When you write to me through the form on this website, you hand over a few details about yourself. This page explains what I do with them, how long I keep them and what you can do about it. No legalese, but nothing left out.
Who processes your data
Luboš Hilgert, company ID 01169475, not registered for VAT. I am a sole trader, I work alone and I have no data protection officer – it is not required and at this scale it would make no sense. You can write to me at [email protected] or call +420 604 254 514.
What I have about you, and where it came from
Only what you type into the form yourself:
- your name – so I know how to address you,
- an e-mail address or phone number – so I have somewhere to reply,
- your website address, if the enquiry is about taking over or maintaining a site,
- the text of your message, meaning anything else you decide to tell me.
I do not buy or look up anything else about you elsewhere. Alongside this, the web server keeps ordinary access logs including your IP address – that is a standard part of running a website and it serves to keep it secure.
Why I process it and on what basis
- To reply to you and prepare a quote. Legal basis: steps prior to entering into a contract, Article 6(1)(b) GDPR.
- To deal with you when you write on behalf of a company or ask a general question. The contracting party would then be the company rather than you personally, so here I rely on my legitimate interest in answering whoever got in touch – Article 6(1)(f).
- To protect the form against spam and abuse. Legitimate interest in running the site securely – Article 6(1)(f).
- To keep a record of what we agreed, should a dispute arise. Legitimate interest in defending my legal claims – Article 6(1)(f).
I do not ask for your consent and I do not need it. To reply to you I have to process your message – otherwise the form would be pointless. Consent would only belong to something genuinely optional on top, such as a newsletter. I do not run one.
You do not have to fill the form in, no law requires it. Without a contact detail, though, I have no way of getting back to you.
How long I keep it
A submitted message reaches me by e-mail and is also stored in the website administration, so that an enquiry is not lost if e-mail delivery fails.
After one year both copies are deleted. In the website administration this is done by an automatic clean-up that runs every day and removes records older than twelve months. If an enquiry turns into a project, I then work with your details as client data – that is a different purpose with its own retention period, driven mainly by accounting rules.
Server backups are overwritten in a rotation, so a deleted record may survive in them for a while until the backup is overwritten.
Who else gets to see it
I do not sell your data and I do not pass it to anyone who would use it for their own purposes. By their nature, however, the services my website and my mail run on do come into contact with it:
- the server hosting provider the website runs on,
- Seznam.cz, a.s. – my mailbox runs on their Email Profi service,
- Cloudflare, Inc. – all traffic to the site passes through their network and their Turnstile tool protects the form against bots; in doing so it sees your IP address and technical details about your browser, not the contents of the fields you filled in,
- Google – only if you allow analytics cookies; without your consent no measurement is started.
Cloudflare is a US company, so part of the processing takes place outside the European Union. This is covered by the European Commission’s adequacy decision under the EU-US Data Privacy Framework, supplemented by standard contractual clauses.
Cookies and measurement
The site uses necessary cookies, without which it would not work, plus analytics and marketing cookies that are only activated after you agree in the banner shown on your first visit. You can change your choice at any time using the cookie button in the corner of the page.
What you can do about it
At any time you have the right to:
- know what I hold about you and get a copy,
- have it corrected when it is wrong,
- have it deleted or its use restricted,
- receive your data in a machine-readable form and take it elsewhere,
- object to processing based on my legitimate interest – I then have to stop unless I can demonstrate compelling grounds to continue.
Just write to [email protected]. You do not have to justify anything and I will respond within a month at the latest. If my answer does not satisfy you, you can complain to the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
What I do not do
I do not make automated decisions about you, I do not profile you, I do not send you marketing you did not sign up for, and I do not pass your details to anyone for marketing purposes.
Last updated: 28 August 2026.