Privacy Policy

This Privacy Policy describes the processing of personal data in connection with the website davidmyska.com, including all of its language versions (the website). The information is provided in particular under the General Data Protection Regulation (GDPR) and Czech Act No. 110/2019 Sb., on the processing of personal data.

The website presents the controller’s work as a software engineer and allows work enquiries to be submitted. The website does not provide user accounts, take payments, or send a newsletter. The website is not directed at children.

The controller of personal data is David Myška, a natural person, Prague, Czechia. Contact email: e-mail. No data protection officer has been appointed. Please use that email address to exercise data-subject rights and for all correspondence concerning personal data.

This notice covers the processing of personal data on the website davidmyska.com as a whole, including all language versions, the contact form, audience measurement and technical security.

This notice does not govern processing by the operators of third-party services to which the website links. Their own policies and terms apply.

Depending on the visit or submission, the following categories of personal data may be processed:

• Identity and contact data from the contact form: name, email address and message text.
• Technical data generated when you visit the website or submit the form: in particular IP address, browser and device data, time and URL of the request, referring page, and other traffic data relating to network communication.
• Short-term security records used to limit abuse of the contact form and to protect the website.

The controller does not request or process special categories of personal data (sensitive data) through the website. Do not submit such data via the contact form.

Data in the contact form originate directly from you. Technical data are collected automatically from your device and network communication during your visit.

Personal data are processed exclusively for the following purposes and on the corresponding legal bases:

• Handling enquiries for software development services and related communication: Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).
• Handling other messages and maintaining communication records: Article 6(1)(f) GDPR (legitimate interests in replying to enquiries and protecting legal claims), or consent under Article 6(1)(a) GDPR where granted.
• Protecting the website and form against spam, abuse, and automated attacks: Article 6(1)(f) GDPR (legitimate interest in infrastructure security).
• Audience measurement and operational optimization without third-party advertising tools: Article 6(1)(f) GDPR (legitimate interest in evaluating website functionality).

Providing data in the contact form is voluntary. Without your name, email address, and message, your enquiry cannot be processed.

The contact form is used to send enquiries and messages to the controller. Submissions are not stored in a public website database; they are securely transmitted via email through the processor Mailgun directly to the controller’s mailbox.

The form employs automated security protections (origin validation, time-limited security tokens, Cloudflare Turnstile, and temporary rate limiting by IP address and email hash for approximately one hour). These measures exist solely to prevent spam and automated attacks, not to profile visitors.

Storing information on terminal equipment is governed by Czech Act No. 127/2005 Sb., on electronic communications. The website itself does not use any cookies (neither functional nor advertising or tracking cookies).

Language preference is determined through the URL path and is not stored in cookies. A cookie consent banner is therefore not required on this website.

Infrastructure and security providers (in particular Cloudflare) may deploy strictly necessary operational elements to ensure secure data transmission and protect against cyberattacks. These elements are not used for profiling or marketing.

Aggregated website traffic measurement is provided by Cloudflare Web Analytics. This solution operates without cookies and does not store identifiers in your browser’s local storage.

Processing is based on legitimate interests under Article 6(1)(f) GDPR to optimize website stability and performance. Collected data are never linked to personal identities or contact form submissions.

Personal data may be disclosed to the extent necessary to the following categories of vetted processors and recipients:

• Mailgun, for reliable transmission of contact form emails.
• Cloudflare, for network security, content delivery, form verification (Turnstile), and aggregated traffic metrics.
• Providers of web hosting and core technical infrastructure.
• Public authorities where mandatory under applicable law.

The controller does not sell personal data. Processors are bound by data processing agreements in compliance with the GDPR.

Certain infrastructure providers (specifically Mailgun and Cloudflare) operate global networks with facilities outside the European Economic Area, including the United States.

Cross-border data transfers comply strictly with Chapter V of the GDPR based on appropriate safeguards, in particular European Commission Standard Contractual Clauses (SCCs) and adequacy decisions (including the EU–US Data Privacy Framework).

Personal data are retained only for as long as necessary to achieve the relevant purpose:

• Contact form correspondence is retained for the duration of the enquiry and subsequently for the applicable statutory limitation period for legal claims (typically 3 years under the Czech Civil Code).
• Temporary abuse-prevention records (IP addresses and email hashes) are retained for approximately 1 hour.
• Operational and network logs at the infrastructure level are managed by providers in accordance with their security and operational standards.

The controller implements appropriate technical and organisational measures to safeguard personal data, including encrypted transmission (HTTPS), input validation, time-limited form tokens, and automated abuse detection.

The website does not engage in automated individual decision-making or profiling within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

The website is intended for professional software development services and is not directed at children. The controller does not knowingly collect or process personal data of children.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access to your personal data (Article 15 GDPR).
• Right to rectification of inaccurate data (Article 16 GDPR).
• Right to erasure (“right to be forgotten”, Article 17 GDPR).
• Right to restriction of processing (Article 18 GDPR).
• Right to data portability under Article 20 GDPR.
• Right to object to processing based on legitimate interests (Article 21 GDPR).
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing.
• Right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz).

The exercise of rights is governed by the conditions set out in the GDPR; in substantiated cases (such as statutory retention duties or defence of legal claims), erasure requests may not be granted in full.

You may exercise your rights by emailing e-mail. Please provide identification details sufficient to match your request with your submission (typically the email address used in the contact form).

You will be notified of measures taken without undue delay, and in any event within one month of receipt. In complex cases, this period may be extended by up to two additional months, with prior notification. Handling of requests is free of charge.

The website contains direct links to external profiles (e.g. GitHub, LinkedIn, Instagram) and project demos. These are standard outbound hyperlinks without embedded tracking plugins. Data processing on destination sites is governed by their respective privacy policies.

The controller may update this Privacy Policy as necessary to reflect technical or legal changes. The current version is always available on this page, with the last-updated date indicated.

David Myška, Prague, Czechia, email: e-mail. Use this address for any enquiries or requests regarding personal data protection.