Privacy Policy

1. Data Controller

Štěpán Kameník, IČO 05097215
Prague, Czech Republic
E-mail: stepan@kamest.dev

2. What Personal Data I Process

• Contact data — the email address, phone number, name and message content you tell me yourself when you get in touch. This site has no contact form and no sign-up, so you send me nothing until you write or call.
• Operational and technical data — IP address, browser type and version, operating system, referring URL, and the date, time and address of the page requested. The hosting platform records these for every visit; they are necessary to deliver the page and to protect the site from abuse. I do not use them to track individuals.
• Traffic data — pages viewed, approximate region, device type and referring source, in aggregate. Measured by Vercel Web Analytics unless you turn the measurement off.

3. Purpose and Legal Basis

• Running and securing the site — processing operational and technical data on the basis of my legitimate interest in a reliable, secure website (Art. 6(1)(f) GDPR). You may object to this processing (Art. 21 GDPR).
• Answering enquiries — processing contact data on the basis of my legitimate interest in talking to people about possible work (Art. 6(1)(f) GDPR), and, once a contract comes out of it, on the basis of performing that contract (Art. 6(1)(b) GDPR).
• Measuring traffic — processing aggregate traffic data on the basis of my legitimate interest in knowing which parts of the site are useful (Art. 6(1)(f) GDPR). The measurement is cookieless, does no cross-site tracking and builds no profile. You may object to it at any time and switch it off in one click.

4. Processors, Recipients and Transfers Abroad

I do not sell your data and I do not pass it on for marketing. Only these have access to it:

• Vercel — hosts this website and provides the traffic measurement described above, acting as my processor under a data processing agreement.
• Google Workspace — delivers and stores email, if you write to me. Provided by Google Ireland Limited.
• My accountant, and public authorities — only if a contract comes out of our exchange, and only to the extent the law requires.

Both providers may process data outside the European Economic Area, in particular in the United States. Any such transfer relies on the European Commission’s adequacy decision for the EU–US Data Privacy Framework (Art. 45 GDPR) and, as a fallback, on the standard contractual clauses adopted by the Commission (Art. 46(2)(c) GDPR). I will send you a copy of the safeguards relied on if you ask. For their side of it, see the Vercel privacy policy.

5. How Long It Is Kept

• Contact data and message content — kept until your enquiry is settled and then for at most 12 months, unless a contract comes out of it. If it does, the data is kept for the term of that contract and for as long as the statutory periods for claims and for keeping tax and accounting records run.
• Hosting logs — retained by the hosting provider for the period its plan provides for, and no longer than 30 days.
• Traffic data — retained by Vercel in aggregate form only, from which an individual visitor cannot be identified, for the period my plan provides for.

6. Your Rights

Under Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll. you have the right to:

• access the personal data I hold about you
• have inaccurate data corrected
• have your data erased (the “right to be forgotten”)
• have processing restricted, or object to it
• data portability
• not be subject to a decision based solely on automated processing — no such processing takes place on this site
• lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz

To exercise any of these, email stepan@kamest.dev.

7. Automated Decision-Making, and No Data Protection Officer

There is no automated decision-making and no profiling within the meaning of Art. 22 GDPR: no decision with legal effect for you is taken automatically. Giving me any data at all is entirely voluntary and is neither a statutory nor a contractual requirement; the only consequence of withholding it is that I cannot reply to you. Given the nature and scale of what I do, I am not required to appoint a data protection officer (Art. 37 GDPR) and have not appointed one — write to me directly about anything on this page.

8. What Is Stored On Your Device

This site sets no cookies and by default stores nothing on your device. For the detail, and to switch measurement off, see Cookies and Device Storage.

9. Changes To This Policy

I may update this policy — for instance when I change hosting provider or analytics tool. The version and date at the top always reflect the current revision, and the wording in force is always the one on this page.