Data I process
The data depends on how you use the website. It may include:
- Your name, email address, phone number, and message when you submit the contact form.
- Anonymized visit data such as the page viewed, device type, browser, or approximate location.
- Technical signals required to protect the contact form from automated abuse, including your IP address and browser details.
Why I use the data
I use contact details to handle inquiries and related communication. Technical and anonymized data helps protect the form and improve the website. The legal basis is handling your request before a possible contract and my legitimate interest in keeping the website secure.
Who processes the data
I use Vercel (hosting, cookieless Vercel Analytics, and Vercel BotID bot detection), Cloudflare Turnstile (checking that the form is not submitted by a bot), Upstash (temporary storage for limiting the number of submitted messages), and Resend (email delivery) to operate the website. They process only the data needed for hosting, anonymized analytics, form protection, rate limiting, and email delivery. I don’t sell personal data.
How long I keep the data
I keep contact details and correspondence for as long as needed to handle the inquiry, provide related services, and meet legal obligations. Vercel keeps anonymized analytics data according to its own retention rules. I use your IP address and a one-way fingerprint (hash) of your email address to limit the number of submitted messages, and store them with Upstash for up to 24 hours. Server logs contain your IP address, the email fingerprint, and the email domain (the part after the @). Vercel deletes them after one hour at most. Resend keeps copies of sent emails for up to 30 days.
Your rights and contact
To ask about your data, request a correction, or request deletion, email jd [at] jandrly.cz.
The data controller is Jan Drlý, Company ID 17126916. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection.