Privacy Policy for the English pages
Last updated: 13 October 2026
This policy explains what happens with your data on the English pages of martinbarna.cz/en/: the Fat Loss Kit form, the coaching application, the calorie and protein calculator and the visit statistics. It follows the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). The Czech pages of the website have their own policy in Czech: Zásady ochrany osobních údajů.
1. Who is responsible for your data
Martin Barna, Czech business ID (IČO) 76383032
Registered address: Lumírova 489/11, 700 30 Ostrava-Výškovice, Czech Republic
Not a VAT payer · Email: martin@martinbarna.cz · Phone: +420 603 229 831
In this policy "I" means Martin Barna, the controller of your data.
2. What data I process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Fat Loss Kit form: first name, email, the text of the consent you ticked and the time you sent it. If you used the calculator before sending the form, also its result: daily calories, protein, daily burn (TDEE), your goal, activity level and units. | To give you the kit, send you a short email series after it, and then about one email a week with tips and coaching offers. | Your consent (Art. 6(1)(a) GDPR) |
| Coaching application: first name, email, your goal, the message you write, the text of the consent you ticked and the time you sent it. | To read your application, answer it and talk about coaching with you. | Your consent (Art. 6(1)(a) GDPR) |
| Where you came from (saved with a form): campaign tags from the link you arrived through (utm_source, utm_medium, utm_campaign), also when you first came to another page of this website, and the address of the page you came from, without any parameters. | To know which posts and links bring people to the kit and the coaching. | Legitimate interest (Art. 6(1)(f) GDPR) |
| Spam protection (saved with a form): a one-way hash of your IP address made with a secret key. Your IP address itself is not saved with the form. | To block automated sign-ups: at most 5 forms per hour from one connection. | Legitimate interest (Art. 6(1)(f) GDPR) |
| My own visit statistics (only if you allow statistics in the cookie banner): the address of the page, the page you came from (without parameters), campaign tags, device type (mobile, tablet, desktop), country and a random session code that lives in your browser until you close the tab. Your IP address is not saved in these statistics. | How many people visit the pages and from where. | Your consent (cookie banner) |
| Google Analytics and Meta Pixel: the pages you visit, data about your device and browser, and the fact that you sent a form. Cookies only after your consent in the cookie banner (Meta Pixel only if you click "Accept"). Before your consent, Google Analytics receives only cookieless signals, without cookies or identifiers. | Website statistics, measuring and improving ads. | Your consent (cookie banner); cookieless signals before consent: legitimate interest (basic statistics) |
The calculator runs in your browser. The weight, height, age and sex you type in are not sent anywhere and not stored. Only if you then send the Fat Loss Kit form, the result listed above is saved with your sign-up, so the emails can use your numbers.
Please do not write health details (diagnoses, medication, pregnancy) into the application form. I am a coach, not a doctor. If something like that matters for your goal, talk to your doctor first.
3. Who else processes the data
For the purposes above I use these providers as processors:
- Supabase: the database and server functions that receive and store the forms and the visit statistics, including the technical request logs of these functions. The project runs in the EU (Frankfurt, Germany).
- WEDOS: web hosting of martinbarna.cz (Czech Republic). Like every web host, it handles the technical data needed to deliver the pages to your browser, such as your IP address.
- Google (Google Analytics): website statistics; cookies only after your consent in the cookie banner.
- Meta Platforms (Meta Pixel): measuring and improving ads, only after you click "Accept" in the cookie banner.
Google and Meta may process data outside the EU, mainly in the USA. The transfer is based on safeguards under GDPR (standard contractual clauses, or the EU-US Data Privacy Framework).
I do not sell your data and I do not pass it to anyone else for their own marketing.
4. Cookies and similar storage
The landing page /en/, the English articles and the protein tool show a cookie banner. Analytics and advertising cookies start only after you agree. You can also choose "Allow statistics only" (statistics without advertising cookies). Until you agree, Google Analytics runs in consent mode: it sets no cookies and stores no identifiers, and Google only receives cookieless signals. You can change or withdraw your choice any time with "Cookie settings" in the footer of those pages. This Privacy Policy page and the client guides do not load these tools.
| Name | Category | Purpose and duration |
|---|---|---|
| mb_consent_v1 (local storage and cookie) | Necessary | Remembers your choice in the cookie banner; 1 year. |
| mb_attr_v1 (session storage), mb_attr_v1_zrcadlo (local storage) | Where you came from | Remembers the campaign tags of the link you arrived through, so a form can save where you came from. Until you close the tab; the copy in local storage at most 7 days, and it is deleted when you send a form. |
| mb_pv_sid (session storage) | Statistics, only after consent | Random session code for my own visit statistics; until you close the tab. |
| Google Analytics (_ga, _ga_*) | Statistics, only after consent | Website statistics; up to 2 years. |
| Meta Pixel (_fbp, _fbc) | Advertising, only after "Accept" | Measuring and improving ads; up to 90 days. |
5. Emails
I send a short email series after the kit, and then about one email a week with tips and coaching offers, only if you ticked the consent box in the Fat Loss Kit form. Every email has a link to unsubscribe right away. You can also unsubscribe by writing to martin@martinbarna.cz. After that the emails stop.
6. How long I keep the data
I keep the data from the forms until you unsubscribe or withdraw your consent. If there is no activity from you for 3 years (no new sign-up, no reply, no application), I delete it. My own visit statistics contain no name, no email and no IP address.
If you become a coaching client, the data needed for the contract, payments and accounting are kept for the time the law requires.
7. Your rights
You have the right to access your data, to correct it, to have it deleted, to restrict its processing, to data portability, and to object to processing based on legitimate interest. You can withdraw your consent at any time; this does not affect what happened before you withdrew it. Write to martin@martinbarna.cz.
You can also file a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů (www.uoou.cz), or with the data protection authority in the country where you live or work.
8. Changes
I may update this policy. The current version is always on this page.