Privacy

Privacy Policy

When you write to me through the form, you're entrusting me with your data. Here's a plain-language description of what happens to it. In doing so I follow the European GDPR regulation (2016/679) and the Czech Act No. 110/2019 Coll., on personal data processing.

Effective from 17 July 2026

1. Who processes the data

The controller of the personal data is me:

• Ing. Jakub Brázda
• Company ID (IČO): 07288310
• Registered address: Český Herálec 524, 582 55 Herálec, Czech Republic
• A self-employed person (sole trader) under the Czech Trade Licensing Act, not registered in the Commercial Register
• Email: brazda.jakub@seznam.cz
• Phone: +420 608 498 170

I haven't appointed a Data Protection Officer - as a small business I'm not required to. For anything, contact me directly at any of the details above.

2. What data I collect and why

Only what you fill in yourself in the contact form:

• Name - so I know how to address you
• Email - so I can reply to you
• Message text - so I know what you need

The purpose is a single one: to reply to you and arrange a collaboration. I don't use the data for anything else. I don't send newsletters, I don't run ad campaigns and I don't sell your data to anyone.

Filling in the form is voluntary. But I do need your name and email to be able to reply to you at all - without them it won't work. If you'd rather not fill them in, just call me instead.

Please don't put sensitive health data in your message. If your health needs to be discussed for training, we'll go through it in person at the introductory consultation.

3. The legal basis for it

When you write to me about training, the legal basis is steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). In other words: you wrote to me because you want to arrange something, and without your data I have no way to reply.

When your message isn't about training and is, say, a general enquiry, the processing is based on my legitimate interest in replying to you (Art. 6(1)(f) GDPR). You can object to that at any time too - see section 8.

I never ask you for consent to the processing - it would be pointless. Consent is used where there's no other basis for the processing. Here there is one, and it's your own message.

4. How long I keep the data

• If nothing comes of the collaboration: I'll delete the message together with the data no later than 6 months after our last communication.
• If a collaboration begins: I need the data for as long as it lasts. Documents related to it are then archived for the period required by tax and accounting rules (typically up to 10 years for tax documents).

At any time in between you can ask for deletion. See section 8.

5. Who gets access to the data

No one apart from me that I wouldn't need. Specifically, two services technically deliver the messages to me:

• Formspree, Inc. (USA) - the service that sends the form to my email. The message passes through it and is stored there for the necessary period. It acts as my processor: it handles the data only as a technical forwarder, not for its own purposes, and is bound to that by a data processing agreement under Art. 28 GDPR.
• Seznam.cz, a.s. (Czech Republic) - the provider of my email inbox, where the message ultimately arrives.

I don't pass the data to anyone else. The exception is a situation where the law would require me to - for example at the request of law-enforcement authorities.

6. Transfers outside the EU

Formspree is based in the United States, so your message passes through a server outside the European Union. Formspree commits to protecting this data in the data processing agreement, with safeguards under Art. 46 GDPR. On request I'll provide you with the specific basis for this transfer (for example the Standard Contractual Clauses approved by the European Commission, or the EU-US Data Privacy Framework) together with that agreement.

If the transfer to the USA doesn't suit you, don't use the form and write to me directly at brazda.jakub@seznam.cz or call me. The result is the same, it just goes straight to my Czech inbox.

7. Links to other services

On the site you'll find links to my social media profiles (Instagram and Facebook, both operated by Meta), and possibly to other external services.

They're just links - until you click them yourself, nothing loads from them and no IP address or any other data leaves for them. Once you click, you end up directly at that service, and from then on its own privacy rules apply, which I have no control over.

8. Your rights

In relation to my hands you have the rights listed below. Which of them can be exercised depends on the circumstances and on the basis on which I process the data (see section 3), but in practice - just get in touch and we'll sort it out together. An email is enough:

• Right of access - you can ask what data I hold about you.
• Right to rectification - if something is wrong, I'll fix it.
• Right to erasure - say the word and I'll delete it. Unless the law requires me to keep it.
• Right to restriction of processing - you can ask me to temporarily do nothing with the data.
• Right to portability - I'll hand you the data in a machine-readable form.
• Right to object - you can object to processing based on legitimate interest (section 3).

I may want to get back to you to verify that it's really you asking about your data - I don't want to send it to a stranger. I'll deal with it within one month at the latest. Handling it is free of charge.

9. Complaints

If you think I'm handling your data badly, please get in touch with me directly first. Most things can be sorted out with a single email.

But you also have the right to lodge a complaint with the supervisory authority:

• The Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
  Pplk. Sochora 727/27, 170 00 Prague 7, Czech Republic
  Data box: qkbaa2n
  Email: posta@uoou.gov.cz
  uoou.gov.cz

10. What this site does not do

For the record, because these days it's the exception. The site itself:

• Uses no cookies. None. That's why there's no consent bar popping up at you.
• Has no analytics. No Google Analytics or anything similar. I don't know who visits.
• Has no tracking pixels or embedded social-media widgets.
• Doesn't load fonts from Google. They're stored right here, so your IP address doesn't go anywhere when you visit.
• Does no automated decision-making or profiling.

In practice this means that until you write to me yourself or click one of the links out (section 7), I learn nothing at all about your visit.

11. Changes

If anything changes, I'll update this page and change the effective date at the top. The version valid at the time you wrote to me is the one that applies to you.