Women in AI · Prague
SK CZ EN
Join the waitlist
Working draft for legal validation

Privacy notice

This is a working draft for separate legal validation. It explains what data we collect, why we need it, who receives it and how you can exercise your rights.

Version
privacy-2026-09-17
Effective
Privacy contact
womeninaiprague@gmail.com

1. Who controls your data

The controller is Kristína Tyrlíková, a natural person and organiser of the Women in AI Prague project. For privacy questions and requests, email womeninaiprague@gmail.com. A postal address is not included in this preview and remains an open legal-validation question.

2. What we process and why

  • Website visits: technical data, consent choice and, after analytics consent, pseudonymous usage data.
  • Event registration: name, email, language, event, registration time and source, acknowledgement of the rules.
  • Optional event data: role, experience, industry, networking answer, AI-use description; these remain in the event Sheet.
  • Check-in: attendance state and time, operator identifier and an operational no-photo preference recorded on site.
  • Feedback: answers, free text and possible registration link. We publish a testimonial only with separate consent.
  • Newsletter: email, name, language, consent version and timestamp.
  • Photos: event images and the operational no-photo preference recorded at check-in. We do not normally publish identifiable images of children.
  • Communications: email content and contact details needed to handle a request.

3. Legal bases

We provisionally rely on steps before, and delivery of, a free service under Article 6(1)(b) GDPR for necessary registration and event communications. Site security and necessary operation may rely on legitimate interests under Article 6(1)(f). Newsletter, analytics, testimonials and specific photo uses rely on consent under Article 6(1)(a). The exact basis for free registration, networking and group photography must be confirmed in legal validation.

4. Recipients, processors and transfers

Some providers may process data outside the EEA. The transfer mechanism stated in their contractual terms, such as an adequacy decision or Standard Contractual Clauses, applies and is reviewed in the privacy pack.

  • Netlify: hosting, serverless functions and technical logs.
  • MailerLite: event and newsletter communications; for events, only name, email, language, event group and necessary communication data.
  • Google Workspace and Google Sheets: non-public event registration, check-in, event answers and feedback records.
  • Google Analytics 4: only after analytics consent and without a custom user ID.
  • Microsoft Clarity: only after analytics consent and on allowed public routes; forms are masked.
  • Photographers or event operations partners: only information necessary to run the event.

5. Retention

  • no-photo operational preference: 30 days after the event
  • check-in time and operator: 3 months
  • networking/profile answers and identified feedback: 6 months
  • basic registration: 12 months
  • newsletter: until withdrawal or 24 months after the last explicit confirmation
  • minimum consent or unsubscribe evidence: 3 years
  • closed communications: 12 months
  • technical logs: no more than 90 days where Netlify allows
  • event photos: 3 years with annual review
  • truly anonymised aggregates: no time limit

6. Your rights

You may request access, correction, erasure, restriction or portability, object to legitimate-interest processing and withdraw consent at any time. Email womeninaiprague@gmail.com with the request and affected email address. We may reasonably verify identity before responding.

7. Complaint

You may complain to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, posta@uoou.gov.cz, uoou.gov.cz.

8. Automated decisions and security

We do not make decisions with legal or similarly significant effects. Do not put sensitive data or another person's data into free-text fields.