1. Who processes your data
Matěj Krčka, sole trader based in the South Moravian Region, Czechia. E-mail [email protected], phone +420 607 126 302.
I have not appointed a data protection officer — it is not required by law, because I do not process data on a large scale or systematically monitor visitors. For anything concerning your data, contact me directly.
2. What I collect and why
When you book a call
The booking form on the main page collects:
- Name — so I know who I am talking to.
- E-mail — I send the confirmation and calendar invitation there.
- Phone (optional) — in case the online call does not connect.
- Company (optional) — so I can look up some context beforehand.
- What slows your company down (optional) — so I can prepare for the call.
Alongside that I store the chosen time, call length, the language you booked in and the time of submission.
When you write or call
I process whatever you send me — usually a name, a contact and the content of the message. I do not look anything else up.
When you message me in the chat
The chat on this site is answered by me in person, not by a bot. It stores your name, email, the messages themselves and the address of the page you wrote from, so I know what the question is about. It runs on my own Cloudflare database — no third-party chat service is involved.
If I'm away from my desk, the conversation is forwarded to my inbox and you get a confirmation that the message arrived. Your browser remembers the conversation until you clear the site's data.
When you just browse
There is no analytics on this site. No Google Analytics, no Facebook Pixel, nothing of the sort. I do not know who visited until they write to me.
The form does not collect identification numbers, addresses, bank details or other sensitive data. If you send them yourself in the message text, I use them only to reply to you.
3. Legal basis
- Steps prior to entering into a contract — when you book a call or ask about a project, I need your data to arrange it. That is Art. 6(1)(b) GDPR and requires no separate consent.
- Performance of a contract — if we end up working together.
- Legal obligation — for documents I have to archive under accounting law.
4. How long I keep it
| What | How long |
|---|---|
| Booking that led nowhere | 12 months from the call date |
| Cancelled booking | 12 months, then deleted |
| Chat conversations | 12 months from the last message |
| E-mail correspondence | Up to 3 years if no cooperation follows |
| Data from cooperation | For its duration plus 5 years for accounting |
You can ask me to delete your data sooner at any time — unless a statutory archiving duty prevents it, I will.
5. Who I share it with
I do not sell or rent your data to anyone. To run the site I do use services that, acting as processors, come into contact with some of it:
| Service | What for | What data |
|---|---|---|
| Cloudflare | Website hosting and the bookings database | Everything from the booking form. The database runs in the Eastern Europe region, so the data stays in the EU. |
| Resend | Sending confirmation e-mails | Name, e-mail, phone, company, description and the time slot. The provider is based in the USA. |
| Calendar event and the Google Meet link | Name, e-mail and the description from the form. The provider is based in the USA. |
Part of the data therefore leaves the European Union, specifically to the USA. The transfer relies on data processing agreements I have in place with these providers, which include the standard contractual clauses approved by the European Commission.
Typefaces load directly from this site, not from a third-party network, so your IP address does not reach anyone else while you browse.
6. Cookies
The site uses no tracking or marketing cookies. It sets only two technical ones:
| Cookie | What for | Lifetime |
|---|---|---|
mk_lang | Remembers the language you switched to manually, so the site stops redirecting you | 1 year |
mk_admin | Administration login. Set only for me, never for visitors | 12 hours |
Both are strictly necessary for a service you requested, so no consent is required. You can delete them in your browser settings at any time.
7. Your rights
Under the GDPR you have the right to:
- know what data I hold about you and get a copy;
- have it corrected or completed;
- have it erased;
- restrict its processing;
- receive it in a machine-readable form and move it elsewhere;
- object to the processing;
- lodge a complaint with the Czech Office for Personal Data Protection.
Just write to [email protected]. I will handle it within 30 days, usually much sooner.
8. Security
- The whole site runs over HTTPS, so the connection is encrypted.
- The bookings database is not reachable from the internet — only the site's own code reads from it.
- Only I can reach the administration, through a password and a signed session.
- The booking form is protected against bots and repeated submissions.
9. Changes
I may update this policy when the way the site works changes. The current version is always here and the date of the last change is below the text.
Last updated: 28 August 2026