Skip to content

Privacy policy

This is a translation. The Czech version is legally binding.

Effective from November 1, 2026.

Controller

Roman Mondek
IČO (Company ID): 88538826
Registered address: Bošilec 88, 373 65 Bošilec
Sole trader registered in the Czech Trade Register
Not a VAT payer
Email: [email protected]

I have not appointed a data protection officer; the law does not require one for my activities.

What data I process and why

When you write to me by email or through the form

Name, email, optionally phone number, website address and the content of your message. Purpose: to reply and prepare an offer. Legal basis: steps prior to entering into a contract, Art. 6(1)(b) GDPR. Retention: until the inquiry is handled, and if no cooperation follows, for at most 1 year. The form protects against robots with a computation in your browser, without cookies and without third-party services. The server keeps the sender's IP address only in memory, for at most one hour, to limit spam, and does not store it with the message.

When you are my client

Identification and contact details, billing details, communication about the job and access credentials to your website and hosting. Purpose: performance of the contract. Legal basis: Art. 6(1)(b) GDPR. I store access credentials encrypted and delete them when our cooperation ends. I keep communication for the duration of the cooperation and 3 years afterwards for possible claims (legitimate interest, Art. 6(1)(f) GDPR).

Accounting and taxes

I keep billing details on invoices and receipts for the period required by tax and accounting law (usually 10 years). Legal basis: legal obligation, Art. 6(1)(c) GDPR.

Data from client websites

While repairing a website I may come across personal data processed by the client (e.g. orders of an online store's customers). In that case I act as a processor for the client, use the data only to carry out the job and keep nothing longer than necessary. The terms are set out in a data processing agreement, which I will sign on request.

Website checker

I use the domain you enter only to run the test: the server keeps it in memory for at most 30 minutes so the result can be emailed to you, and does not store it anywhere. I do not use it to contact the owner of the tested website. The server keeps your IP address in memory only, for at most one hour, to limit abuse. I look at the tested website only from the outside, like a regular visitor.

Result by email (only if you ask for it): email address, domain and the result. Purpose: to send you the result. Legal basis: your request, Art. 6(1)(b) GDPR. I keep a record of the sending for 30 days to protect against abuse.

Website tips (only with your consent): email address, language and proof of consent (time it was given and confirmed, wording of the consent, a hash of your IP address). You confirm the consent via a link in an email and can withdraw it at any time with one click in every email or at [email protected]. Legal basis: consent, Art. 6(1)(a) GDPR. I keep the data until you withdraw consent and the proof of consent for another 3 years to be able to show it was given. Consent is not a condition for seeing the test result.

Case studies

I publish descriptions of repairs only in anonymized form, without names, domains or any other details that could identify the client or their customers.

Visiting this website

This website uses no cookies, analytics or advertising tools. For security, the server writes a technical access log (IP address, time, requested page, browser). Logs are usually deleted within 30 days. Legal basis: legitimate interest in securing the website.

Who I share data with

I don't sell data or use it for advertising. I work with these processors:

  • Contabo GmbH, Germany: operation of the server that runs the website and my work tools.
  • Cloudflare, Inc., USA: delivery and protection of this website.
  • Google Ireland Ltd.: email and encrypted backups.
  • Anthropic PBC, USA: the AI tool Claude, which helps me analyze errors and prepare proposals. I always review the results myself, and nothing that concerns you is decided automatically.
  • Accountants and public authorities where required by law.

Transfers to the USA are based on the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interest. Just write to [email protected]; I will reply within one month at the latest. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).

No automated decision-making or profiling takes place.