How I handle what you send me.

What I process

From the contact form: name, company (if given), email, the engagement you picked, and your message. The same applies if you write to the email or call the number on this site.

Filling the form is voluntary. Without at least a name, email and a message I cannot reply.

Why, and on what legal basis

I use inquiry data to answer you and, if we continue, to take steps toward a contract (GDPR Art. 6(1)(b)). I also have a legitimate interest in handling B2B inquiries, keeping a record of what was asked, and defending legal claims (Art. 6(1)(f)). You may object to processing based on legitimate interest.

If you allow Analytics in the cookie settings, I use Google Analytics 4 (measurement ID G-7V807DWK5W) to see page views. That processing rests on your consent (Art. 6(1)(a)). The gtag script is not loaded until you allow it. You can withdraw consent from Cookies in the footer.

Hosting and security logs (IP address, time, requested URL, user agent) are processed as necessary to run and protect the site (Art. 6(1)(f)).

I do not use automated decision-making or profiling that produces legal or similarly significant effects.

Who receives the data

I read every inquiry. The form is emailed to me through Resend (Resend, Inc.) from mail.podhorny.dev. See their notice at resend.com/legal/privacy-policy.

The hosting provider that serves this website processes technical logs. Typefaces are served from this site; they are not loaded from Google.

I do not sell personal data. I do not share it for advertising. Analytics, if you allow it, is processed by Google (Google Ireland Limited / Google LLC). See Google’s privacy policy.

Transfers outside the EEA

Resend is in the United States. Sending the form is a transfer outside the EEA, carried out under the vendor’s standard contractual clauses or another GDPR-recognised mechanism they offer. If you do not want that transfer, email me instead of using the form.

Google Analytics, if you consent, also involves a transfer to Google in the United States under Google’s GDPR transfer mechanism.

How long I keep it

Inquiries: 24 months after the last reply, then I delete them unless a longer period is required for an ongoing contract, accounting, or a legal claim.

Your cookie / analytics choice: until you change it or clear site data in the browser.

Server logs: as long as the host retains them for operation and security, typically up to 90 days.

Cookies and local storage

Your Necessary / Analytics choice is stored in local storage on your device so the banner does not return every visit. If you allow Analytics, Google’s gtag may then set cookies for Google Analytics 4. Change this from Cookies in the footer.

Your rights

You can ask for access, correction, deletion, restriction, or portability, and you can object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it; that does not affect what was done before the withdrawal.

Write to ondrej@podhorny.dev. You can also complain to the Czech Office for Personal Data Protection (ÚOOÚ), uoou.cz.