Privacy Policy

This policy describes how the data controller processes personal data of visitors to this website and of persons interested in cooperation, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Czech legislation.

Effective from: 29 July 2026

1. Data controller

Matěj Kratochvíl
place of business: Rostoklaty 173, 281 71 Rostoklaty, Czech Republic
business identification number (IČO): 23974486
not registered as a VAT payer
e-mail: matej.kratochvil33@seznam.cz

2. Categories of personal data processed

The controller processes in particular the following categories of personal data:

  • identification and contact details (name, e-mail address, telephone number, if provided),
  • content of a message or inquiry,
  • data related to cooperation (project brief, communication, billing details),
  • technical data when visiting the website (IP address, browser type, device, time of access) to the extent necessary for operation and security of the website,
  • preferences stored in the browser (for example, light or dark mode in localStorage).

This website does not use marketing cookies or third-party analytics tools.

3. Purposes and legal bases for processing

  • handling inquiries and communication prior to entering into a contract – Art. 6(1)(b) GDPR,
  • performance of a contract and provision of services – Art. 6(1)(b) GDPR,
  • compliance with accounting and tax obligations – Art. 6(1)(c) GDPR,
  • security and operation of the website – legitimate interest of the controller under Art. 6(1)(f) GDPR.

4. Retention periods

  • inquiries and communication: usually for up to 3 years from the last contact,
  • contractual and billing records: for the period required by accounting and tax legislation, usually 5 to 10 years,
  • hosting technical logs: for as long as necessary for security, usually for up to 12 months,
  • browser preferences: until deleted or changed by the user.

5. Recipients and transfers of data

Personal data may be disclosed to IT and hosting providers, accountants, and other processors only to the extent necessary and, where required, on the basis of a data processing agreement.

The controller does not transfer personal data outside the European Union unless this is necessary and an adequate level of protection is ensured.

6. Rights of the data subject

The data subject has the right to:

  • request access to their personal data,
  • request rectification or completion of inaccurate data,
  • request erasure where the conditions under the GDPR are met,
  • request restriction of processing,
  • request data portability,
  • object to processing based on legitimate interest,
  • withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

Requests to exercise these rights may be sent to matej.kratochvil33@seznam.cz. The controller will respond without undue delay, and no later than one month.

7. Right to lodge a complaint

If the data subject considers that the processing of their personal data infringes the GDPR, they have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).

8. Security of personal data

The controller implements appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, or other unlawful handling.

9. Changes to this policy

The controller may update this policy. The current version is always published on this page.