Privacy Policy

Vědomý život, s.r.o. Effective from 2 September 2026

This notice explains what personal data we collect when you visit terezakramer.com, buy something from us, or talk to Achnael, and what we do with it. We've tried to write it the way we'd explain it to you in person: in plain language, without hiding anything in legal phrasing. It's written to meet Article 13 of the GDPR, the EU's data protection regulation, and because we're based in the EU, we apply the same care to everyone, wherever you live.

Contents

• I. Who we are and how to reach us
• II. What we collect, why, and on what legal basis
• III. Achnael and your conversations
• IV. Who we share your data with
• V. When your data leaves the EU
• VI. How long we keep your data
• VII. Your rights, and where to complain
• Cookies and measurement on terezakramer.com

I. Who we are and how to reach us

The controller of your personal data, which means the company that decides how and why it's processed, is:

Tereza Kramer is the author of the content we sell. The company is the one processing your data. For anything in this notice, write to hello@terezakramer.com. We haven't appointed a data protection officer, because the law doesn't require one for a company like ours; your emails are read by real people who can actually help.

II. What we collect, why, and on what legal basis

We only collect what we need for a specific purpose, and each purpose has its own legal basis under the GDPR. Here's the whole picture:

Two things worth spelling out:

You don't have to give us anything. But without an email address we can't deliver a digital product to you, so the data marked as needed for the contract really is needed for it.

Customers and subscribers are two separate lists. If you bought from us, we may occasionally write to you about similar products of ours without asking first, because the law allows it and we think it's reasonable; you can opt out with one click. If you only signed up for free content, we email you solely on the basis of your consent, and unsubscribing ends it.

Cookies deserve their own explanation. The short version: nothing beyond the strictly necessary runs until you allow it in the cookie bar. The details, including a table of every cookie we use, are in our Cookie Policy, and the measurement tools themselves are described at the end of this page, in the section on cookies and measurement.

We don't ask for, and don't want, any special categories of data such as health information. Our products touch on wellbeing, but buying a meditation doesn't tell us anything about your health, and we don't draw conclusions like that from your purchases.

III. Achnael and your conversations

Achnael is our AI guide, available as an optional add-on to our products. When you write to Achnael, your messages are processed automatically so that Achnael can reply; that's the whole point of the service, and it can't work any other way. The chat runs on BuddyPro, the platform Achnael is built on, which processes the conversations for us.

A conversation with an AI can get personal, so three honest points:

• Please don't share things you'd rather keep private: health details, passwords, payment data, or personal information about other people. Achnael doesn't need them to be helpful.
• Your conversations are personal data and everything in this notice applies to them, including your right to have them deleted.
• Achnael generates answers automatically, but no decision with legal or similarly serious effects on you is ever made this way. Nobody's access, price or rights depend on what an algorithm concluded about them.

IV. Who we share your data with

We never sell your personal data, and we don't hand it to anyone for their own marketing. The companies below process data for us, under contracts that bind them to protect it, and each one only gets what it needs for its job:

Beyond that, we disclose data only where the law requires it, typically to tax authorities, or where we need to defend a legal claim.

V. When your data leaves the EU

Most of our processing happens in the EU. Some of the providers above, such as Google, Microsoft and Stripe, are U.S. companies, so some data is transferred to the United States. Where that happens, we transfer it on the basis of the adequacy decision for the EU-U.S. Data Privacy Framework and/or the Commission's Standard Contractual Clauses, which are the safeguards EU law provides for exactly this situation. If you'd like a copy of the relevant safeguard for a specific provider, write to us and we'll send it.

VI. How long we keep your data

Not longer than we need it, and never "just in case, forever". In practice:

When a period ends, we delete the data or anonymize it so it's no longer about you.

VII. Your rights, and where to complain

The GDPR gives you real, usable rights over your data, and they cost nothing:

• Access. Ask us what data we hold about you and get a copy of it.
• Rectification. Have anything inaccurate corrected.
• Erasure. Have your data deleted, where we no longer have a reason to keep it.
• Restriction. Have processing paused while something is being sorted out.
• Portability. Get the data you gave us in a machine-readable format.
• Objection. Tell us to stop processing based on legitimate interest, including marketing; for marketing we stop without weighing anything.
• Withdrawing consent. Where processing runs on your consent, you can withdraw it at any time, and it doesn't affect what happened before. For emails, use the unsubscribe link; for cookies, use "Cookie settings" in the footer.

To use any of these, write to hello@terezakramer.com. We'll answer within a month. We may ask you to confirm it's really you, which protects you, not us.

If you think we're handling your data badly, tell us first and we'll do our best to fix it. You also have the right to complain to a supervisory authority: in the Czech Republic that's the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), uoou.gov.cz, and if you live elsewhere in the EU, you can turn to the authority in your own country instead.

U.S. state privacy rights. If you live in a U.S. state with a privacy law, such as California, Colorado or Virginia, those laws typically give you rights to access, correct and delete your data, and to opt out of its sale or sharing. Two plain answers: we do not sell your personal data, and we do not share it for cross-context behavioral advertising. If you want to exercise any right under your state's law, write to hello@terezakramer.com and we'll treat your request with the same care as one under the GDPR. And a note on wellbeing: our products are about meditation and inner work, but we don't collect health records, and whatever you choose to share with us is used only to provide what you asked for, never to profile you or to advertise to you.

This notice is effective from 2 September 2026 and replaces the previous version. If we change it, the current version will always be at this address, with its effective date.

Vědomý život, s.r.o. V Půstkách 460, 252 41 Dolní Břežany, Czech Republic hello@terezakramer.com

VIII. Cookies and measurement on terezakramer.com

This article was added on 13 August 2026 and covers the English website terezakramer.com. Everything written above applies to it as well; this article only adds the detail about cookies and about the tools that measure how the site is used.

1. Nothing runs until you allow it

The first time you open the site, a bar asks what you are willing to allow. Until you answer, the site loads no analytics and no marketing tool, stores no measurement cookie and sends nothing to Google, Microsoft or Meta. “Accept all” and “Reject all” stand next to each other, the same size, and refusing costs you nothing, and the site works exactly the same either way.

The one thing the site does store is your answer itself, in a cookie named cc_consent. Without it we would have to ask you again on every single page.

2. What the site measures if you allow analytics cookies

Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It tells us how many people came, which pages they read, how long they stayed, and whether they arrived from a search engine, a link or a newsletter. It does not tell us who you are: Google Analytics does not store your IP address, and the identifier it does store belongs to your browser, not to your name. The measurement ID used here is G-3ZRRJ9NZT4.

Microsoft Clarity (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA). This one goes further than Analytics, so we want to be plain about it: Clarity records your visit. It captures how your mouse or finger moves across the page, how far you scroll, where you click and which pages you go through, and it replays that as an anonymous recording. It also merges those visits into heatmaps that show which parts of a page people read and which they never reach. We watch it for one reason only: to see where the site confuses people, so we can fix it.

What Clarity does not capture is what you write. Clarity is set up to mask text, so the content of forms (your name, e‑mail, message) is hidden before the recording ever leaves your browser. We never see it in the recordings. The measurement ID used here is yfohjn4zq1.

3. What runs if you allow marketing cookies

Meta Pixel, ID 485162484942137 (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). It measures how many people arrived from Facebook or Instagram and what they did afterwards, and it makes it possible to show a follow‑up post to someone who has already visited. Meta processes the data for its own purposes as well, under its own privacy policy. At the moment the pixel is not switched on here. It is deliberately off for the launch.

4. What entitles us to do this

For analytics and marketing cookies the legal basis is your consent, Article 6(1)(a) of the GDPR, together with Section 89(3) of Czech Act No. 127/2005 Coll., on electronic communications. We ask for it before anything is stored, and you can take it back at any time (point 7).

The necessary cookie cc_consent is a different matter: it exists only because you made a choice, it stores nothing about your behavior, and the law does not require consent for it. Without it we could not honor your decision.

5. How long the data stays

The individual cookies, their lifetimes and who sets them are listed on a separate page, Cookie policy. In the tools themselves, the data is kept as follows: in Google Analytics, user‑level data for 14 months, after which Google deletes it; in Microsoft Clarity, recordings and heatmaps for 30 days; in Meta, according to Meta’s own retention rules. Your consent record (cc_consent) lasts 365 days if you accept, and 182 days if you refuse, so that a refusal is not followed by us asking again the next morning.

6. Data leaving the European Union

Google, Microsoft and Meta all process part of the data on servers in the United States. For each of them the transfer rests on the EU–U.S. Data Privacy Framework, the adequacy decision the European Commission adopted on 10 July 2023; all three companies are on the official list of certified organizations, which you can check yourself at dataprivacyframework.gov. Where the framework does not reach, the standard contractual clauses approved by the Commission apply. If you would rather none of this happen, refusing analytics and marketing cookies stops it completely.

7. Taking your consent back

At the bottom of every page there is a link, Cookie settings. It reopens the same bar you saw the first time, and you can change or withdraw any part of your consent there. The change takes effect immediately: the tools stop loading and the cookies belonging to the category you turned off are deleted. You can also delete cookies directly in your browser. How to do that is described on the Cookie policy page.

Withdrawing consent does not make what happened before it unlawful, and it has no effect on the parts of Articles I–VII that rest on a different legal basis.

8. Your rights, and where to complain

All the rights described in Article VI apply here in full: access, rectification, erasure, restriction, portability, objection. Write to us at tereza.kramerova@seznam.cz. If you believe we are handling your data badly, you can also turn to the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), uoou.gov.cz, or to the supervisory authority in the country where you live.

This Article VIII is effective from 13 August 2026.