Privacy policy

What I know about you, and why.

What happens to your information when you visit bartkowiak.cz, book a call, write to me or subscribe. I collect as little as I can, I don’t sell your data, and you can ask me what I have at any time.

The short version: this site sets no cookies of its own, counts visits without knowing who you are, and only learns your name and email if you book a call, write to me or subscribe.

  • No cookies from this siteVisits are counted anonymously. There’s no cookie banner because this site sets no cookies itself.
  • Your data isn’t for saleYour details are used to reply to you and stay in touch, never for ads.
  • Yours to see and deleteWrite to me and I’ll show you what I have, correct it or delete it, unless the law makes me keep it (invoices).

Who is responsible

The controller of your personal data is me:

Tomasz Radosław Bartkowiak
Sole trader, registered in the Czech Trade Register
Příčná 1892/4, 110 00 Praha 1, Czech Republic
IČO 29594103
mail@bartkowiak.cz

I run a one-person business, so there’s no data protection officer. Any question about your data comes straight to me.

When you visit the site

  • Hosting. The site runs on Vercel. Like any web server, it logs technical details of each visit (your IP address, browser, the page and the time) to keep the site running and safe. I don’t use these logs to find out who you are.
  • Visit counts. I use Plausible Analytics, which counts visits without cookies and without storing your IP address. It shows me totals only: which pages are read, where visitors come from (including campaign tags in links, such as utm_source), roughly where (down to the city) and on which device, and how many people click to contact me, book a call or subscribe. None of it identifies you.
  • Fonts. They come from this site itself, so your browser doesn’t contact Google or anyone else for them.
  • Links to LinkedIn. They’re plain links. LinkedIn learns nothing until you click one, and then its own privacy rules apply.

Legal basis: my legitimate interest in running a secure website and knowing which pages are useful (GDPR article 6(1)(f)).

When you book a call

The booking calendar on the homepage is run by Cal.com. It sits at the end of the page and also opens from the homepage’s buttons. When you book, you give your name, your email and, if you like, a note and the emails of anyone you invite along. Cal.com also records the time you chose and your time zone, sends us both a confirmation, and shows me the booking. The call itself runs on Cal Video, Cal.com’s own video service.

The calendar loads when you reach the end of the page or press a button that opens it. From then on, Cal.com receives the technical details your browser sends (such as your IP address) and may store small files it needs to work, for example to remember your time zone. If you’d rather avoid that, just email me instead.

You don’t have to give me any of this, but without a name and email I can’t book the call or reply. Legal basis: steps you asked for before we might work together (GDPR article 6(1)(b)).

When you write to me

My email runs on Microsoft 365. When you write, I get your address, your name if you give it, and whatever is in your message. I use it to reply to you.

Legal basis: answering your question and, if it leads there, preparing our work together (GDPR article 6(1)(b) and (f)).

The newsletter

The newsletter hasn’t started yet. When it does, it will be sent through Ecomail, a Czech service. If you subscribe, I get your email address and the date you signed up. Ecomail may also show me whether an email was opened or a link clicked, which tells me which topics are worth writing about.

Every issue will have an unsubscribe link, or you can simply write to me. Legal basis: your consent (GDPR article 6(1)(a)), which you can withdraw at any time.

How long I keep it

  • Bookings and emails: I delete them about a month after our call or last message.
  • Your contact details: after that, I keep your name, email and phone number (if you gave me one) in my phone’s contacts, so we can stay in touch. This is my legitimate interest (GDPR article 6(1)(f)). Tell me and I’ll remove them.
  • If we work together: for as long as the work lasts, and invoices for as long as Czech tax law requires (up to 10 years).
  • Newsletter: until you unsubscribe.
  • Visit counts: kept only as totals that identify no one.
  • Hosting logs: Vercel keeps them for a limited time under its own rules. I don’t keep copies.

Who else handles it

These services process data for me, only on my instructions:

  • Vercel Inc. (USA): hosting the website
  • Plausible Insights OÜ (Estonia, EU): visit counts
  • Cal.com, Inc. (USA): booking calls and the video call
  • Microsoft (Ireland and USA): email
  • ECOMAIL.CZ, s.r.o. (Czech Republic): the newsletter, once it starts

Vercel, Cal.com and Microsoft are American companies, so your data may be processed in the USA. These transfers are protected by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

I don’t sell your data, share it for advertising or pass it to anyone else, unless the law requires it, for example at the request of a court or authority.

Cookies

This site sets no cookies of its own, and Plausible counts visits without them. That’s why there’s no cookie banner. The one exception is the Cal.com calendar: once it loads, it may store a few small files it needs to work. The CLEO pages remember which look you picked, but only in your own browser; nothing is sent anywhere. I don’t use any advertising or tracking cookies.

Your rights

You have the right to:

  • know what data I have about you, and get a copy
  • have it corrected if it’s wrong
  • have it deleted
  • limit what I do with it
  • object to its use where I rely on legitimate interest
  • get it in a common format, for yourself or someone else
  • withdraw your consent at any time, for example to the newsletter

Write to mail@bartkowiak.cz. I’ll reply within a month, usually much sooner, and may ask you to confirm it’s really you.

If you think I’ve handled your data wrongly, you can complain to the Czech data protection authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

I don’t make automated decisions about you or build profiles. If anything here changes, for example a new service, I’ll update this page and the date at the top.

Questions about your data?

Write to me. I’ll reply within a month, usually within a few days.