How I process your personal data

David Zelenka, with his registered place of business at K Lipám 2729, 397 01 Písek, Czech Republic, Company ID (IČO) 875 86 657, a sole proprietor registered in the Czech Trade License Register.

Contact: jsem@davidzelenka.cz or +420 721 856 369.

In the course of my work, I process some personal data. This is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council, better known as the GDPR.

When you inquire about working together

I work with the data you give me yourself – most often your first and last name, email address, phone number, and what you tell me about your situation.

I use this data to handle your inquiry, and only for as long as strictly necessary. The legal basis is Article 6(1)(b) GDPR – taking steps at your request before entering into a contract.

When you book a consultation

When you pick a consultation time through the calendar on this website, I work with what you fill in on the form: your first and last name, email address, phone number, a link to your project (optional), what your business does and who you sell to, why you're tackling this now, and who makes the marketing decisions. Along with that, the language version of the website you booked from, your browser's time zone (so the meeting time in the emails is right), and your IP address are stored.

I use this data to arrange the consultation and prepare for it, and to send you a confirmation, a calendar invitation, and a reminder the day before. The emails are sent from schuzky@davidzelenka.cz through the mail server of the website's hosting provider. The legal basis is Article 6(1)(b) GDPR – taking steps at your request before entering into a contract.

The IP address protects the form from abuse – it limits the number of booking attempts. The legal basis is Article 6(1)(f) GDPR – legitimate interest.

I keep the booking in the booking system for 12 months from the date of the meeting; after that, it's deleted automatically. The record of a booking attempt with your IP address is deleted after 24 hours. I add the meeting, with your contact details and answers, to Google Calendar, and a Google Meet link is created for it.

When we work together

I process your billing and contact details and keep the materials the project needs in order to work.

I process this data for the duration of our work together and then for as long as the law requires me to keep it. The legal basis is Article 6(1)(b) GDPR – performance of a contract, and Article 6(1)(c) GDPR – compliance with a legal obligation.

Who else has access to the data?

Your data is safe with me. Even so, some of it is also accessible to the tools I use for my work:

  • the Vyfakturuj invoicing tool (Redbit s.r.o., Company ID 24197190, registered office at Antonína Dvořáka 612, 280 02 Kolín, Czech Republic, registered with the Municipal Court in Prague, Section C, Entry 187755)
  • Asana for project management (Asana, Inc., 633 Folsom Street, San Francisco, CA 94107, USA)
  • Google Drive for project documents, and Google Calendar and Google Meet for consultations (Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
  • ACTIVE 24, s.r.o., Sokolovská 394/17, 186 00 Prague 8, Czech Republic, Company ID 25115804 (operator of Websupport) – hosting of the website, the booking system, and email (including booking emails)

Your data stays in the EU, except for US-based tools that have joined the Data Privacy Framework.

What are your rights?

The GDPR gives you the right to contact me and:

  • ask which of your personal data I process,
  • request access to it and have it corrected or updated,
  • request restriction of processing or a copy of the data I process,
  • in certain situations, request its erasure,
  • in certain cases, have it transferred elsewhere.

You can withdraw any consent you've given at any time, and you can object to processing based on legitimate interest. If you believe I'm not handling your data properly, you have the right to file a complaint with the Czech Office for Personal Data Protection or take your claim to court.

I have not appointed a data protection officer, and I don't use your data for profiling. For how cookies work on this website, see the separate page on cookies.