Data Controller
The data controller is:
Jan Pěnčík,
Dlouhá 578,
541 02 Trutnov,
Czech Republic.
For matters regarding personal data protection, you can contact me at the e-mail address kontakt@janpencik.cz.
What Personal Data I Process
When you submit the contact form, I process the data that you provide in it:
- first and last name,
- e-mail address,
- message content.
In connection with submitting the form, technical data may also be processed automatically, in particular the IP address, information about the internet browser and device, address of the visited page, date and time of submission, delivery status, and data related to the protection of the form against spam.
The Flamingo plugin saves the submitted message and its metadata in the website database. It may also separately store your name, e-mail address, and date of last contact.
Purpose and Legal Basis of Processing
I process personal data for the purpose of receiving and handling your inquiry, responding to your message, and any subsequent communication.
If your message relates to an offer of services or possible cooperation, the legal basis for processing is taking steps prior to entering into a contract at your request pursuant to Art. 6(1)(b) GDPR.
In other cases, the legal basis is my legitimate interest in communicating with website visitors, protecting the form from abuse, and reliable message delivery pursuant to Art. 6(1)(f) GDPR.
Providing data is voluntary. However, without providing a name and a functional e-mail address, it may not be possible to handle your inquiry or respond to it.
Retention Period
I retain submitted messages and related contact data for a maximum of 3 years from the handling of the message or from the last related communication.
If a contractual relationship arises from the communication, or if further retention is necessary to protect legal claims or fulfill legal obligations, the relevant data may be retained for the period required by legal regulations or until the expiration of the relevant limitation periods.
Technical data used to protect the form from spam are retained only for the time necessary to ensure security and resolve potential abuse.
Recipients of Personal Data
I have access to personal data, and to the extent necessary, also technical service providers ensuring the operation of the website, database, hosting, and e-mail communication. These providers may act as data processors.
For message storage, the website uses the Contact Form 7 and Flamingo plugins. This is software operated within this website; the saved messages are located in the web server’s database.
The form is protected by Cloudflare Turnstile and Akismet services. Their providers may process technical data, such as IP address, browser data, request time, and submitted message content, for the purpose of identifying and limiting spam. You can find more information about data processing in the privacy policies of Automattic (Akismet) and Cloudflare (Turnstile).
Data Transfer Outside the European Economic Area
Providers of security and anti-spam services may process some data outside the European Economic Area, especially in the United States of America. Any such transfers take place on the basis of an adequacy decision by the European Commission or other appropriate safeguards under the GDPR, in particular standard contractual clauses.
Your Rights
Under the conditions set out by the GDPR, you have in particular the right to:
- request access to your personal data,
- request the correction of inaccurate or incomplete data,
- request the erasure of personal data,
- request the restriction of processing,
- obtain your data in a machine-readable format, provided the conditions for the right to data portability are met,
- object to processing based on legitimate interest.
You can exercise your rights via the e-mail address kontakt@janpencik.cz. Before processing the request, I may reasonably verify your identity.
You also have the right to file a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, website uoou.gov.cz.
Automated Decision-Making
The processing of personal data does not involve automated decision-making or profiling that would have legal or similarly significant effects for you. Automated tools can only evaluate whether the submitted message shows signs of spam.
Validity of Terms
These terms are valid from August 13, 2026.