Privacy Policy for Paddington Gosha
Last updated: September 26, 2026
1. General Information
Paddington Gosha is an internal digital assistant developed for Paddington Academy, an online English language school. It is designed to automate administrative tasks, track lessons, verify the availability of lesson recordings, and organise educational archives.
This Privacy Policy explains what personal data Paddington Gosha processes, how such data is used, and what measures are taken to protect it.
Data Controller:
Paddington Academy
Legal name: Karina Mukhametianova
Company Registration Number (IČO): 17821321
Registered address: Premonstrátů 910, Chýně 25303
Contact email: paddington.academy.prague@gmail.com
2. Personal Data We Process
To perform its functions, Paddington Gosha may process the following categories of personal data:
3. Use of Google Drive
Paddington Gosha uses Google Drive to create, organise, and maintain an internal archive of lesson recordings.
Following authorisation by the Google account holder, the application may create folders, upload lesson recordings, access information about files available to the application, and store links for internal educational and administrative purposes.
In particular, Google Drive integration is used to archive recordings of lessons delivered by the teacher Hope and to store recordings required for internal teaching quality reviews.
Access to Google Drive is used exclusively for managing educational records and is not used for advertising purposes.
Data obtained through Google APIs is not sold to advertisers or used for personalised advertising or for training publicly available artificial intelligence models.
The application's use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including its Limited Use requirements.
4. Purposes and Legal Bases of Data Processing
Paddington Gosha processes personal data for the following purposes:
The recording of lessons involving minors and the applicable legal bases are also governed by the information and documentation provided to parents or legal guardians.
5. Data Storage and Sharing
Paddington Gosha uses third-party technology providers, including Google Drive, Zoom, AlfaCRM, Telegram, and Railway cloud infrastructure.
Access to personal data is restricted to authorised school personnel who require it to perform their responsibilities and to relevant technology providers where necessary for the operation of the application.
Where personal data is transferred or processed outside the European Economic Area, appropriate safeguards are applied in accordance with the General Data Protection Regulation (GDPR).
Lesson recordings and related personal data are retained for [insert the applicable retention period or specific criteria used to determine it].
After the applicable retention period, personal data is deleted or anonymised unless further retention is required by law.
6. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and loss.
Access to Paddington Gosha's administrative functions is restricted to authorised users.
Google Drive integration uses OAuth 2.0 authorisation. The application does not require users to disclose their Google account passwords.
7. Your Data Protection Rights
Under the GDPR, individuals whose personal data is processed, or their legal representatives where applicable, may exercise the following rights, subject to applicable legal conditions:
paddington.academy.prague@gmail.com
Individuals also have the right to lodge a complaint with the relevant data protection supervisory authority, including the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů — ÚOOÚ).
8. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the functionality of Paddington Gosha, the technology services we use, or applicable legal requirements.
The latest version will be published on the official Paddington Academy website.
Last updated: September 26, 2026
1. General Information
Paddington Gosha is an internal digital assistant developed for Paddington Academy, an online English language school. It is designed to automate administrative tasks, track lessons, verify the availability of lesson recordings, and organise educational archives.
This Privacy Policy explains what personal data Paddington Gosha processes, how such data is used, and what measures are taken to protect it.
Data Controller:
Paddington Academy
Legal name: Karina Mukhametianova
Company Registration Number (IČO): 17821321
Registered address: Premonstrátů 910, Chýně 25303
Contact email: paddington.academy.prague@gmail.com
2. Personal Data We Process
To perform its functions, Paddington Gosha may process the following categories of personal data:
- Names and surnames of students and teachers.
- Dates, times, and durations of lessons.
- Lesson topics, attendance records, and relevant administrative comments.
- Zoom lesson recordings, including participants' images and voices.
- Lesson identifiers, recording links, and file metadata.
- Work-related Telegram messages and user identifiers of individuals interacting with the assistant.
- Technical information necessary for the operation of integrated services.
3. Use of Google Drive
Paddington Gosha uses Google Drive to create, organise, and maintain an internal archive of lesson recordings.
Following authorisation by the Google account holder, the application may create folders, upload lesson recordings, access information about files available to the application, and store links for internal educational and administrative purposes.
In particular, Google Drive integration is used to archive recordings of lessons delivered by the teacher Hope and to store recordings required for internal teaching quality reviews.
Access to Google Drive is used exclusively for managing educational records and is not used for advertising purposes.
Data obtained through Google APIs is not sold to advertisers or used for personalised advertising or for training publicly available artificial intelligence models.
The application's use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including its Limited Use requirements.
4. Purposes and Legal Bases of Data Processing
Paddington Gosha processes personal data for the following purposes:
- Organising and supporting educational activities.
- Verifying the accuracy and completeness of AlfaCRM records.
- Automatically identifying missing lesson recordings.
- Storing video recordings in the school's Google Drive archive.
- Supporting teaching quality assurance and internal methodological reviews.
- Generating internal reports and sending administrative reminders to teachers.
The recording of lessons involving minors and the applicable legal bases are also governed by the information and documentation provided to parents or legal guardians.
5. Data Storage and Sharing
Paddington Gosha uses third-party technology providers, including Google Drive, Zoom, AlfaCRM, Telegram, and Railway cloud infrastructure.
Access to personal data is restricted to authorised school personnel who require it to perform their responsibilities and to relevant technology providers where necessary for the operation of the application.
Where personal data is transferred or processed outside the European Economic Area, appropriate safeguards are applied in accordance with the General Data Protection Regulation (GDPR).
Lesson recordings and related personal data are retained for [insert the applicable retention period or specific criteria used to determine it].
After the applicable retention period, personal data is deleted or anonymised unless further retention is required by law.
6. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and loss.
Access to Paddington Gosha's administrative functions is restricted to authorised users.
Google Drive integration uses OAuth 2.0 authorisation. The application does not require users to disclose their Google account passwords.
7. Your Data Protection Rights
Under the GDPR, individuals whose personal data is processed, or their legal representatives where applicable, may exercise the following rights, subject to applicable legal conditions:
- The right to access their personal data.
- The right to request correction of inaccurate data.
- The right to request deletion of personal data.
- The right to request restriction of processing.
- The right to data portability, where applicable.
- The right to object to processing, where applicable.
- The right to withdraw consent at any time where processing is based on consent.
paddington.academy.prague@gmail.com
Individuals also have the right to lodge a complaint with the relevant data protection supervisory authority, including the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů — ÚOOÚ).
8. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the functionality of Paddington Gosha, the technology services we use, or applicable legal requirements.
The latest version will be published on the official Paddington Academy website.