Privacy notice

Who processes your data

Jakub Vantuch is the controller of personal data collected through this website. You can contact me about data processing at contact@vantuch.dev or +420 735 023 812.

Inquiries and communication

When you use the contact form, I process your name, email, optional phone number, and message to reply, discuss your project, and potentially prepare an offer. These details are stored in my Twenty CRM; I may also receive an email notification through Resend.

The legal basis is taking steps towards a possible contract at your request (GDPR Article 6(1)(b)); for business correspondence and its management, I also rely on legitimate interests (Article 6(1)(f)). Only your name, email, and message are required. Without them, I cannot respond.

Newsletter

If you subscribe to the newsletter, I process your email to send selected articles, projects, and practical insights. The legal basis is your consent (GDPR Article 6(1)(a)), which you can withdraw at any time through the unsubscribe link in each message or by emailing contact@vantuch.dev.

The email is retained until you unsubscribe. An external newsletter provider may be used to manage consent and delivery and will be identified when subscriptions are enabled; the website form remains inactive until that provider is configured.

Client referrals

The Refer a client page has no form for entering another business's or person's contact details. If you request a personal referral link through the form, I process your name and email to create the link, deliver it automatically, and manage referrals. The prospective client submits their own inquiry; I process their details as described under Inquiries and communication.

If a prospective client uses a referral link, I may attach the verified referrer identifier to their inquiry in the CRM to assess the referral and any reward. Without a link, the client may name the referrer on the introductory call. I rely on legitimate interests for referral records (GDPR Article 6(1)(f)).

Referral links and technical operation

If you arrive with a ?ref URL parameter, I store the referral identifier in an HTTP-only cookie called vantuch_referral for up to 30 days. This lets me attribute a later inquiry without displaying the referrer's details in the form. I verify the identifier on the server. This processing supports referral records and is based on legitimate interests (GDPR Article 6(1)(f)).

The hosting provider Vercel may process technical details needed to deliver and secure the site, such as an IP address and request data. Cloudflare Turnstile protects forms from abuse and may process technical device and request details during verification.

Cookies, analytics and diagnostics

With your consent, I use Microsoft Clarity and Cloudflare Web Analytics to understand how the website is used and improve it. Clarity may store analytics cookies and record interactions with the page. You can change your choice at any time through Cookie settings in the footer.

I use Sentry to diagnose errors, with default personal-data transmission disabled. The service may process technical details about an error, browser, and request that are needed to find and fix problems.

Who may receive the data

I use Vercel to host the website, Cloudflare for form protection and analytics, Microsoft Clarity for analytics, Sentry for diagnostics, Twenty CRM for inquiries, and Resend for messages and notifications. When the newsletter is enabled, I will also identify its delivery provider here. These providers may access only the information needed for their respective services. I do not collect third-party contact details on the referral page or sell information to third parties.

How long I retain data

I keep data for as long as needed to handle an inquiry or referral and related communication. If a contract or referral reward results, necessary details may be kept longer to meet legal obligations and defend legal claims. I remove details when they are no longer needed for those purposes. The referral cookie expires after no more than 30 days.

Your rights

You may request access, correction, erasure, or restriction of your data and, where applicable, portability. You may object to processing based on legitimate interests. I do not use automated decision-making on this site that produces legal or similarly significant effects for you. Contact me at contact@vantuch.dev to exercise your rights. You may also lodge a complaint with the Czech Data Protection Authority.