Privacy Policy

The controller of personal data within the meaning of Article 4(7) GDPR is:

Given the scope and nature of the processing, no data protection officer has been appointed. Please direct all matters concerning personal data to the e-mail address above.

The applications work without a user account, without registration and without sign-in. They do not ask for a name, e-mail address, phone number or any other contact detail. They contain no advertising or analytics SDKs and do not track user behaviour across applications or websites.

Data stored on your device

The applications store only the operational data needed to function — such as quiz progress, results achieved and user preferences — in the local storage of your device. This data:

• stays exclusively on your device and is never transmitted anywhere,
• is not accessible to me as the operator,
• is not linked to any identifier of your person,
• is erased when you uninstall the application or clear its data in your device settings; in the web version, by clearing your browser data for that site.

Because this data never leaves your device and cannot be attributed to a specific person, it does not constitute processing of personal data within the meaning of the GDPR.

Distribution through application stores

Where an application is distributed through Google Play or another application store, the store operator processes data on installations, any payments, ratings and basic aggregated usage statistics. This processing takes place independently of me, is governed by the store operator's own terms, and I have no access to individual users' data. For details see the Google Privacy Policy ↗.

This website is a static presentation. It uses no cookies, stores no data in your browser, has no forms and no sign-in, and uses no analytics tools such as Google Analytics. It therefore displays no cookie banner — there is nothing to consent to.

Google Fonts

The site's typography uses fonts loaded from Google Fonts (fonts.googleapis.com, fonts.gstatic.com). When the page loads, your IP address and basic technical information about your browser are therefore transmitted to servers of Google LLC, including transfers outside the EU. This transfer is necessary to render the page as intended; the legal basis is the legitimate interest in a functional and consistent presentation under Article 6(1)(f) GDPR. The terms of that processing are described in the Google Privacy Policy ↗.

Application demo in the Products section

The Products section contains a live application demo embedded in an iframe. It loads only after you click the play button — until then nothing is sent to any external server. Once started, the content is loaded from the Netlify hosting platform, which is thereby exposed to your IP address. This pattern is a deliberate choice so that any contact with a third party happens only as a result of your active decision.

Hosting

The website runs on Cloudflare Pages (Cloudflare, Inc.), which also provides the domain and DNS. The provider may briefly retain visitors' IP addresses in server logs in order to keep the service secure and stable. I do not access these logs and do not use them for profiling or statistics. Given the provider's global network, processing may also take place outside the EU, subject to the safeguards under Chapter V GDPR.

If you contact me by e-mail or through LinkedIn, I process the data you provide to me — typically your name, e-mail address, company name and the content of your message.

• Purpose: answering your enquiry, negotiating cooperation and performing any resulting contract.
• Legal basis: steps prior to entering into a contract and performance of a contract under Article 6(1)(b) GDPR; for non-binding enquiries, the legitimate interest in replying under Article 6(1)(f).
• Retention: for the duration of the dealings and then for no more than 3 years from the last communication.

Where cooperation results in invoicing, I process billing and identification data to the extent required by accounting and tax legislation. The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR and the retention period is set by law — 10 years for tax documents under the Czech VAT Act.

I do not sell, rent or pass personal data to third parties for marketing purposes. Only the following recipients may access the data, and only to the extent necessary for the given purpose:

• Cloudflare, Inc. as the provider of website hosting, the domain and DNS,
• my e-mail service provider,
• Google LLC, to the extent described in sections 02 and 03,
• an accountant or tax adviser, where engaged,
• public authorities, where required of me by law.

Some of these providers process data on servers outside the European Economic Area. Any such transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission or another appropriate safeguard under Chapter V GDPR.

In relation to the personal data processed, you have the following rights under the GDPR:

• right of access — to learn whether and what data about you I process, and to obtain a copy of it,
• right to rectification of inaccurate or incomplete data,
• right to erasure (the “right to be forgotten”), where the purpose has ceased and no legal obligation prevents it,
• right to restriction of processing,
• right to data portability for data processed by automated means on the basis of a contract or consent,
• right to object to processing based on legitimate interest,
• right to withdraw consent, where consent was given, without affecting the lawfulness of processing carried out before withdrawal.

You may exercise any of these rights by writing to [email protected]. I will respond within one month of receipt at the latest. Exercising your rights is free of charge; for manifestly unfounded or repetitive requests I reserve the right to charge a reasonable fee or to refuse the request.

Neither the applications nor the website are directed at children. Since I collect no personal data from users of the applications, no processing of children's data takes place either — including data of children under the age of 15, the limit set by Czech law under Article 8 GDPR.

Data obtained through communication is protected by appropriate technical and organisational measures — encrypted transmission (HTTPS), access protected by a strong password and two-factor authentication, and the principle of minimisation, under which I process no more data than is necessary for the given purpose.

If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. The competent authority for me as the controller is:

Úřad pro ochranu osobních údajů (Czech Data Protection Authority)
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
uoou.cz/en ↗

If you are located in another EU or EEA country, you may also lodge your complaint with the supervisory authority of your country of residence, your place of work or the place of the alleged infringement, under Article 77 GDPR.

I may update this policy if the scope of processing or the legal framework changes. The current version is always available at this address; substantive changes will be marked by moving forward the effective date shown in the document header.