Privacy Policy

1. Data controller

The controller of your personal data is a natural person:

• Controller: Jan Bojko
• Address: Písek 450, Písek u Jablunkova, 73984
• E-mail: honzabojko@seznam.cz

2. Data protection officer

I have not appointed a data protection officer because I am not required to. For any privacy matter you can contact me directly at the e-mail address above.

3. What data I process, for what purpose and on what legal basis

Contact form. When you write to me through the form I process your e-mail address and the content of your message (and any other personal data you choose to include in it). The purpose is to receive and answer your message and, where relevant, to start a collaboration. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the “I agree to the processing of personal data” checkbox before submitting the form. A record of the consent, including date and time, is delivered together with your message so that I can demonstrate it (Art. 7(1) GDPR).

Website operation. When a page is served, the hosting provider automatically logs technical data such as your IP address, browser type, requested URL and time of access. The purpose is to keep the website running securely and to protect it against abuse. The legal basis is my legitimate interest (Art. 6(1)(f) GDPR) in a secure and functioning website. I do not analyse these logs and do not use them for profiling.

4. Retention

Contact form messages are kept while your enquiry is being handled and then for at most 12 months after the last communication. If a collaboration follows, related data may be kept for as long as the law requires (e.g. tax and accounting obligations) or for limitation periods. After that the data is deleted.

Hosting logs are kept for the period set by the hosting provider, typically days to weeks.

5. Recipients

Your data may be made available to the following processors, who help me run the website and deliver messages:

• Vercel Inc. (USA) – website hosting and technical logs,
• Resend, Inc. (USA) – sending the contact-form e-mail,
• Seznam.cz, a.s. (Czech Republic) – provider of the mailbox where I receive messages.

6. Transfers to third countries

Vercel Inc. and Resend, Inc. are based in the United States, so your data may be transferred outside the European Economic Area. Such transfers rely on safeguards under Chapter V GDPR, i.e. the European Commission’s standard contractual clauses and/or the adequacy decision for the EU-U.S. Data Privacy Framework. I will provide a copy of the safeguards on request.

7. Cookies and local storage

This website does not use analytics, advertising or any other tracking cookies and loads no third-party scripts that track you. Fonts are served from this website itself.

Only two technical items are stored in your browser’s local storage, and only at the moment you yourself change the language or colour theme. They exist solely so the site remembers your choice; they are not sent to a server, contain no personal data and cannot be used to identify you:

• portfolio-lang – the selected language (Czech / English),
• theme – the selected colour theme (light / dark).

Because this is technical storage strictly necessary for a feature you explicitly requested, no consent is required and the site therefore shows no cookie banner. If this changes in the future (e.g. by adding analytics), I will ask for your consent beforehand.

8. Your rights

Under the GDPR you have the following rights:

• the right of access to your personal data (Art. 15),
• the right to rectification of inaccurate data (Art. 16),
• the right to erasure (“right to be forgotten”) (Art. 17),
• the right to restriction of processing (Art. 18),
• the right to data portability (Art. 20),
• the right to object to processing based on legitimate interests (Art. 21),
• the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)). You can withdraw consent by e-mailing the address above; withdrawing is as easy as giving it,
• the right to lodge a complaint with a supervisory authority (Art. 77) – in the Czech Republic the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.

9. Obligation to provide data

Providing personal data is voluntary and is neither a statutory nor a contractual requirement. Without an e-mail address and your consent to processing, however, I cannot receive or answer a message sent through the form. You can always e-mail me directly at the address above.

10. Automated decision-making and profiling

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

11. Changes to this policy

I may update this policy, e.g. when services or legislation change. The current version is always available on this page, with its effective date shown at the top.