Privacy policy

Effective from 6 August 2026

I process personal data only to the extent needed to run and improve the site, answer you and agree on working together. I do not sell it or use it for marketing profiles.

Data controller

Tomáš Doubek
Čsl. armády 135/9, 250 91 Zeleneč
IČO: 11867116
Registered in the Czech Trade Licensing Register kept by Městský úřad Brandýs nad Labem.
tomas@tdoubek.com

For anything concerning personal data, contact me at the email above.

Purposes, scope, legal basis and retention

A person who contacts me

Purpose: Answering a question or enquiry and agreeing how to proceed.
Data: Name, email address, company name and the content of the message – that is, whatever you fill in or write to me.
Legal basis: Legitimate interest in answering your enquiry under Art. 6(1)(f) GDPR. Where the exchange leads towards a contract, the basis is Art. 6(1)(b) GDPR.
Retention: No longer than 6 months from the last communication. If an engagement follows, for its duration and then for the period required by law.

Protecting the form from abuse

Purpose: Detecting automated traffic so the form cannot be abused to send spam.
Data: Technical data about the device and connection, including the IP address, evaluated by Cloudflare Turnstile.
Legal basis: Legitimate interest in securing the site under Art. 6(1)(f) GDPR.
Retention: For the duration of the check and in the provider's operational logs.

Measuring website traffic

Purpose: Aggregate measurement of website traffic and operation.
Data: Page visited, previous page, time of visit, language, screen resolution, device, browser, operating system, approximate location and use of contact elements. The IP address is not stored.
Legal basis: Legitimate interest in improving the site under Art. 6(1)(f) GDPR.
Retention: No longer than 13 months.

Cookies and tracking

I measure traffic using my own Umami instance without cookies. The measurement respects Do Not Track and is not used for advertising or marketing profiles. The site therefore does not use a cookie banner.

Providing data is voluntary

You provide the data voluntarily. Without it, though, I cannot reply to you or agree on working together.

Processors

I pass the data to no one beyond the suppliers I use to run the site, measure traffic and provide email. They process it only on my instructions.

Processor	Purpose	Where
Cloudflare, Inc.	running the site, forwarding analytics requests and bot protection for the form	globally, including the USA
Vercel, Inc.	running the self-hosted Umami analytics instance	globally, including the USA
Neon, Inc.	database for the Umami analytics instance	EU (Frankfurt), company based in the USA
Resend (Plus Five Five, Inc.)	delivering the form message to my mailbox	EU (Ireland), company based in the USA
Seznam.cz, a.s.	running the email mailbox (Email Profi)	Czech Republic

Transfers outside the EU

Some of the processors listed are based in the United States or may access data from there. Such transfers rely on standard contractual clauses approved by the European Commission, or on an adequacy decision (EU–US Data Privacy Framework).

How data is processed

I process data electronically, by automated means and manually. I do not use analytics data for automated decision-making or marketing profiles.

Your rights

In relation to your personal data you have the right:

of access – to learn whether and what data I process about you, and to get a copy
to rectification, where data is inaccurate or incomplete
to erasure, where the data is no longer needed or I process it unlawfully
to restriction of processing
to portability – to receive the data in a machine-readable format
to object to processing based on legitimate interest
to lodge a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7

How to exercise your rights

Write to me at the email above. I will handle it without undue delay, within one month at the latest.