Privacy
How I handle your data
In plain language: I only use your form details to handle your enquiry. Visit statistics are anonymous. The form verifies your email address before sending.
1. Who processes your data
The controller is Tomáš Petera, business ID 09863303, Prague, Czech Republic. For questions about your data, contact me at petera.tomas11@gmail.com or call +420 722 221 334.
2. What I process and why
- Enquiries through the form. Your name, email, optional phone number, selected service, message and any files you choose to attach (optional). I use them to reply, arrange a call and prepare a proposal. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).
- Messages outside the form. If you email or call me, I use the information you share for the same purpose and on the same legal basis.
- Call bookings. The name, email and phone number you enter in the Google Calendar booking form, along with your selected time. I use these to hold the call and contact you if needed. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).
- Client projects. If we work together, I process the data needed to perform our contract and meet accounting and tax obligations (Article 6(1)(b) and (c) GDPR).
- Enquiries that do not lead to a project. I retain them for no more than 3 years based on legitimate interests (Article 6(1)(f) GDPR), for example if you return later or I need a record of our discussions. I will delete them sooner on your request.
- Anonymous visit statistics. Described below. The legitimate interest is improving the website.
Providing your data is voluntary, but I cannot reply without your name and email. There is no automated decision-making or profiling.
3. Cookies and website analytics
Visit analytics use no cookies. When you request an email code, Cloudflare Turnstile checks technical browser and network information to prevent automated abuse. Fonts are hosted directly on the website and are not loaded from Google.
I measure visits using Umami Cloud (European region). According to its own statement, it uses no cookies, collects no personal data and anonymises the data. Statistics include which sections are viewed, clicks, quiz choices, device and browser type, country and website load times. Your name, email and form message are not sent to analytics. Statistics are retained for no more than 6 months. I respect your browser's Do Not Track setting, which disables measurement.
4. Who receives your data
- Cloudflare (Workers, D1, Turnstile) — processes the enquiry form, stores protected verification records and checks for automated abuse. Cloudflare privacy policy.
- Resend — sends verification codes and enquiries to my inbox. Resend privacy policy.
- Google (Gmail, Calendar, Meet) — my email inbox for enquiries, the calendar for call bookings and the video call service. Clicking “Choose a time” opens Google Calendar, which is governed by Google's policies.
- Umami — anonymous visit statistics (Umami Cloud).
- GitHub (GitHub Pages) — website hosting. When you visit a page, the hosting provider may process technical data such as your IP address.
Some of these providers operate outside the European Union; see their policies for details. I do not share your data with other parties unless required by law.
5. How long I keep your data
- Enquiry or call booking without a project: up to 3 years after handling it, then I delete it.
- Client project: for the duration of our work together and then for the period required by law (for example, accounting and tax records).
- Visit statistics: up to 6 months.
The verification code is valid for 10 minutes. Protected verification records contain no plain email address or message; they expire after 24 hours and are removed by daily cleanup. Resend retains sent-email data for 30 days on the free plan. Cloudflare also processes technical information necessary to operate and protect the service, under its own policies.
6. Your rights
You can request access to your data, correction or deletion, restriction of processing and data portability. You can also object to processing based on legitimate interests. Simply email petera.tomas11@gmail.com. If you believe I am mishandling your data, you can complain to the Czech Office for Personal Data Protection (uoou.gov.cz).