Privacy Policy

1. Who controls your data

Stanislav Podlešák
Business ID: 76188655 · VAT ID: CZ9208241196
Registered address: Volenice 53, 262 72 Volenice, Czech Republic
Email: stanislav@podlesak.org

I am the controller of personal data processed in connection with podlesak.org and any communication you choose to send me.

2. What I process and why

Secure website delivery

The website uses Cloudflare for DNS, CDN, TLS and attack protection. Cloudflare may therefore process an IP address, request time and parameters, browser and device information, and security identifiers where necessary. The purpose is secure and reliable delivery of the website. The legal basis is my legitimate interest in service security and availability under Article 6(1)(f) GDPR.

The origin server does not maintain routine access logs, and the website does not use analytics, advertising profiles or cross-site visitor tracking.

Messages you send

If you contact me, I process your email address, name, message and any attachments. I use them to answer your request, prepare or perform a working relationship and protect legal claims. The legal basis is taking steps at your request or performing a contract under Article 6(1)(b) GDPR, as applicable, legitimate interests under point (f), and compliance with legal obligations under point (c).

YouTube videos

The YouTube player loads only after you click a particular video. This creates a direct connection to YouTube, operated by Google, which may receive your IP address and browser information. I use the youtube-nocookie.com domain; subsequent processing is governed by Google's policies.

3. Cookies and local storage

The website does not set analytics or marketing cookies. Your light or dark theme choice is stored only in browser local storage and is not sent to the server. Cloudflare may use essential security cookies when required by the current security situation. See the Cookie and Local Storage Policy for details.

4. Recipients and international transfers

• Cloudflare, Inc. — website distribution and security;
• the email service provider — only when you send me a message;
• Google LLC / YouTube — only after you start an embedded video;
• public authorities where disclosure is required by law.

Cloudflare and Google are global providers, so data may be processed outside the European Economic Area. Transfers rely on the provider's applicable legal safeguards, particularly an adequacy decision or Standard Contractual Clauses.

5. Retention

• ordinary visits: the origin server does not create access logs;
• Cloudflare security data: for the necessary period under Cloudflare's policies;
• general email correspondence that does not lead to cooperation: normally no longer than 12 months after the enquiry is closed;
• contractual, accounting or tax records: for the relationship and the period required by law;
• data necessary for legal claims: for the applicable limitation period.

6. Your rights

Depending on the circumstances, you may request access, rectification, erasure, restriction or portability and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time. The website does not use automated decision-making or profiling.

Send requests to stanislav@podlesak.org. You may also lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.

7. Policy updates

I will update this policy if the website, its services or legal requirements change. The current version will always be available here with its effective date.