We value your data and collect only as much as we genuinely need — so that we can reply to you and send you the mini-audit we promised. No hidden marketing, no passing data to third parties for advertising. Here is a clear overview of how we handle personal data.
Who is the data controller
The controller of your personal data is:
Vadym Nakoniechnyi, sole trader (OSVČ, Czech Republic) Sokolova 720/7, 186 00 Praha 8 – Karlín IČO: 22276122 E-mail: [email protected]
Registered in the Czech Trade Licensing Register (živnostenský rejstřík). We do not have a Data Protection Officer (DPO) — given the scope of our activities, the law does not require one. For anything concerning your data, please contact us directly at the e-mail above.
What data we collect and why
We receive data from you only when you send it to us yourself through the forms on the website.
| Where | What we collect | Why we need it | Legal basis | How long |
|---|---|---|---|---|
| Free mini-audit form | your website address (URL), e-mail | to prepare the audit and send it to you | pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) | 12 months from the last communication |
| Contact form | name, e-mail, message text | to reply to you and handle your enquiry | negotiations on a contract (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in communication (Art. 6(1)(f) GDPR) | 12 months from the last communication |
| Server operation | technical records (IP address, request time) in the server log | security and stability of the website | legitimate interest (Art. 6(1)(f) GDPR) | short term, within the usual log rotation periods |
For every message sent through a form, we also store technical data about the submission (IP address, browser User-Agent, referring page) — for spam protection and as a record of the communication. We keep this data together with the enquiry, for no longer than 12 months from the last communication. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
If an enquiry turns into cooperation, we retain contractual and invoicing data for the period required by Czech tax and accounting legislation.
A note on URLs: a company website address is usually not personal data. However, if you send us a link to your personal website, we treat it just as carefully as everything else.
What we do not do: we do not send newsletters without your consent, we do not profile you for marketing, and we do not sell your data or make automated decisions about you with legal or similarly significant effects. We simply sort incoming enquiries by priority internally so that we can reply promptly.
To whom we pass data
Your data is seen only by those without whom the website and communication would not work:
| Recipient | Role | Purpose | Where the data is held |
|---|---|---|---|
| FastVPS Eesti OÜ | processor | server operation (hosting) | EU (Estonia) |
| Cloudflare, Inc. | processor | website availability and security (CDN, protection against attacks); spam protection on form pages (Cloudflare Turnstile) | USA / global network (see safeguards below) |
The internal notification we send ourselves about a new enquiry contains none of your personal data — we read the details only in a secured internal record on our server in the EU.
To keep the website running, Cloudflare may also process data (typically the IP address) outside the EU / EEA. This transfer is covered by appropriate safeguards under Chapter V of the GDPR — the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. We do not pass data outside the EU / EEA to any other service; if in the future we deploy a service that requires this, you will find out about it here first, in an updated version of this document.
Cookies
The website does not use any analytics or marketing cookies. We measure traffic with Umami, which we run on our own server (in the EU): it uses no cookies, stores nothing in your browser and does not identify individual visitors — it collects only anonymous, aggregated statistics. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR). Because the measurement requires no cookies, we do not need a cookie bar. Details can be found in the Cookie Policy.
Your rights
Under the GDPR, you have the right:
- of access — to ask what data we hold about you and to receive a copy of it,
- to rectification — to have inaccurate data corrected,
- to erasure — to have your data deleted (the “right to be forgotten”), provided we no longer need it on legal grounds,
- to restriction of processing — to have processing temporarily “frozen”,
- to data portability — to receive your data in a machine-readable format,
- to object — to processing based on our legitimate interest.
Just write to [email protected]. We will respond without undue delay, at the latest within one month.
Where to complain
If you believe we are handling your data improperly, get in touch with us — we will sort it out. You also have the right to lodge a complaint with the supervisory authority in the Czech Republic:
Office for Personal Data Protection (ÚOOÚ) Pplk. Sochora 27, 170 00 Praha 7 www.uoou.gov.cz
Changes to this document
When we change something on the website (for example, deploy an e-mail service or another tool), we update this document as well. The date of the last change is shown at the top.
In the event of any discrepancy between the language versions, the Czech version prevails — Ochrana osobních údajů.