Privacy and cookie policy
This page describes which personal data the webrocks.cz website processes, why and for how long, who it is entrusted to and what your rights are.
Controller
The controller of personal data is Tomáš Hanus, a self-employed individual registered under the Czech Trade Licensing Act, business ID (IČO) 22166297, with his registered place of business at Gen. Sochora 1280/20, Poruba, 708 00 Ostrava, Czech Republic (data from the public ARES register). The webrocks.cz website is his project. It is not a separate company or a registered trade name.
Contact for all questions about personal data: webrocks.cz@gmail.com.
Contact form
When you submit the contact form, the controller processes the data you enter: name, email, inquiry type and message. The date and time of submission and the page language are stored with them.
Purpose: to reply to your message and handle your inquiry. An automatic confirmation that the message has arrived is sent to the email address you enter.
Legal basis: for an inquiry, steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR); for other questions, the legitimate interest in replying to the message you sent (Art. 6(1)(f) GDPR).
Filling in the form is voluntary. Without a name, email, inquiry type and message, however, the form cannot be sent and the controller has no way to reply. Instead of the form, you can write directly to webrocks.cz@gmail.com.
The data is stored in a Google Sheet and in the controller's Gmail mailbox. The form is handled by a Google Apps Script. If a message cannot be stored, it is written to the script's error log so that it is not lost. Only the controller has access to the data.
Retention: inquiries are kept for 12 months, in the sheet from receipt of the message and in the mailbox from the last message in the conversation. They are then deleted automatically from both the sheet and the mailbox; emails are moved to the trash, from which Gmail permanently deletes them within 30 days. If an inquiry leads to cooperation, the data is kept for as long as needed to perform the contract and to meet legal obligations (e.g. accounting).
Traffic analytics (Google Analytics)
The website uses Google Analytics 4 only if you give consent in the Analytics consent bar. Without consent, the analytics script is not loaded at all and nothing is sent to Google.
With consent, the cookies _ga and _ga_X4D7153RGB containing a random identifier are stored in your browser and Google receives information about your visit: pages viewed, where you came from, interactions with the page (scrolling, clicks on links to other websites, file downloads, playing embedded videos, using a form without the content of the fields), device and browser type, language and approximate location derived from your IP address.
Purpose: to find out how many people visit the website and what they read, and to improve the website accordingly.
Legal basis: your consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll., on Electronic Communications).
You can withdraw your consent at any time via Cookie settings in the footer by choosing Decline. Analytics is then switched off and the _ga cookies are deleted. Withdrawal does not affect processing carried out before it.
The website does not set advertising cookies: consent for advertising purposes (ad_storage, ad_user_data, ad_personalization) always remains denied.
Retention: Google Analytics keeps event-level data and data tied to the cookie identifier for 14 months. It is then deleted.
Hosting
The website runs on GitHub Pages by GitHub, Inc. GitHub logs the IP address of visitors for the security of the service. This processing is governed by GitHub's policies.
Legal basis: legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).
Recipients and transfers outside the EU
Personal data is processed by these service providers:
- Google Ireland Limited, Ireland: Gmail, Google Sheets and Google Apps Script for the contact form, Google Analytics for analytics with consent. Google may also process data in the USA. Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission has decided that it ensures adequate protection.
- GitHub, Inc., USA: website hosting. GitHub is certified under the EU–US Data Privacy Framework.
Cookies and browser storage
The website stores in your browser only the items listed in the table below. Necessary items serve a function you choose yourself and, under Section 89(3) of the Czech Act on Electronic Communications, do not require consent. Analytics cookies are stored only with consent.
When you submit the form, your browser connects to a Google server (script.google.com). The website does not store any cookies in doing so.
| Name | Set by | Purpose | Expiry | Type |
|---|---|---|---|---|
consent, consentAt | webrocks.cz (localStorage) | remembers your choice in the consent bar and when you made it | 12 months, then the bar asks again | necessary |
theme | webrocks.cz (localStorage) | remembers light or dark mode when you switch it | until deleted in the browser | necessary |
_ga | Google Analytics (cookie) | distinguishes individual visitors' browsers | 2 years | analytics, only with consent |
_ga_X4D7153RGB | Google Analytics (cookie) | keeps the state of the visit | 2 years | analytics, only with consent |
Your rights
You can exercise your rights by email to webrocks.cz@gmail.com. You will receive a reply without undue delay and within one month at the latest. You have the right:
- to access your data and obtain a copy,
- to have inaccurate data corrected,
- to erasure and to restriction of processing,
- to portability of the data you provided,
- to object to processing based on legitimate interest,
- to withdraw your analytics consent at any time via Cookie settings in the footer,
- to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7.
Further information
There is no automated decision-making with legal or similarly significant effects.
If the processing changes, for example because of a new service on the website, this policy will change too. The current version is always on this page.