Privacy Policy

Effective date: 22/09/2026

1. Data Controller

The controller of personal data is:

Ersteberg s.r.o.
Company ID: 05558255
VAT ID: CZ05558255
Opletalova 4, 110 00 Prague, Czech Republic
Email: hello@resselacademy.com

Ressel Academy is a business name or brand used by Ersteberg s.r.o.

2. Personal Data We May Collect

Depending on how you interact with us, we may process:

Identification data

• name;

• date of birth;

• nationality.

Contact information

• email address;

• telephone or WhatsApp number;

• country of residence.

Application information

• professional field;

• qualifications;

• employment experience;

• Czech language level;

• programme preference;

• intended start period;

• accommodation requirements.

Immigration and residence information

• whether you are inside or outside Czechia;

• general visa or residence category;

• employment-authorisation status.

Contract and payment information

• programme selected;

• invoices;

• payment status;

• bank or payment information where necessary.

Educational information

• attendance;

• assessments;

• progress;

• programme activity.

Employer-readiness information

• professional profile;

• interview history;

• assessment outcomes;

• employer interaction.

Technical information

• IP address;

• browser and device information;

• security logs;

• cookie information where applicable.

Communications

• emails;

• enquiries;

• complaints;

• other communications with us.

3. Sensitive Personal Data

Please do not provide health information, criminal-record information or other special-category personal data unless specifically requested and reasonably necessary.

Where such information is required, it will be processed only where an appropriate lawful basis exists.

4. Why We Process Personal Data

We may process personal data to:

• assess applications;

• communicate with applicants;

• determine programme suitability;

• prepare enrolment documentation;

• provide educational services;

• administer accommodation;

• maintain attendance and academic records;

• organise employer interaction;

• facilitate permitted practical integration;

• issue invoices and process payments;

• comply with legal and accounting obligations;

• prevent fraud and misuse;

• protect participants, staff and systems;

• respond to legal claims;

• improve services;

• send marketing communications where lawfully permitted.

5. Legal Bases for Processing

Depending on the activity, processing may be based on:

Pre-contractual steps
For reviewing an application or preparing an enrolment offer.

Performance of a contract
For providing programmes, accommodation and related services.

Legal obligation
For accounting, tax, regulatory or other statutory requirements.

Legitimate interests
For security, fraud prevention, administration, defending legal claims and reasonable business operations where those interests do not override individual rights.

Consent
Where consent is required, including certain marketing or optional data-sharing activities.

6. Employer Sharing

Where employer interaction forms part of a participant’s pathway, relevant professional information may be shared with potential employers.

Ressel Academy should not automatically disclose the participant’s entire file.

Before material employer sharing, participants should be informed of the type of information being shared and the relevant purpose.

Sensitive or unnecessary information should not be disclosed.

7. Agencies and Recruitment Partners

Where a person applies through an authorised partner, information may be received from or shared with that partner where necessary to administer the application and where a lawful basis exists.

A partner does not obtain unrestricted access to personal information merely because they introduced the applicant to Ressel Academy.

8. Other Recipients

Personal information may be disclosed, where appropriate, to:

• IT and hosting providers;

• email and CRM providers;

• payment processors and banks;

• accountants and auditors;

• accommodation providers;

• authorised education or recruitment partners;

• potential employers;

• professional advisers;

• insurers;

• courts;

• regulators;

• competent public authorities.

Service providers acting as processors must process personal data under appropriate contractual and legal safeguards.

9. Public Authorities

Where required or permitted by law, Ressel Academy may provide personal data to competent public authorities.

Nothing in this Privacy Policy means that Ressel Academy controls or influences decisions made by public authorities.

10. International Transfers

Some applicants, partners or service providers may be located outside the European Economic Area.

Where personal information is transferred internationally, Ressel Academy will use an appropriate lawful transfer mechanism where required.

11. Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet legal obligations.

Retention periods may differ depending on the type of data.

Examples may include:

• unsuccessful or incomplete applications;

• student and enrolment records;

• accounting records;

• marketing records;

• website security logs.

Exact retention periods should be determined according to applicable Czech and EU legal requirements and internal record-retention rules.

12. Your Rights

Subject to applicable data-protection law, individuals may have rights including:

• access to personal data;

• correction;

• deletion;

• restriction of processing;

• objection;

• data portability;

• withdrawal of consent;

• complaint to the competent supervisory authority.

Requests may be sent to:

hello@resselacademy.com

13. Supervisory Authority

Individuals may have the right to lodge a complaint with the competent Czech data-protection supervisory authority.

14. Automated Decision-Making

Ressel Academy does not make admission decisions based solely on automated decision-making producing legal or similarly significant effects, unless expressly stated otherwise and permitted by law.

15. Cookies

The website may use cookies or similar technologies.

Essential cookies may be used for:

• website functionality;

• security;

• session management.

Non-essential analytics, advertising or tracking technologies should be used only in accordance with applicable consent requirements.

Where non-essential cookies are used, a separate Cookie Policy or cookie-management interface should identify them.

16. Marketing Communications

Marketing communications will be sent only where a lawful basis exists.

Recipients may opt out using the unsubscribe mechanism provided or by contacting:

hello@resselacademy.com

17. Security

Ressel Academy uses reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No electronic transmission or storage method can be guaranteed to be completely secure.

18. Changes to This Policy

This Privacy Policy may be updated to reflect legal, operational or technical changes.

The current version will be published with an updated effective date.

19. Contact

Questions concerning privacy or personal-data rights may be sent to:

hello@resselacademy.com