Privacy Policy
Effective date: 15 October 2026
Who is responsible, and what this covers
This policy is issued by Bounty Gastro s.r.o., Masarykovo nám. 1346/15, 790 01 Jeseník, Czech Republic, company registration 03037363, contactable at info@calmspan.online. Bounty Gastro s.r.o. publishes Calmspan and is responsible for the handling of personal information described below.
Personal information connected with this website is handled in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, which are published by the Office of the Australian Information Commissioner at oaic.gov.au/privacy/australian-privacy-principles.
The policy covers the website at calmspan.online and nothing else. Sites you reach by following a link from here, including the Crossout website our funding links point to and the government sites referenced in the course, are operated by other organisations under their own privacy policies. We have no control over any of them.
The sections below follow the thirteen Australian Privacy Principles in order, so you can see what each one means on a site this small. Several of them barely apply, and where that is so, the section says so in one sentence rather than padding it.
APP 1 — Open and transparent management of personal information
This page is the whole of our privacy documentation. It is linked from the footer of every page on the site, costs nothing to read and requires no account. Two kinds of personal information exist in connection with this site — server access logs and emails sent to us — and both are described below in full. If anything here is unclear, write to info@calmspan.online and we will explain it and, where the explanation reveals a gap, amend the page.
APP 2 — Anonymity and pseudonymity
You can read every page of this site without identifying yourself. There is no account, no login and no field to type into anywhere. If you write to us, you may use a pseudonymous email address and sign the message with any name or none; we will answer it. The single exception is a request to access or correct personal information, where we need to be reasonably satisfied that the request comes from the person concerned, which is difficult if we cannot connect the request to anything we hold.
APP 3 — Collection of solicited personal information
We solicit almost nothing. There are exactly two categories of information connected with this site.
(a) Server access logs. Kept by our hosting provider in the ordinary course of serving pages. Each entry may contain your IP address, the date and time of the request, the URL requested, the referring page if your browser sends one, and the user-agent string your browser identifies itself with.
(b) The content of emails sent to info@calmspan.online. That means your email address, any name you give, the text of your message and any attachment you choose to send.
(c) Nothing else is collected. There are no forms, no accounts, no progress tracking and no saved checklist state. There are no cookies, no web fonts, no analytics, no advertising tags, no profiling and no cross-site tracking. The pages request nothing from any other server: every file the site loads comes from calmspan.online itself. You can verify that in your browser's network tools, and we would rather you did than took our word for it.
APP 4 — Dealing with unsolicited personal information
Sometimes an email contains information we did not ask for and do not need in order to reply — an attachment with more in it than was necessary, or details about a third person. Where it is lawful and reasonable to do so, we delete that information rather than keep it. We never add it to any record or list.
APP 5 — Notification of the collection of personal information
This page is the notification. It names the responsible entity, lists both categories of information, states the purpose for each, says who else may see it, says how long it is kept, and explains how to ask for access or correction. Access logging begins the moment your browser requests a page, which is why the notice is a standing one published here rather than a message shown on arrival.
APP 6 — Use and disclosure of personal information
Each category is used only for its own purpose. Access logs are used to keep the site running securely, to deal with abuse such as automated scraping or attempted intrusion, and to diagnose faults. Emails are used to read and answer the message, and to keep a record of the correspondence.
Personal information connected with this site is never sold, rented, traded or shared for anyone's marketing. It is disclosed outside Bounty Gastro s.r.o. only to the two service providers named under APP 8 below, and to a public authority where the law requires it or where it is necessary to establish or defend a legal claim.
APP 7 — Direct marketing
We do not carry out direct marketing. There is no mailing list, no newsletter, no subscription and no course reminder of any kind. Your email address cannot end up on a list here because no list exists.
APP 8 — Cross-border disclosure of personal information
Two service providers are involved in running this site: our hosting provider, which serves the pages and keeps the access logs, and our email service provider, which carries mail sent to our address. No one else receives personal information connected with this site.
Neither provider is named in this policy, and the honest position is that their infrastructure may store or process data outside Australia. We require both to handle information only for the purpose of providing their service to us.
APP 9 — Government related identifiers
No government related identifier is adopted, used or disclosed. We do not ask for, hold or have any use for a tax file number, a driver licence number, a Medicare number or any similar identifier, and nothing on this site would give us one.
APP 10 — Quality of personal information
The only information we hold that could be inaccurate is the content of an email, which is whatever you wrote. If something we hold about you is wrong, write and tell us and we will correct it. Access logs are machine-generated records of requests; they are not maintained as a profile of any person and are not used to make decisions about anyone.
APP 11 — Security of personal information
The site is served over HTTPS. There is no database behind it, no submitted content is stored, and no user-generated material is accepted, which removes most of the ways a small site loses data. The hosting account and the mailbox are reachable only by people working for Bounty Gastro s.r.o., using credentials that are not shared.
We claim no certification and no compliance with any standard beyond what is described on this page, because claiming one we do not hold would be worse than claiming nothing.
APP 12 — Access to personal information
You may ask what personal information we hold about you. Email info@calmspan.online with Privacy request in the subject line. There is no charge for making a request. We reply within 30 days. In practice, for most readers the answer is that we hold nothing identifiable: access logs are not indexed by person and cannot usually be matched to an individual without information only you can supply, such as the approximate date, time and IP address of your visit.
APP 13 — Correction of personal information
If information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, ask us to correct it using the same address and subject line. We reply within 30 days. If we decline to make a correction, we will tell you why in writing and note your request alongside the record.
How long each category is kept
Access logs: 30 days, after which they are deleted by the hosting provider in the ordinary cycle.
Emails: 24 months after the last message in the conversation, then deleted — unless the correspondence is needed to establish, exercise or defend a legal claim, in which case it is kept until that matter ends.
Affiliate links and what happens when you leave
Some links on this site are paid affiliate links, marked wherever they appear and explained on the Affiliate Disclosure page. Following one takes you off calmspan.online. From that moment the site you have arrived at is in charge: Crossout and the affiliate network that operates the link may set cookies or use similar technology on their own domains to record that the referral came from us, under their own privacy policies rather than this one.
Bounty Gastro s.r.o. receives commission reports from the network. Those reports are used only to reconcile payments. We do not ask the network for information that identifies individual readers, and we make no attempt to connect a report to a visit to this site.
Complaints
If you think personal information has been mishandled, write to info@calmspan.online with Complaint in the subject. We will investigate and respond within 30 days.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au/privacy/privacy-complaints, which explains how the OAIC handles complaints and what it can do.
Data breaches
If we have reason to believe that personal information connected with this site has been accessed or disclosed without authorisation, or lost, we assess the incident promptly. Where serious harm to an affected person is likely, we notify those people and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme.
Children
This site is not directed at people under 16. It collects nothing intended to identify anyone, of any age, and there is no account, no form and no feature that a young reader could use to give us personal information. A parent who believes a child has sent us personal information by email may write to us and ask for the message to be deleted.
Readers in the European Union and the United Kingdom
Bounty Gastro s.r.o. is established in the Czech Republic, so the following applies in addition for readers to whom the General Data Protection Regulation or its United Kingdom equivalent applies.
The legal basis for keeping access logs is our legitimate interest in operating the site securely and diagnosing faults. The legal basis for handling emails is to respond to the enquiry you have chosen to send. There is no consent basis anywhere, because there are no cookies and no optional processing to consent to.
You have the right to request access to your personal data, its rectification or erasure, restriction of processing, portability where it applies, and to object to processing based on legitimate interests. Use the contact address above; the 30-day timeframe in this policy applies, and where the GDPR requires a shorter one, the shorter one applies.
You may also lodge a complaint with the supervisory authority where Bounty Gastro s.r.o. is established, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), at uoou.gov.cz, or with the authority in your own country of residence.
Changes to this policy
When this policy is revised, the effective date at the top of the page changes with it. Where a change is material — a new category of information, a new recipient, a different retention period — a short note describing it appears at the top of this page for 30 days.
Contact
Bounty Gastro s.r.o., Masarykovo nám. 1346/15, 790 01 Jeseník, Czech Republic. Company registration: 03037363. Email: info@calmspan.online.
See also the Cookie Policy and the Terms and Conditions.