Privacy policy

Effective date: 22 July 2026
Last updated: 22 July 2026

The Anglo-Czech Educational Fund ("ACEF", "we", "us", or "our"), a charity registered with the Charity Commission for England and Wales under registration number 1110348, is the data controller for the personal data described in this policy. This policy explains what personal data we collect through acef.university, why we collect it, the legal basis for processing it, how long we keep it, who it is shared with, and the rights you have under the EU General Data Protection Regulation (GDPR) and UK GDPR.

Contact: unitax@seznam.cz

1. The personal data we collect

a) Grant application data. When you submit an application through our form, we collect the information you provide, which may include: your name, title, date of birth, nationality, postal address, telephone number and email address; details of your programme and place of study; your educational and professional qualifications; your employment history; the details of your two referees (name, position, organisation, address, telephone and email); your availability for interview; and any additional information you choose to provide. You are responsible for informing your referees that you have provided their contact details to us for this purpose.

b) Published reports. Students who receive a grant are asked to submit interim and final reports. Where a student consents, their report — including their name (or initials) and the institution attended — is published on our website. Reports are only published with the student's consent.

c) Usage and analytics data. With your consent, we use Google Analytics to understand how the website is used. This may involve cookies and the collection of usage data such as your IP address, device and browser type, the pages you visit, and the time and date of your visit. No analytics cookies are set until you consent (see section 5).

We do not knowingly collect any special categories of personal data through the form.

2. Why we use your data and our legal basis

  • To assess your grant application and administer any grant awarded. Legal basis: your consent (given when you submit the form), and our legitimate interests in operating the charity and evaluating applications. For successful applicants, processing is also necessary to take steps to enter into and perform the grant arrangement.
  • To contact you about your application (including via your referees). Legal basis: consent and legitimate interests.
  • To publish student reports. Legal basis: your consent, which you may withdraw at any time.
  • To measure and improve the website using analytics. Legal basis: your consent.
  • To comply with our legal obligations, including charity, financial and record-keeping obligations. Legal basis: legal obligation.

3. Who has access to your data and who we share it with

Your application data is accessible only to the Trustees of the Anglo-Czech Educational Fund and the Fund's website administrator, who use it solely to assess and administer applications. We do not sell your data or use it for advertising.

We use the following service providers (processors) to operate the website:

  • Website operation and hosting — gramflows.com. Our website is developed and hosted on our behalf by gramflows.com, on servers located in Germany (EU), with content delivered through Cloudflare's global content-delivery network.
  • Content management — Directus, self-hosted on the above EU (Germany) infrastructure. Application form data is not stored in this system; it is delivered to us only by email.
  • Email delivery — Postmark, a transactional email provider based in the United States. Your application is delivered to us by email through Postmark, subject to the safeguards described in section 4.
  • Analytics — Google (Google Analytics 4) and our consent management provider CookieYes, used only after you consent.

Each processor is bound to use your data only on our instructions and to keep it secure.

4. International transfers

Some of our service providers process personal data outside the European Economic Area (EEA), in particular Postmark and Google in the United States. Where this happens, we rely on appropriate safeguards — the EU-US Data Privacy Framework and, where relevant, the European Commission's Standard Contractual Clauses. You can contact us for more information.

5. Cookies and analytics

When you first visit the website, you are shown a consent banner allowing you to accept or reject non-essential cookies on an equal footing. We use Google Consent Mode: analytics and any cookies are set to "denied" by default and are only enabled if you give consent. Google Analytics is used only for analytics and is not linked to advertising. You can change or withdraw your choice at any time via the cookie settings link in the footer.

6. How long we keep your data

  • Unsuccessful applications: deleted within 12 months of the funding decision.
  • Successful applicants: retained for the duration of the grant and for up to 6 years afterwards to meet our charity, financial and legal obligations.
  • Published reports: kept for as long as they remain published, with the student's consent.
  • Analytics data: retained for 14 months in Google Analytics.

7. Your rights

Under the GDPR / UK GDPR you have the right to: access your personal data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and to withdraw consent at any time (without affecting processing carried out before withdrawal). To exercise any of these rights, contact us at unitax@seznam.cz.

You also have the right to lodge a complaint with a data protection supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů); in the UK it is the Information Commissioner's Office (ICO). You may also contact the supervisory authority in your own country of residence within the EEA.

8. Security

We take reasonable technical and organisational measures to protect your personal data. The website is served over HTTPS, application data is transmitted securely, and access to application data is limited to those who need it. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

Our services are directed at postgraduate applicants and are not intended for children under 18. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date, and, where appropriate, notified to you.

11. Contact

For any questions about this policy or your personal data, contact the Anglo-Czech Educational Fund at unitax@seznam.cz.