Who is responsible for your data
The controller of your personal data is A28A s.r.o., IČO 23651610, VAT ID CZ23651610, registered office V třešňovce 224/8, Hrdlořezy, 190 00 Praha 9, Czech Republic, operator of numerology.cz. You can reach us at contact@numerology.cz for anything described on this page.
What we collect, and why
When you book a session or send an enquiry through this website, we ask for your name as it is spelled on your documents, your email address, your date of birth, and optionally your telephone number, your time and place of birth, the chosen session type, and whatever you choose to tell us about your question or situation. Your browser's timezone is recorded with the booking so that the time we confirm is the time you meant.
Birth details are not a special category of data under Article 9 of the GDPR, but we treat them as sensitive: they are the raw material of the analysis, they are used for nothing else, and they are never sold, rented or used for advertising.
Our server also keeps ordinary technical logs of requests, and the site sets no advertising or analytics cookies. The cookie notice records only that you have seen it.
The legal basis for each purpose
Arranging and delivering a session – Article 6(1)(b), performance of a contract or steps taken at your request before entering one. Without a name, an email address and a date of birth, a session cannot be prepared.
Answering an enquiry you send us – Article 6(1)(b), or Article 6(1)(f), our legitimate interest in replying to people who write to us.
The consent box on the booking form – Article 6(1)(a). You may withdraw that consent at any time; withdrawal does not affect processing already carried out, nor our ability to keep records we are legally required to keep.
Keeping the site secure and working – Article 6(1)(f), our legitimate interest in preventing abuse of the booking form and diagnosing faults.
Accounting and tax records – Article 6(1)(c), compliance with Czech law where a session has been invoiced.
Who else sees it
Your data stays on our own server. The parties who necessarily touch it are our hosting provider, on whose infrastructure the site and its database run; Cloudflare, which sits in front of the site and passes requests to it; and, where a session is booked, Google, because confirmed sessions are written into our Google Calendar as an appointment carrying your name and the details you gave.
Email we send to you, and the notification we send to ourselves, travels through the mail systems involved in delivering it. Some of these providers may process data outside the European Economic Area under the European Commission's standard contractual clauses. We use no advertising networks and no third-party analytics.
How long we keep it
Booking records are kept for as long as needed to deliver the session and to deal with any question that follows it, and then for up to three years. Invoices and accounting documents are kept for the period Czech accounting and tax law requires, which is up to ten years. Enquiries that lead to nothing are deleted within one year. Technical logs are short-lived.
Your rights
Under the GDPR you may ask us for a copy of the data we hold about you, ask us to correct it, ask us to erase it, ask us to restrict or to stop a particular use, object to processing based on legitimate interests, and ask for the data you gave us in a portable form. Where processing rests on consent, you may withdraw it.
Write to contact@numerology.cz and we will answer within one month. There is no charge for a reasonable request.
You also have the right to complain to the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.
Decisions and profiling
No decision with a legal or similarly significant effect on you is taken by automated means. A numerological analysis is prepared and interpreted by a person.
Security
The site is served over HTTPS, the booking database sits outside the public web directory and is not reachable from the internet, and administrative access is password protected. No system is perfect, and we will tell you and the supervisory authority about any breach that the law requires us to report.
Changes
This page was last updated on 15 September 2026. If what we do with personal data changes, this page changes with it.