflare. On every visit, it processes technical data, in particular your IP address and information about your browser.

Processor
Cloudflare, Inc. (USA)
Legal basis
our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR)
Transfer to the USA
under the EU–US Data Privacy Framework
Cookies
technically necessary cookies to run the websites and to store your choice in the cookie bar, which do not require your consent (see the overview below)

Aggregated traffic statistics

Legitimate interest

We also measure traffic with Cloudflare Web Analytics. It uses no cookies, stores nothing on your device, and shows us only aggregated figures, not individual visitors.

Processor
Cloudflare, Inc. (USA)
Legal basis
our legitimate interest in knowing how much our websites are visited (Art. 6(1)(f) GDPR)

Analytics and ad measurement

Only with your consent

If you consent, we measure traffic with Google Analytics 4, which we run via Cloudflare Zaraz. Without your consent, Google Analytics does not run.

Data processed

  • pages viewed
  • the page you came from
  • clicks on the application buttons
  • approximate location
  • device and browser type
  • screen size
  • language
  • a random visitor ID

How we protect your privacy

  • Cloudflare shortens your IP address before passing it to Google, so Google never receives the full address.
  • We do not use the data for personalised advertising or remarketing.
  • We do not link the data to Google accounts (Google signals is turned off).
Purpose
we want to know how people use our websites and measure how our Google Ads perform – for example, how many visitors coming from an ad click the application button
Legal basis
your consent (Art. 6(1)(a) GDPR and Section 89(3) of the Czech Act No. 127/2005 Coll., on Electronic Communications)
Processor
Google Ireland Limited
Transfer to the USA
the data may also reach Google LLC in the USA, under the EU–US Data Privacy Framework
Retention
14 months
Cookies
see the overview below

You can withdraw your consent at any time with the “Cookie settings” button in the site footer. Withdrawal does not affect processing that took place before it.

Error monitoring

Legitimate interest

To detect and fix errors quickly, we use the Sentry service. It records errors and the performance of our server, for example the address of the requested page and the browser type. On the blog (blog.studentstc.cz), it also records errors and performance directly in your browser and, when an error occurs, sends a recording of the visit shortly before it (session replay). For this, it stores the item sentryReplaySession in your browser on the blog (see the overview below).

How we protect your privacy

  • It does not collect cookies or user identities.
  • It does not store IP addresses.
  • It automatically removes sensitive data such as passwords.
  • The session replay hides all text.
Processor
Functional Software, Inc. (USA)
Data location
European Union; if the data is transferred to the USA while providing the service, this is done under the EU–US Data Privacy Framework or, where that does not apply, the standard contractual clauses approved by the European Commission
Legal basis
our legitimate interest in a functional and secure website (Art. 6(1)(f) GDPR), including storing the sentryReplaySession item
Retention
no longer than 90 days

Cookies and browser storage

NameProviderPurposeStorage periodConsent required
cf_clearanceCloudflareconfirms that you passed a security checkup to 1 yearNo
__cf_obCloudflareused during a security checkuntil you close the browserNo
cf_consentCloudflarestores your choice in the cookie bar1 yearNo
cf_zaraz_clientCloudflare Zaraz (Google Analytics)random visitor ID1 yearYes
cfz_google-analytics_v4Cloudflare Zaraz (Google Analytics)Google Analytics measurement state1 yearYes
cfzs_google-analytics_v4Cloudflare Zaraz (Google Analytics)state of the current visit for Google Analyticsuntil you close the browserYes
sentryReplaySessionSentryrecording of the visit when an error occurs (blog only; sessionStorage, not a cookie)until you close the tabNo

Your rights

You have the right to:

  • access your data
  • have it rectified or erased
  • restrict its processing
  • object to processing based on our legitimate interest
  • receive the data processed on the basis of your consent in a machine-readable format (portability)
  • withdraw your consent at any time

You can also lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.

We do not identify you by name on our websites. If the information in your request does not allow us to find your data, we will tell you (Art. 11 GDPR).

Contact

For questions about the protection of your personal data and requests to exercise your rights, write to us at [email protected].