Privacy Policy

Data controller

The controller of personal data is Pavel Zaněk, Company ID 03518183, registered office Slovenská 518, Chrudim, 537 05, Czech Republic, e-mail [email protected]. If you have any questions about privacy or personal data processing, you can contact me at the e-mail address above.

What data I process and why

Contact form

If you contact me through a form on the website, I process the data you submit, in particular your first name, last name, e-mail address, phone number and the content of your message. I may also record technical submission data such as your IP address and user agent. The purpose is to handle your inquiry, continue communication and protect the website against abuse. The legal basis is the performance of pre-contractual steps and my legitimate interest in communication records and website security.

Newsletter

If you subscribe to the newsletter, I process your e-mail address and related technical data necessary to confirm the subscription and record your consent. The legal basis is your consent. Consent is voluntary and may be withdrawn at any time, for example by using the unsubscribe link in the e-mail or by contacting me at [email protected].

User account

If you create a user account on the website, I process in particular your name, e-mail address, password in hashed form and profile settings such as your preferred language. The purpose is account administration, authentication and access to account-related features. The legal basis is the performance of a contract and my legitimate interest in account security and access management.

Technical and operational data

When operating the website, I may process technical and security-related data such as access logs, diagnostics or data connected with the delivery of forms and e-mails. The purpose is to ensure the security, stability and proper operation of the project. The legal basis is my legitimate interest in protecting the website and related services.

Website analytics and consent to tracking technologies

If you grant consent to analytics cookies, I may activate Google Tag Manager on the website and, through it, analytics or measurement tags used to understand website traffic, content performance and visitor interactions. Google Tag Manager itself is a tag management tool and may be used to load different measurement technologies depending on the current website setup.

The legal basis for this processing is your consent. Analytics and related measurement technologies are not activated before consent is granted. You can withdraw or change your consent at any time through the cookie settings available on the website or by adjusting cookies in your browser.

Recipients of personal data

Personal data may be disclosed to hosting providers, e-mail service providers, website maintenance suppliers, analytics and tag management providers such as Google, and other processors where necessary for the operation of this project. In justified cases, personal data may also be disclosed to public authorities if required by applicable law.

Retention periods

• contact form messages are generally retained for 12 months after the inquiry has been handled, unless a longer period is necessary because of follow-up cooperation or the protection of legal claims,
• newsletter data is retained until consent is withdrawn or the mailing is discontinued, but never longer than necessary for the subscription purpose,
• user account data is retained for the duration of the account and for a reasonable follow-up period if necessary for security, legal claims or compliance obligations,
• records of your consent or refusal of analytics cookies are generally retained for 180 days; I record the choice value, purpose, time, version of the displayed information, website language, IP address hash, user agent and a pseudonymous visitor identifier,
• security and operational logs are retained only for the necessary period, usually no longer than 90 days unless a longer period is required to investigate an incident.

Transfers outside the EU/EEA

Personal data is primarily processed within the European Union or the European Economic Area. If services operated by Google or another provider involve access from outside this area, I will ensure an adequate level of protection in accordance with the GDPR, for example through standard contractual clauses or another lawful transfer mechanism.

Your rights

Under the conditions set by the GDPR, you have the right to request access to your personal data, rectification or erasure, restriction of processing, data portability and the right to object to processing. Where processing is based on consent, you also have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with the Czech Data Protection Authority, UOOU, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.

Where processing is based on consent to analytics cookies or similar technologies, you can also change or withdraw that consent at any time using the cookie settings available on the website.

Automated decision-making

No automated individual decision-making or profiling producing legal or similarly significant effects takes place on this website.

Updates to this policy

This policy may be updated from time to time to reflect project changes, service changes or legal requirements. The current version is always published on this page.