Privacy Policy

The controller of personal data is Taras Ishchuk, Company ID 23874694, registered office at Rantířovská 123/36, 586 01 Jihlava, Czech Republic, a sole trader registered in the Trade Register (the “controller” or “I”).

For any privacy matters, you can contact me by email at info@it-studio.cz or by phone at +420 777 596 216.

Contact form. When you send me an enquiry, I process your full name, email or phone number, the text of your message and the date and time it was sent. I use this data solely to reply to you and prepare an offer. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

Visiting the website. When pages are loaded, the hosting provider records technical data (IP address, browser type, time of request) in server logs. This is used to ensure the security and operation of the website. The legal basis is my legitimate interest (Art. 6(1)(f) GDPR).

Protecting the form against spam. When you submit the form, instead of your IP address I store only a one-way fingerprint of it (HMAC) and the time of submission, so that I can limit the number of messages from one device. The IP address cannot be recovered from the fingerprint, and I delete it after 24 hours. The legal basis is my legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

Automatic confirmation. If you enter an email address in the form, I send you an automatic confirmation that your enquiry has arrived. I do not send you any other emails unless you ask for them.

Enquiry questionnaire. To prepare a proposal, I may send you a link to an optional questionnaire about your business, sales and project goals (e.g. number of enquiries, average order value, budget). I use the answers only to prepare the proposal and calculate the return on investment; the legal basis is again taking steps prior to entering into a contract (Art. 6(1)(b) GDPR). Until you send them, your answers in progress are stored only in your browser.

AI-suggested questions. The automation may pass the text of your enquiry (without your name or contact details) to the Claude language model, which suggests additional questions for the questionnaire. I review every suggestion manually before sending; no decisions about you are made automatically.

Traffic source. Together with the enquiry I also store the website language and where you came to the website from (e.g. a search engine, a campaign-tagged link or a direct visit) – without cookies. It helps me evaluate which channels work. The legal basis is my legitimate interest (Art. 6(1)(f) GDPR).

Providing data in the form is voluntary, but without it I cannot reply to you.

I keep enquiry data for as long as it takes to handle the enquiry and then for a maximum of 2 years in case we continue our communication. After this period the enquiry is automatically anonymised (name, contact details and message are irreversibly removed and questionnaire answers are deleted). If we enter into a contract, further retention is governed by that contract and by legal obligations (e.g. accounting). Server logs are kept by the hosting provider only for the limited period necessary to operate the service.

I do not sell data from the form or share it for marketing purposes. The advertising tools listed in section 5 are only loaded with your consent. I use the following processors to operate the website:

• Vercel Inc. (USA) – website hosting and server logs. Transfers to the USA are based on the EU–US Data Privacy Framework and standard contractual clauses.
• Supabase Inc. – the database where enquiries from the form are stored; data is held in a data centre in London (United Kingdom, which is covered by a European Commission adequacy decision).
• n8n – an automation tool that delivers enquiries to me and sends you the automatic confirmation. It runs on my server at WEDOS Internet, a.s.
• WEDOS Internet, a.s. (Czech Republic) – the server for automations and the mailbox from which I reply to enquiries.
• Anthropic PBC (USA) – the Claude language model that suggests additional questionnaire questions; it receives only the text of the enquiry. Transfers to the USA are based on standard contractual clauses; the data is not used to train models.

The necessary cookie „itstudio_consent“ remembers your cookie choice (6 months). The legal basis is my legitimate interest; no consent is required for it.

Analytics and marketing cookies are loaded only with your consent (Art. 6(1)(a) GDPR and Section 89(3) of the Czech Electronic Communications Act). Without consent, not even Google Tag Manager is loaded. Depending on your choice, the following tools may be used:

• Google Analytics, Google Ads and Google Tag Manager – Google Ireland Ltd.; traffic statistics, ad measurement and targeting. Data may be transferred to the USA (EU–US Data Privacy Framework).

• Sklik – Seznam.cz, a.s. (Czech Republic); ad measurement and targeting in the Seznam network.

• Meta Pixel – Meta Platforms Ireland Ltd.; ad measurement and targeting on Facebook and Instagram. Data may be transferred to the USA (EU–US Data Privacy Framework).

These tools process data about your visit (e.g. pages visited, a browser identifier, approximate location based on the IP address). During ad campaigns, the advertising platforms, as independent controllers, may show you ads based on your interests (remarketing). I do not pass on data from the contact form (name, email, phone, message) – when the form is submitted, only the fact that an enquiry was made is measured.

You can change or withdraw your consent at any time via the Cookie settings link in the website footer; the tracking cookies are then deleted. Withdrawal does not affect processing before it. Fonts are served directly from this website, not from third-party servers.

The website contains a link to the partner WEDOS. By clicking it you leave this website, and the processing of your data is governed by the privacy policy of WEDOS Internet, a.s.

In connection with the processing of your personal data, you have the right to:

• access your personal data,
• have inaccurate data rectified,
• have your data erased (“right to be forgotten”),
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• lodge a complaint with the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz) or with the supervisory authority in your country.

Simply write to me at info@it-studio.cz. I will respond without undue delay and within one month at the latest. I do not carry out automated decision-making. Profiling for advertising purposes is done only by the advertising platforms and only with your consent to marketing cookies (section 5).