Privacy policy

This privacy policy explains how I process personal data while running the semakod.cz website and while communicating with clients and people interested in my services.

Processing of personal data is governed mainly by Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and other applicable laws of the Czech Republic.

This English text is a courtesy translation. In case of any discrepancy, the Czech version of this policy prevails.

1. Who is the controller of personal data#

The controller of personal data is Mykola Stoyka, company registration number (IČO) 01796763, registered at Radimovická 1423/31, Chodov, 149 00 Prague 4, email: ahoj@semakod.cz. For any questions about the processing of personal data, you can contact me at the email address above.

Given the scale and nature of the processing, I am not required to appoint a Data Protection Officer (DPO).

2. Which personal data I process#

The scope of the data I process depends on how you communicate with me or use the website.

Contact form#

If you contact me through the form, I process the data you enter yourself, in particular:

• name,
• email address,
• phone number, if you provide one,
• the subject of the message,
• the type of service enquired about,
• the content of the message.

I use this data mainly to handle your enquiry, communicate with you and, where relevant, prepare a quote.

Running and securing the website#

Visiting the website may automatically generate technical data related to running and securing it, such as your IP address, browser information and the time of access.

I use this data mainly to keep the website running safely and correctly and to protect it from misuse.

My own, cookie-less traffic statistics#

Independently of Google Analytics (see below), I also keep simple traffic statistics on my own server — the page you visited, where you came from (the referring website, or UTM parameters from a campaign), your browser, operating system and device type (desktop / mobile / tablet). This statistic does not store any cookie or other storage in your browser and is not tied to your identity: instead of an IP address or another persistent identifier, it computes a one-way fingerprint that also changes every day, so it cannot be used to work out who you are or to track you across different days. Your IP address is used momentarily to compute the fingerprint but is never stored. Because this is not a cookie or a similar technology within the meaning of the ePrivacy rules, it does not require consent through the cookie bar — it runs regardless of your choice there.

Business cooperation#

If we conclude a contract, I process the data needed to conclude and perform it, in particular contact and billing details.

Cookie choice#

If you use the cookie bar, I also store information about your cookie settings. This information is used to respect your decision regarding optional cookies and technologies.

3. Why I process personal data#

I process personal data only for specific and legitimate purposes.

The legitimate interest for running and securing the website is to keep the website running safely and reliably, protect it from misuse, prevent security incidents and protect my legal claims.

I use analytics and advertising technologies only to the extent that matches your cookie settings — without consent the Consent Mode signals (ad_storage, ad_user_data, ad_personalization, analytics_storage) stay set to “denied” and no data is collected or shared.

I do not use automated decision-making that would have legal or similarly significant effects on you within the meaning of Art. 22 GDPR.

Providing personal data is generally voluntary. However, the data needed to handle a specific enquiry is necessary for me to respond to it and, where relevant, prepare a quote. Without it, I may not be able to handle the enquiry properly.

4. How long I keep the data#

I keep personal data only for as long as is necessary for the given purpose, or for as long as applicable law requires me to keep it.

• Enquiries that do not lead to cooperation: generally no longer than 12 months from the last contact.
• Data related to a contract: for the duration of the contractual relationship and afterwards for as long as necessary to comply with legal obligations and protect my legitimate interests.
• Accounting and tax records: for the period set by applicable law.
• Consent to optional cookies: 12 months (365 days) from the moment it is given, or until you withdraw it earlier. After that the cookie expires on its own and the bar asks you to decide again.
• My own, cookie-less traffic statistics: the records contain no name, IP address or other persistent identifier (only a fingerprint that changes daily), so an individual visitor cannot be identified from them — I keep them for longer, to compare how traffic develops over time.

Once the relevant period has elapsed, I delete or anonymise the data, unless its further retention is required by law.

5. Who the data may be disclosed to#

I do not sell personal data or pass it to third parties for their own marketing purposes.

To the necessary extent, the data may be accessed by the following recipients:

I will tell you the hosting provider’s business name on request at ahoj@semakod.cz.

My own, cookie-less traffic statistics (see above) stay exclusively on this hosting — they are not passed to anyone and never leave the European Union.

To the necessary extent, the data may also be accessed by other providers of technical, cloud or IT services that I use to run the website and my business (for example the provider of my mailbox).

Where I use external providers as processors of personal data, their obligations are governed by the relevant contractual terms and, where applicable, a data processing agreement.

The website uses Google Tag Manager, Google Analytics and Meta Pixel to measure traffic and advertising. Their scripts are only downloaded from Google’s, respectively Meta’s servers once you allow the matching category in the cookie bar (analytics for Google, marketing for Meta Pixel). Until you give consent, or if you refuse it, the website sends nothing to those servers — so they do not learn your IP address either. If you do give consent, Google and Meta both process data outside the European Economic Area as well, in particular in the US; the transfer relies on the EU–US Data Privacy Framework or, where applicable, on standard contractual clauses approved by the European Commission.

6. Cookies and other browser storage#

The website uses technologies that enable the site to function correctly and to remember some of your choices.

The complete list#

The website stores nothing else in your browser.

The first two entries are necessary and are always stored — semakod_consent is the record of your decision itself, theme merely your appearance choice; neither identifies you or feeds any analysis. _ga and _ga_7NT3GSTFVD are analytics cookies and are only created once you allow analytics in the bar; _fbp and _fbc are marketing cookies and are only created once you allow marketing.

Necessary#

These technologies are needed for the website to function correctly — to remember your appearance setting and your cookie choice.

Your consent is not required for them under § 89(3) of Czech Act No. 127/2005 Coll., as they are necessary to provide the requested service.

Analytics#

If you allow them, I use Google Analytics 4 to obtain statistical information about website usage — which pages are visited and how people move around the site.

Analytics data is pseudonymised, not anonymous: Google attaches a random identifier stored in a cookie and a truncated IP address to it. It does not tell me your name or email and I do not link it to enquiries from the form, but on its own it remains personal data within the meaning of Art. 4 GDPR — which is why it is only collected with your consent.

Marketing#

If you allow it, I use Meta Pixel (Facebook/Instagram) to measure how effective advertising is and to build an audience that ads may be shown to — typically people with an interest similar to yours, or you yourself if you visited the site and did not complete an enquiry.

Meta also processes pixel data for its own purposes under its own privacy policy (in this respect Meta acts as an independent, or joint, controller) — worth reading if you care exactly how Meta handles the data.

The Google Consent Mode advertising signals (ad_storage, ad_user_data, ad_personalization) follow this category — without consent they stay “denied” and Meta Pixel is not downloaded at all.

How to withdraw consent#

You have two equivalent options and both take effect immediately:

• the “Cookie settings” link in the website footer — it opens the same bar and overwrites your decision,
• deleting this site’s cookies in your browser — the decision lives solely in the semakod_consent cookie, so deleting it removes the consent and the bar asks again on your next visit.

Withdrawal takes effect at once: without valid consent, neither Google’s nor Meta’s scripts are downloaded at all.

7. What rights you have#

Under the GDPR, in connection with the processing of personal data, you have in particular the right to:

• request access to your personal data,
• request the correction of inaccurate or incomplete data,
• request the erasure of personal data where there is no legal ground for its further processing,
• request the restriction of processing,
• request the portability of the data you provided to me,
• object to processing based on legitimate interest,
• withdraw your consent at any time, where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can send your requests to: ahoj@semakod.cz.

I will respond to your request without undue delay, and no later than within the period set by the GDPR.

If you believe that I am handling your personal data in breach of applicable law, you have the right to lodge a complaint with the Czech Office for Personal Data Protection.

8. Changes to this policy#

I may update this policy from time to time, for example if I change the technologies or service providers used, or if applicable law changes.

The current version is always published on this page.