Privacy policy
Effective from 26 July 2026
This document describes what personal data I process on tomasmikula.dev, why I process it and what rights you have. Everything follows EU Regulation 2016/679 (GDPR).
Who processes the data
The data controller is Tomáš Mikula, a self-employed contractor based in Prague, Czech Republic, Business ID 04371364. You can reach me at t.mikula@centrum.cz or on +420 723 998 794.
What data I process
Form submissions
When you fill in the contact or inquiry form, I process your name, e-mail address, optionally your phone number, and the content of your message. Without this data I could not reply to you.
- Legal basis: performance of a contract or steps taken prior to entering into one (Art. 6(1)(b) GDPR).
- Retention: for the duration of the negotiation and then 3 years if we work together; otherwise 1 year at most.
- Processor: forms are handled by Netlify, Inc., which delivers the message to my inbox.
Traffic statistics
If you consent in the cookie bar, I use Google Analytics 4 for anonymous traffic statistics. IP addresses are anonymized. Without your consent, analytics is never loaded at all.
- Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
- Retention: per Google Analytics settings, 14 months at most.
- Processor: Google Ireland Limited.
Cookies
The site uses two kinds of cookies:
- Essential — they store your choice in the cookie bar so the site does not ask again. The site would not work correctly without them and no consent is required.
- Analytics — Google Analytics cookies. They load only if you click "Accept all".
You can withdraw consent at any time by clearing the site data in your browser settings. The cookie bar will then appear again.
Who I share data with
I do not sell personal data or pass it to third parties for marketing. I share it only with processors that keep the site running:
- Netlify, Inc. — website hosting and form processing
- Google Ireland Limited — traffic statistics (only with consent)
Both processors may process data outside the European Union, always under standard contractual clauses approved by the European Commission.
Your rights
In relation to the processing of your personal data you have the right:
- to access your data and receive a copy,
- to rectification of inaccurate or incomplete data,
- to erasure where there is no longer a reason for processing,
- to restriction of processing,
- to data portability to another controller,
- to object to processing,
- to withdraw consent at any time,
- to lodge a complaint with the Czech Data Protection Authority.
To exercise any of these rights, e-mail t.mikula@centrum.cz. I will respond within one month at the latest.
Security
The site runs exclusively over a secure HTTPS connection. Messages from forms arrive in a mailbox protected by a strong password and two-factor authentication. I keep data only for as long as I genuinely need it.
Changes to this document
I may update this document in the future — for example when a new service is added. The current version is always available at this address and the effective date is shown at the top.