Privacy policy

Who processes your data

The data controller is Ing. Vit Hofman, a self employed professional registered in the Czech trade register, company ID 020 65 681, VAT ID CZ8602215072, place of business tr. Tomase Bati 332, 765 02 Otrokovice, Czech Republic.

For anything concerning your data, write to info@rovnoukveci.cz or call +420 730 732 751. I have no data protection officer; my activity is not of a scale that requires one.

What I collect and where from

From the enquiry form: your name, email, and optionally phone, company name, budget range, your message and the answers in the extended brief if you fill it in.

From article discussions: the name shown next to your comment, the comment text and your browser identification. I do not ask for your email and I do not store your IP address.

From quotations: if I send you a quotation, I record when it was opened and the browser identification, so I know the link reached you and do not have to ask. When you place an order I store your name, role, email, any note, your IP address and a fingerprint of the whole quotation.

From engagement discussions: your name, email and message text.

From the newsletter sign up: your email address, optionally what you do (run a company, do marketing, build websites, something else), the page you signed up from, the wording of your consent and the time of both the sign up and the confirmation. What you do is used only so that I do not send you things that do not concern you.

From the page speed tool: nothing. The address you enter is sent to Google for measurement and the result is shown to you, but neither the address nor the result is stored anywhere.

I do not store IP addresses anywhere except one case: a submitted order, where the address is part of the record of who placed it. Elsewhere the address is held briefly in server memory as spam protection, never written to the database, and lost on restart.

The legal basis

I process your enquiry in order to take steps at your request before entering into a contract, and afterwards to perform that contract. The legal basis is Article 6(1)(b) GDPR.

Browser identification on forms and comments, and the IP address on an order, are processed under legitimate interest in preventing abuse and in being able to evidence an order, that is Article 6(1)(f) GDPR. You may object to this processing.

Records of orders and invoicing are kept to meet legal obligations, in particular under Czech accounting and VAT law, that is Article 6(1)(c) GDPR.

The one thing I do need consent for is the newsletter. You give it by ticking the box next to the form and confirm it through a link sent to your address; without that confirmation nothing is ever sent. The legal basis is Article 6(1)(a) GDPR and Section 7 of Czech Act No. 480/2004 Coll. One click in any email unsubscribes you and ends the consent.

For everything else I neither need nor ask for your consent.

What I use it for and who else sees it

Only to answer your enquiry, prepare a quotation and agree on the work. I never sell your data and never pass it on for marketing.

Three processors are involved. Email delivery is handled by Brevo (Sendinblue SAS, France). The server running the database is operated by Hetzner Online GmbH, Germany. The address you enter into the speed tool is sent for measurement to Google Ireland Limited. Data processing is contractually covered with all of them.

No data leaves the European Union. Should that ever change, it will be stated here before it happens.

How long I keep it

Enquiries are kept for three years from our last contact, so I can pick up where we left off if you write again. After that they are deleted.

Orders, accepted quotations and accounting records are kept for ten years from the end of the tax period in which they arose. This period is set by law and I cannot shorten it.

Comments stay as long as the article does, or until you ask me to remove them. Browser identification on comments and records of quotation opens are deleted after ninety days.

An address signed up to the newsletter is kept until you unsubscribe. After that I keep only the record of the consent and of the unsubscribe, for three years, so that I can evidence the sending was lawful. An address that is not confirmed within twelve months is deleted.

You can ask for earlier deletion at any time and I will comply wherever the law does not stop me.

Cookies and analytics

This site uses no tracking or advertising cookies, no Google Analytics or any third party tool, and does not measure traffic in any way that would identify you. That is why there is no consent banner here: there is nothing to consent to.

I measure traffic myself, with my own code on my own server. I record the page viewed, roughly how long you stayed on it, the kind of device, browser, system, language, the referring domain and the measured loading speed. Your IP address is never stored: it only feeds a one way fingerprint together with a random secret that is created when the application starts, is held in memory only and changes every day. That fingerprint cannot be traced back to you, not by me and not by anyone who obtained the database.

Detailed measurement records are deleted after sixty days. All that remains are daily totals with no link to any visitor. Search terms are stripped of emails and phone numbers before they are stored, and of a referring address I keep only the domain, without the path or parameters.

The cookies the site does use are strictly necessary and it would not work without them: admin sign in, the PIN check on a quotation, and previewing unpublished content. The law requires no consent for these. Traffic measurement uses no cookie at all.

If you send an enquiry, where you came to the site from and which page you started on are stored with it. Your browser remembers this for as long as the tab is open and sends it only together with the form you submit yourself.

In the client area of an engagement your browser remembers your name and email for thirty days so you do not retype them with every message. That is for your convenience, not my measurement, and the data never leaves your browser and my server.

Your choice of light or dark mode is stored in your browser and never sent anywhere.

What is required and what is not

Your name, email and message in the enquiry form are needed for me to reply. Without them I cannot process the enquiry. Every other field is optional and leaving it empty has no consequence beyond a more general answer.

No decision about you is made automatically and you are not profiled.

Your rights

You have the right of access to your data, to rectification, to erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interest.

Write to info@rovnoukveci.cz. I will deal with it without undue delay and within one month of receiving your request at the latest.

If you believe I handle your data badly, you may lodge a complaint with the supervisory authority: Urad pro ochranu osobnich udaju, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.