Privacy and cookies
In short: traffic measurement is switched on only with your consent. I don't track you for advertising. I process personal data only when you write to me yourself.
Effective from 30 October 2026. This is a translation of the Czech original; if the two differ, the Czech version prevails.
Who processes the data
The controller of personal data is Václav Duda, email vaclav@vaclavduda.cz.
Cookies and traffic measurement
The website itself uses no cookies. The only exception is the Google Analytics 4 tool (Google Ireland Limited), which I use to find out how many people visit the site, which pages they read, how far down a page they get and which links interest them (for example booking a meeting or an article on Substack).
Google Analytics is loaded only after your consent in the bar shown on your first visit. Without consent nothing is downloaded from third-party servers and no data is sent. You can change or withdraw your consent at any time via the “Cookie settings” link in the footer of the site. When you withdraw it, the analytics cookies on your device are deleted.
- What is stored: the cookies
_gaand_ga_*(valid for 2 years), used to tell visitors apart. The data is statistical; Google does not store your IP address in Analytics 4. - Advertising: the advertising features of Google Analytics are switched off; I don't use the data to show ads or to build profiles.
- Transfer outside the EU: Google may also process data in the USA, on the basis of the mechanisms Google states in its policies.
- Legal basis: your consent. I have set the retention period of data in Google Analytics to 14 months.
- Your choice: your browser stores whether you consent (the item
vd_consent_v1in local storage) for 12 months. This item is technically necessary and sends no data.
Contact form
When you write to me through the form, the message (first name, last name, email, optionally phone number, and the text of the message) is sent by email to my mailbox. It is not stored on the website. I use the data only to reply to you and, where relevant, to arrange cooperation. The legal basis is my legitimate interest in replying to your enquiry, or negotiation of a contract. I keep email correspondence for as long as necessary to handle the enquiry and any cooperation.
The form is protected against spam by Cloudflare Turnstile (Cloudflare, Inc.). The script loads only on the page with the form, without your consent, because it is a technically necessary security measure. When verifying, Cloudflare processes technical information about your browser and IP address to tell that a person is submitting the form, and does not use it for advertising. My legitimate interest is protecting the website from spam.
Third-party services
- Booking a meeting takes place in the Microsoft Outlook booking system (Microsoft Bookings). The data you enter there is processed by Microsoft under its own policies.
- Images next to articles are loaded from the Substack server (substackcdn.com). Substack thereby sees your IP address, as with any other image from a third-party server.
- Spam protection of the form is provided by Cloudflare Turnstile (see above). Cloudflare may process data outside the EU.
- Hosting of the website is provided by VEDOS. The server routinely records technical data about accesses (for example the IP address) to ensure security and operation.
Your rights
You have the right to request access to your data, its correction or erasure, restriction of processing, and to object. Just write to me at vaclav@vaclavduda.cz. If you feel that I am not handling your data properly, you can contact the Czech Office for Personal Data Protection (uoou.gov.cz).