GDPR & Privacy Notice
Last updated: 6/13/2026
Who we are
Czech IT (Jiří Chovanec), based in Ostrava, Czech Republic, is the data controller for personal data collected through this website. Contact: [email protected].
What we collect
Contact form submissions (name, email, optional phone/company, message). Server logs (IP address, user agent, timestamps) kept for security and abuse prevention. Authenticated admin accounts (email, hashed password, role).
Why we process it
To respond to enquiries (Art. 6(1)(b) GDPR — pre-contract steps), to operate and secure the site (Art. 6(1)(f) — legitimate interest), and to comply with legal obligations (Art. 6(1)(c)).
How long we keep it
Contact submissions: up to 24 months unless a contract is formed. Security/server logs: up to 90 days. Admin accounts: until the account is deleted.
Sharing
We use the following processors: Supabase (EU hosting, database & auth), Cloudflare (CDN/edge), Resend (transactional email). No personal data is sold or shared for advertising.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and object to processing of your data, and to data portability. You may also lodge a complaint with the Czech Data Protection Authority (ÚOOÚ, www.uoou.cz). To exercise these rights write to [email protected].
International transfers
Data is processed primarily in the EU. Where a processor transfers data outside the EEA we rely on Standard Contractual Clauses.