Preview. Gift & Curse is being registered as a business. Until that is complete, this page shows how things will work, and paid bookings are not open yet. The business details are added here once registration is done.
I collect only what I need to book and deliver sessions, and to reply to you. I do not sell your data, and I do not use it for advertising.
1. Who looks after your data
The controller of your personal data is Begüm Dvorak. The business is being registered in the Czech Republic; its business ID and registered address are added here once registration is complete.
For anything about your data, write to info@giftandcurse.com.
2. What I collect, and why
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Name, email, phone, time zone, who the session is for, chosen time and box | To book, confirm and deliver your sessions, and to contact you about them | Contract, Art. 6(1)(b) |
| Anything you choose to share about your health, diagnosis or neurodivergence | To prepare for and deliver sessions that fit you | Your explicit consent, Art. 9(2)(a) |
| Notes I make during and after sessions | To give you continuity from one session to the next | Contract, and your explicit consent where they include health information |
| Payment details: amount, date, method, transaction reference | To take payment, refund, and keep accounts | Contract, and legal obligation, Art. 6(1)(c) |
| Invoices and receipts | Czech tax and accounting law | Legal obligation, Art. 6(1)(c) |
| Workplace enquiries: name, job title, company, work email, what you want to talk about | To reply and prepare a proposal | Legitimate interest, Art. 6(1)(f) |
| Emails and messages you send me | To reply to you | Contract or legitimate interest |
You do not have to share health information. Sessions still work without it. If you do share it, you can withdraw your consent at any time. This does not affect anything that happened before.
3. Children and teenagers
For anyone under 15, a parent or legal guardian books and gives consent on their behalf. I collect only what is needed for the sessions.
4. Who else sees your data
I use a small number of trusted services to run Gift & Curse. They process data only on my instructions, or as independent providers where they handle payments.
- Website hosting and visit statistics: Vercel Inc.
- Payments: a card-payment provider, PayPal, Apple Pay, Google Pay (online payment is not open yet; the providers are named here before it opens)
- Video sessions: Zoom or Google Meet
- Email: an email provider, named here before bookings open
- Client portal: not live yet; its provider is named here before it opens
- Accounting: my accountant, for invoices only
Some of these services are based in the United States. Transfers are covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.
I share data with authorities only when the law requires it.
5. How long I keep it
| Data | How long |
|---|---|
| Booking details and session notes | Up to 3 years after our last session, then deleted |
| Invoices and accounting records | As long as Czech tax and accounting law requires (up to 10 years) |
| Enquiries that do not lead to a booking | 12 months |
| Portal content | Until you delete your account, then removed within 30 days |
6. Your rights
You can ask me to:
- show you the data I hold about you, and give you a copy;
- correct it;
- delete it, where I do not have to keep it by law;
- limit how I use it;
- send it to you or to someone else in a usable format;
- stop using it where I rely on legitimate interest.
You can also withdraw any consent at any time. Write to info@giftandcurse.com. I reply within one month.
If you are not happy with how I handle your data, you can complain to the Czech data protection authority, Úřad pro ochranu osobních údajů (uoou.gov.cz), or to the authority in your own EU country.
7. Cookies and statistics
This site does not use advertising or tracking cookies.
- Visit statistics: Vercel Web Analytics counts page visits in an aggregated way, without cookies and without identifying you.
- Light or dark mode: if you switch the theme, your choice is saved in your browser so the site remembers it. It never leaves your device.
8. Security
Data is sent over encrypted connections. Access is limited to me. I do not make automated decisions about you.
9. Changes
If I change how I use your data, I update this page and the date at the top.
Last updated: 10 October 2026.