Privacy Policy

Privacy Policy

This is an English translation of the Zásady ochrany osobních údajů. In case of any discrepancy, the Czech version prevails.

This privacy policy (the “Policy”) describes how Mykhailo Hyndriuk processes personal data obtained through the website hyndriuk.cz .

  1. Data controller

    The controller of your personal data is:

    (hereinafter the Controller)

  2. What personal data I process and why

    I only process data that you provide yourself when using the “Request a quote” contact form or in direct communication.

    A) Data from the contact form and direct communication

    Purpose: Handling an enquiry, a request for a quote or an order of services (IT support, digitalization, robotics, software development, AI automation, consulting).

    Categories of data:

    • Identification: name
    • Contact: e-mail, phone (if you include it in your message)
    • Content: the text of your message (the enquiry itself)

    Legal basis: The Controller's legitimate interest in responding to business enquiries and questions. Where the enquiry leads to the conclusion of a contract, the legal basis is the performance of a contract or steps taken prior to entering into a contract.

    Retention period: For the time strictly necessary to handle the enquiry and no longer than 1 year after the end of communication if no cooperation follows, or longer where necessary to protect the Controller's legitimate interests (e.g. in the event of a dispute).

    Messages from the contact form are delivered to the Controller's mailbox and kept for the period stated above. The Web3Forms service, which delivers the messages, may keep a copy for the period set by its terms and service settings.

    B) Technical and operational data

    Purpose: Ensuring the correct and secure operation of the website.

    Categories of data: IP address, server log files, browser type, language settings. This data is received when a page loads by the hosting provider (GitHub Pages) – see section 3.

    Legal basis: The Controller's legitimate interest in ensuring the technical functionality and security of the website.

    Retention period: These records are kept by the hosting provider according to its own rules. The Controller has no access to them and does not store them.

  3. Recipients of personal data

    Personal data may be received by the following recipients, which provide the technical operation of the website and communication for the Controller:

    • GitHub, Inc. (USA) – website hosting (GitHub Pages). According to the GitHub Pages documentation, the visitor's IP address is logged and stored for security purposes when the website is visited.
    • Web3Forms (operated by Web3Creative, India) – delivery of messages from the contact form to the Controller's mailbox. It processes the data entered in the form and the sender's IP address. To protect against spam, it may pass the sender's IP address and e-mail address to its other service providers.
    • Active24 – provider of the Controller's mailbox to which messages from the form are delivered.

    Fonts and the QR code are stored directly on the website, so no external services are loaded when a page is displayed. The website does not use cookies or analytics tools.

    GitHub, Inc. and the Web3Forms service may process personal data outside the EU/EEA. GitHub states in its privacy statement that it complies with the EU-U.S. Data Privacy Framework and relies on standard contractual clauses for transfers from the EU. The operator of Web3Forms refers to standard contractual clauses in its data processing agreement.

  4. Your rights

    In connection with the processing of your personal data, you have the following rights under the GDPR:

    • The right of access to your personal data.
    • The right to rectification or completion of inaccurate or incomplete data.
    • The right to erasure (“right to be forgotten”) where the data is no longer needed for the purpose of processing.
    • The right to restriction of processing.
    • The right to object to processing (in particular processing based on legitimate interest).
    • The right to data portability (where processing is based on a contract or consent and is carried out by automated means).
    • The right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, e-mail: posta@uoou.cz.

    You can exercise these rights by e-mail at mykhailo@hyndriuk.cz.

  5. Security

    The Controller has adopted and maintains technical and organisational measures to ensure the security of your personal data. The website uses encrypted HTTPS transfer, including when contact form data is sent. The security of processing further depends on the security of the services used and on the Controller's organisational measures.

    This Privacy Policy is valid and effective from 20 October 2026.