Privacy policy

2. Scope of this policy

This policy covers this website only. It does not cover email you send us directly (which your own email provider also handles under its own policy), or any third-party site a link on this site takes you to.

3. Data we process, and why

3.1 Contact enquiries

If you email us, we process the address you write from and whatever you tell us in the message, to reply and to work out whether we can help with your project. The legal basis is taking steps at your request before a possible contract, and our legitimate interest in running a studio that responds to enquiries.

3.2 Analytics and aggregate usage data

Analytics on this site runs on Umami, but is currently switched off in our configuration: no analytics script loads, no analytics request is ever sent, and no analytics data is collected today. If we switch it on, it is designed to run cookie-less: page views and basic technical context (such as approximate location derived from IP address, device/browser type, and referring page) would be collected without cookies, without a persistent identifier, and without building a profile of any individual visitor, used only in aggregate to understand which pages get read and to improve the site. The legal basis for that processing, if enabled, would be our legitimate interest in understanding how the site is used. You can object to this at any time; see "Your rights" below.

3.3 Hosting, network, and security logs

Any website necessarily passes technical request data (such as IP address, timestamps, and requested URLs) through the servers and network infrastructure that deliver it. This happens whether or not analytics runs, and we do not choose to skip it: it is how a webpage reaches your browser. This data is used to operate the site, keep it reliable, and detect or prevent abuse and security incidents. The legal basis is our legitimate interest in running a secure, working website.

3.4 Legal recordkeeping

Where the law requires us to keep a record (for example certain accounting or tax records arising from client work), we keep the minimum needed to comply. The legal basis there is our legal obligation, not any of the bases above.

4. Cookies

This site does not set analytics or advertising cookies, and does not use local storage to identify or track you across visits. Cookie consent is switched off in our site configuration because there are no non-essential tracking cookies here for it to cover. Using this website does not by itself count as consent to anything; where we would ever rely on consent, we would ask for it separately and clearly.

5. Who we share data with

We do not sell personal data, and we do not share it for advertising purposes. The infrastructure providers that host this site and carry its network traffic receive and process technical request data as our service providers, to the extent needed to deliver and operate the site.

6. International transfers

We are the controller responsible for this data, and we remain responsible for it even where a provider we use processes it outside the EEA. Where that happens, we rely on an adequacy decision covering that country, or on appropriate safeguards such as the EU Standard Contractual Clauses, so the transfer is lawful. We are not stating that a specific transfer currently occurs, or naming a vendor or country here, because none is fixed as a permanent feature of this policy; email [email protected] for current information on any transfer that applies to you.

7. How long we keep data

We do not keep data longer than the purpose requires. In practice: an email enquiry is kept for as long as we need it to respond and, if it leads to work together, for as long as that relationship or our legal recordkeeping duties require, then deleted. Aggregate usage statistics are kept in aggregate form, not as records tied to an individual visitor. Technical request logs generated by hosting and network infrastructure are retained only for the operational and security window those providers need to do the job described in section 3.3, and are not kept by us as a separate personal dataset.

8. Your rights under GDPR

Subject to the conditions the GDPR sets for each right, you can ask us to: give you access to personal data we hold about you; correct it if it is inaccurate; delete it; restrict how we use it; and, where the processing is based on your consent or on a contract and carried out by automated means, receive a copy in a portable format. You can object to processing based on our legitimate interests, including the analytics described in section 3.2, at any time. Where we ever rely on your consent for something, you can withdraw it at any time without affecting anything done before the withdrawal. To use any of these rights, email [email protected].

9. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

10. Children

This site is a studio marketing site aimed at businesses and individuals commissioning web work. It is not directed at children, and we do not knowingly collect personal data from children.

11. Links to other websites

This site links to other websites, including client projects and social platforms. We are not responsible for the privacy practices of sites we do not operate; check their own policy before sharing data with them.

12. Changes to this policy

We may update this policy as the site or our practices change. The "Privacy Policy" link in the footer always points at the current version, and the date this page was last updated is recorded in the page metadata.

13. Contact and complaints

Questions about this policy or how we handle your data: email [email protected]. If you believe we have not handled your personal data properly, you can also complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) at https://uoou.gov.cz/en, or to the data protection authority in your own EU/EEA country of residence.