Privacy
Privacy notice
We collect only what a booking, an account or the service's security needs. We use no advertising or profiling, and the public pages at kiket.cz and kiket.sk count visits without cookies.
Version of 9 November 2026. This text describes how Kiket works today. It is being reviewed and may be updated; any change will appear here with a new date.
1.Who is responsible
Kiket is operated by Kiket s.r.o., company ID (IČO) 23765542. Its registered office and commercial register entry are on the Contact page.
Send any request about your personal data to [email protected] or in writing to that address. We answer within one month.
2.Two roles: the organizer and Kiket
Every course is offered by an independent organizer, named on the course page. When you book or join a waitlist, that organizer decides how your booking data is used, and Kiket processes it on the organizer's behalf.
Kiket decides on its own behalf how account, organization and security data is used, and how this public website works.
3.What we process
Depending on how you use Kiket:
- A booking or waitlist entry: your name, email address, the language of the booking, your confirmation that you are an adult booking for yourself and your acceptance of the organizer's terms; then the state of the booking, payment and any refund.
- Answers to an organizer's own questions, limited to the practical running of the course. Organizers may not ask about health or other sensitive matters.
- An account: your name and email address; a one-way hash of your password, if you set one; your passkeys, of which Kiket keeps only the public key, the name you give each one and when it was added, while your fingerprint, face or PIN never leaves your device; the secret of your authenticator app and its recovery codes, if you turn on two-step sign-in; one-time codes we email you to confirm a sensitive action, valid for ten minutes; if you sign in with Google or Seznam, only that provider's identifier for your account; and your signed-in sessions.
- An organization: its name, the seller's legal details shown to participants, a support contact, a logo and the email addresses of invited staff.
- Security: your IP address, turned into keyed fingerprints that limit repeated attempts, and records of important actions that contain identifiers only, never names, email addresses or IP addresses.
You enter card details on Stripe's payment page, so Kiket never receives them. We learn only whether and how much was paid or refunded.
4.Why, and on what legal basis
- To arrange your booking, payment and refunds, and to run your account: performance of a contract.
- To send essential messages about your booking, account and security: performance of a contract.
- To keep accounting and tax records: legal obligation.
- To protect the service against abuse and to keep a record of important actions: legitimate interest in a secure service.
- To send optional news from an organizer you chose: your consent, which you can withdraw at any time through the link in each email.
5.Who receives your data
- The organizer of your course, who is responsible for it.
- Stripe processes card payments on the organizer's own Stripe account.
- Mailjet delivers our emails.
- Cloudflare delivers this site and protects it from attacks, so every request your browser makes, with your IP address, passes through its network.
- Cloudflare Turnstile checks that a booking or waitlist form is sent by a person.
- Google and Seznam, only if you choose to sign in with them: you sign in on their page, so they receive your sign-in request, and Kiket receives only their identifier for your account.
- Mapy.com, operated by Seznam.cz, a.s., supplies the map images your browser loads, and so sees your IP address and the map area shown.
- OVHcloud hosts Kiket on servers in France.
- Better Stack keeps the service's technical logs in the United States, so that we can find faults and attacks. The transfer relies on the EU-US Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback.
Address search uses Kiket's own copy of the Czech address register, so what you type is not sent to anyone else.
Some of these providers belong to groups based outside the European Union. The transfer to the United States named above relies on the safeguard stated there. If we confirm any other transfer outside the EU, we will name it here with the safeguard it relies on.
6.How long we keep it
- Answers to an organizer's questions, and waitlist entries that did not become a booking: 30 days after the course ends.
- Accepted bookings, payments and refunds: as long as accounting and tax law require.
- Records of email delivery: 90 days.
- Records of account and security actions: 180 days. Records of administrative actions: 365 days. Records of booking actions: 365 days after the course's final scheduled end.
- Requests to open an organization: names are deleted 90 days after the request is closed.
- Accounts: until you close yours under Account → Security. Closing deletes your sign-in details and settings at once; bookings stay with their organizers.
- Technical logs: 3 days.
7.Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable form and to object to processing based on legitimate interest.
For a booking, contact its organizer, whose details are on the course page, or write to us and we will pass your request on. For an account or anything else, write to us. Each email from an organizer also links to your email settings.
You may also complain to the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.