Allzora s.r.o. forklift training platform
Privacy notice
Version 1.0 · Effective date: to be confirmed before publication
1Who we are
1.1The data controller for this platform is Allzora s.r.o., company identification number 03860752, VAT identification number CZ03860752, registered office Pavla Švandy ze Semčic 580/10, Smíchov, 150 00 Praha 5, Czech Republic, registered with the Municipal Court in Prague, section C, file 238967 (Allzora, we or us).
1.2Privacy contact email: [to be added]. You may also write to our registered office. The independent training provider that assesses you acts as a separate controller for its professional assessment decisions; its details are shown before purchase and in the order confirmation.
2What data we collect
2.1Account and contact data: your name, email address, telephone number and the postal address you give for card delivery.
2.2Enrolment and eligibility data: your age confirmation, intended work country, equipment category and lifting capacity, chosen language, experience and the declarations you make during enrolment.
2.3Learning and exam data: your progress through lessons, quiz and theory test answers, scores, attempts and results.
2.4Evidence you upload: your licence photograph, practical assessment videos, supervisor declarations and, where a card is issued, scans of the front and back of the card.
2.5Billing data: the name, company, company ID (IČO), VAT ID (DIČ) and address you give for invoices, the invoices themselves and the payment status recorded by our bank.
2.6Audit trail data: for declarations, tests, submissions and other key actions we record a timestamp, your IP address, browser and device information, country and timezone, so there is a verifiable record of what happened and when.
2.7Support data: messages you send us and our replies.
3Why we use it and on what legal basis
3.1To provide the service you bought — creating your account, delivering the course, running tests, reviewing evidence, issuing and posting your card — under the contract with you.
3.2To meet legal obligations — keeping invoices and accounting records under Czech tax and accounting law, and keeping training and examination records where the applicable rules require them.
3.3For our legitimate interests — keeping the platform secure, preventing fraud and misuse, and maintaining the audit trail that proves declarations, tests and submissions genuinely happened.
3.4Where none of the above applies, we ask for your consent first, and you can withdraw it at any time. We do not use your videos, photos or documents for marketing or AI model training without your separate agreement.
4Website analytics
4.1This site uses Lovable's built-in visitor analytics. It uses no cookies, stores nothing on your device, does not keep your IP address and does not identify you.
4.2It records which pages are visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Because this site does not ask for analytics consent, this is recorded for every visitor — without cookies and without identifying anyone.
4.3Detailed analytics data is kept for 90 days and daily summaries for one year. Lovable collects this data for us. Lovable's privacy policy at https://lovable.dev/privacy explains how it handles it.
5Who receives your data
5.1Lovable, which hosts this website, stores its database and files, and provides the analytics and error reporting described above.
5.2Google, in two limited ways: your browser downloads this site's fonts from Google, which means Google receives your IP address when the page loads; and if you choose to sign in with Google, Google processes that sign-in under its own privacy policy.
5.3Fio banka, a.s., which processes your bank transfer payment and provides us with the payment confirmation shown on your invoice.
5.4The training provider and its examiner, who receive the learning, test and evidence data needed to assess you and issue your credential.
5.5The postal or courier service that delivers your card to the address you gave.
5.6We do not sell your personal data. Public card verification shows only the limited credential details needed to confirm a card is genuine — never your videos, identity documents or home address.
6Audit trail and exam records
6.1Declarations, theory tests, practical submissions and credential decisions are recorded with a timestamp, IP address, browser, country and timezone. This digital record protects you as much as us: it proves what you completed and when.
6.2Trainers and administrators can review these records and export them as a PDF. They are not public and are not shared except as described in section 5 or where the law requires it.
7How long we keep data
7.1Account, learning and exam data is kept for as long as your account exists and afterwards for the period needed to verify issued credentials and handle disputes.
7.2Invoices and accounting records are kept for the period required by Czech law, normally ten years.
7.3Analytics data is kept as described in section 4. When data is no longer needed, it is deleted or anonymised.
8Your rights
8.1You can ask us for access to your data, a copy of it, correction of anything wrong, deletion, restriction of processing, or transfer to another service (portability). You can object to processing based on legitimate interests and withdraw any consent you gave.
8.2To use any of these rights, email us at [to be added]. We respond within one month.
8.3If you believe we handle your data unlawfully, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz, or to the data protection authority in your country.
9Security
9.1Data is encrypted in transit. Uploaded videos, photographs and card scans are stored in private storage that only you and authorised trainers and administrators can open. Access to administrative functions is limited to named staff with their own accounts.
9.2No method of transmission or storage is completely secure, but we apply the technical and organisational measures required of us and we do not disclaim those duties.
10Changes and contact
10.1If we change this notice, we publish the new version here with its date. For significant changes we will also tell registered learners by email.
10.2Questions about this notice: email [to be added] or write to Allzora s.r.o., Pavla Švandy ze Semčic 580/10, Smíchov, 150 00 Praha 5, Czech Republic.