Privacy Policy

Desire Principles platform (desireprinciples.com)

1. INTRODUCTION

This Privacy Policy describes how the company:

Korelo s.r.o.

Company ID (IČ): 11944382

Registered office: Nové sady 988/2, 602 00 Brno, Czech Republic

Email: info@desireprinciples.com

(hereinafter referred to as the “Controller”)

processes personal data of natural persons in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR).

2. SCOPE OF PERSONAL DATA PROCESSED

The Controller processes the following personal data:

• first name and last name

• email address

• billing and payment information

• IP address and online identifiers

• order details

• account login credentials

• content of communications

• technical data and cookies

3. PURPOSES OF PROCESSING

Personal data is processed for the following purposes:

• performance of the contract (providing purchased digital content and services)

• maintaining your user account

• compliance with legal obligations (accounting, tax records)

• communication (responding to inquiries, order confirmations, system notifications)

• marketing and analytics (with your consent)

4. LEGAL BASES FOR PROCESSING

Processing is carried out on the basis of:

• performance of a contract (Article 6(1)(b) GDPR)

• compliance with a legal obligation (Article 6(1)(c) GDPR)

• legitimate interests of the Controller (Article 6(1)(f) GDPR)

• your consent (Article 6(1)(a) GDPR)

5. DATA PROCESSORS AND RECIPIENTS

Your personal data may be shared with the following third-party processors:

• Stripe (payment processing)

• Google Analytics (website analytics)

• Meta Platforms (advertising and analytics)

• YouTube and Vimeo (video hosting)

• Brevo (email communications)

• CloudPanel / hosting provider (web hosting)

6. TRANSFERS OUTSIDE THE EU

Some of the above processors are based outside the European Economic Area. In such cases, data transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or by an adequacy decision, ensuring an equivalent level of data protection.

7. DATA RETENTION PERIOD

Personal data is retained for the duration of the contractual relationship, for the period required by law (e.g., tax and accounting records — typically 10 years), and for the duration of your consent where applicable. After these periods expire, data is securely deleted.

8. COOKIES

This website uses the following types of cookies:

• Essential cookies — necessary for the website to function (e.g., session, login)

• Analytics cookies — help us understand how visitors use the website (e.g., Google Analytics)

• Marketing cookies — used to deliver relevant advertising (e.g., Meta Pixel)

You can manage your cookie preferences through your browser settings at any time.

9. PROFILING

Automated processing may be used for marketing purposes (e.g., personalized recommendations). This processing does not produce legal effects or similarly significantly affect you.

10. YOUR RIGHTS

Under the GDPR, you have the following rights:

• Right of access — to obtain information about the processing of your data

• Right to rectification — to correct inaccurate or incomplete data

• Right to erasure (“right to be forgotten”) — to request deletion of your data

• Right to restriction of processing — to limit how your data is used

• Right to object — to object to processing based on legitimate interests

• Right to data portability — to receive your data in a structured, machine-readable format

• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at: info@desireprinciples.com

You also have the right to lodge a complaint with a supervisory authority. The Czech supervisory authority is the Office for Personal Data Protection (UOOU), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic (www.uoou.cz). If you are located in another EU member state, you may contact your local data protection authority.

11. FINAL PROVISIONS

This Privacy Policy is effective as of January 1, 2026. The Controller reserves the right to update this policy. Any changes will be published on this page.