Jakub Hýl
CZ|EN

Privacy Policy

This notice describes the processing of personal data on jakubhyl.com under the GDPR and Czech law.

1. Controller

Jakub Hýl, Business ID: 23097736
Gen. Hrušky 1215/25, 709 00 Ostrava – Mariánské Hory, Czech Republic
Privacy contact: info@jakubhyl.com

2. Data, purposes and legal bases

  • Enquiries and quotes: name, email, optional phone, company, Business ID, website, budget, service choice and message. Processing is necessary to answer your request and take pre-contractual steps at your request (Article 6(1)(b) GDPR). Name and email are required so I can identify and reply to you; without them the form cannot be sent. Other fields are optional.
  • Website delivery and security: IP address, request headers, time, requested URL and security signals may be processed in server/CDN logs and by Cloudflare Turnstile. The legal basis is my legitimate interest in securely operating the website and preventing abuse (Article 6(1)(f) GDPR).
  • Contracts and accounting: if we work together, contract, project and billing data are processed to perform the contract and comply with accounting and tax obligations (Articles 6(1)(b) and 6(1)(c) GDPR).
  • Free website analyser: the entered URL, your IP address and public website data are processed to return the requested analysis, based on my legitimate interest in providing and securing the tool (Article 6(1)(f) GDPR). Do not enter private or access-controlled URLs.

3. Recipients and services

I do not sell personal data or use it for behavioural advertising. Data may be handled by these providers only as needed to operate the service:

  • Cloudflare, Inc. — hosting, CDN, security and Turnstile anti-abuse verification (privacy, DPA, Turnstile).
  • Resend, Inc. — delivery of form submissions by email (privacy, DPA).
  • Google Workspace — mailbox and email storage (privacy, DPA).
  • Microlink — public metadata and screenshots for the analyser (privacy, DPA).
  • ARES — after an eight-digit Czech Business ID is entered, the browser queries the public register to suggest the company name.
  • Google Public DNS — after leaving the website field, the browser may send the entered domain and IP address to check whether the domain resolves (privacy).

4. International transfers

Some providers may process data outside the EU/EEA, particularly in the United States. Transfers are protected, as applicable, by an EU adequacy decision including the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. Information or copies of safeguards can be requested from me or found in the DPAs above.

5. Cookies and tracking

This website does not currently set analytics or advertising cookies, load marketing pixels, or use browser storage to track visitors. Cloudflare Turnstile may use strictly necessary storage or cookies for security verification. Because only necessary security functionality is used, there is no advertising/analytics consent banner. If optional tracking is introduced, it must remain disabled until any required consent is obtained and this notice is updated.

6. Retention

  • Enquiries that do not become a project: normally up to 12 months after the last communication, unless needed for legal claims.
  • Contract and project records: for the relationship and relevant limitation periods; accounting and tax documents for periods required by law.
  • Security/provider logs: for the shortest period needed for security and operation, according to provider settings and terms.

7. Your rights

You may request access, correction, erasure, restriction or portability where applicable. You may object to processing based on legitimate interests. You may also complain to the Czech Office for Personal Data Protection (ÚOOÚ). uoou.gov.cz

8. Automated decisions

I do not make decisions producing legal or similarly significant effects solely by automated means and do not profile visitors for advertising.

Last updated: 6 September 2026