1. DATA CONTROLLER
The controller of your personal data is:
Ivan Medvedev an individual conducting business under the Czech Trade Licensing Act
Registered office: Křižíkova 393/73 186 00 Praha 8 – Karlín Czech Republic
IČO: 24583065 E-mail: hello@ivanmedvedev.cz
(the “Controller”)
This Privacy Policy explains how the Controller processes the personal data of visitors to ivanmedvedev.cz and of people who contact the Controller through forms, by e-mail or by other means.
2. PERSONAL DATA THAT MAY BE PROCESSED
Depending on how you use the website, the following data in particular may be processed:
- first name and surname;
- e-mail address;
- telephone number, if you choose to provide it;
- company name and other business details;
- information about your project, budget, deadline or requested services;
- the content of your message or enquiry;
- information provided in subsequent communications;
- technical information about your device and browser;
- information about how you use the website;
- information about the pages you visit and your basic interactions with the website.
The Controller processes only the data necessary for the specific purpose.
3. CONTACT AND PROJECT FORMS
If you submit a contact or project form through the website, the Controller processes the information you choose to enter in that form.
This information is used primarily for the following purposes:
- handling your enquiry;
- responding to your message;
- assessing your project;
- preparing a proposal;
- discussing potential cooperation;
- entering into and performing a contract, where applicable.
Submitting a form does not in itself constitute consent to the use of your data for marketing purposes.
Data from the form is not used for unrelated marketing without a separate legal basis.
4. LEGAL BASIS FOR PROCESSING
Where an enquiry concerns the possible conclusion of a contract, personal data is processed primarily on the basis of Article 6(1)(b) GDPR, for the purpose of taking steps prior to entering into a contract or subsequently performing that contract.
In the case of ordinary business communications, particularly where a person is communicating on behalf of a company, processing may also be based on Article 6(1)(f) GDPR.
In such cases, the Controller’s legitimate interests are:
- handling business communications;
- keeping records of communications;
- protecting legal claims;
- ensuring the proper operation of the business.
The analytics tools Google Analytics 4 and Microsoft Clarity are used only with the visitor’s consent under Article 6(1)(a) GDPR.
Non-essential cookies and similar technologies are stored or accessed only after the relevant consent has been given, unless applicable law permits their use without consent.
5. GOOGLE ANALYTICS 4
The website may use Google Analytics 4 once consent has been given.
Google Analytics helps the Controller understand how visitors use the website.
The following information in particular may be processed:
- pages visited;
- basic interactions with the website;
- device type;
- operating system;
- browser;
- approximate geographical area;
- traffic source;
- the duration and course of a visit.
Google Analytics is not activated for analytics purposes before the visitor has given the relevant consent, where that consent is required.
You can change or withdraw your consent at any time through Privacy Settings / Cookie Settings on the website.
6. MICROSOFT CLARITY
The website may use Microsoft Clarity once consent has been given.
Clarity is used to analyse website usage and may generate, for example:
- heatmaps;
- information about clicks and movement on a page;
- anonymised or pseudonymised usage statistics;
- recordings of website sessions.
The main purpose is to identify problems with the user interface and improve the usability of the website.
The Controller does not use Clarity to intentionally record sensitive information entered into contact or project forms.
Clarity is activated for analytics purposes only after the visitor has given the relevant consent.
You can change or withdraw your consent at any time through Privacy Settings / Cookie Settings.
7. COOKIES
The website uses strictly necessary cookies or similar technologies required for it to function properly.
These technologies may be used without consent where they are genuinely necessary to provide the requested service.
Analytics cookies are used only with your consent.
In particular, cookies associated with the following services may be used:
- Google Analytics 4;
- Microsoft Clarity.
The specific cookies, their purposes and their expiry periods may vary depending on the current configuration of the services used.
You can manage your current consent preferences through Privacy Settings / Cookie Settings on the website.
8. MANAGING AND WITHDRAWING CONSENT
When you first visit the website, you can:
- accept analytics cookies;
- reject them;
- or adjust their settings.
Rejecting analytics cookies does not affect your ability to use the website normally or submit an enquiry.
You can change or withdraw your consent at any time using the Privacy Settings / Cookie Settings link on the website.
Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.
9. RECIPIENTS AND SERVICE PROVIDERS
Personal data may be made available, to the extent necessary, to service providers used by the Controller to operate the website and conduct business.
In connection with website analytics, recipients or processors of personal data may include, in particular, companies within the following groups:
- Google – Google Analytics 4;
- Microsoft – Microsoft Clarity.
Other data may be processed by providers of technical infrastructure, hosting or other services necessary for the operation of the website.
The Controller provides these parties only with the data they need to deliver their services.
10. DATA TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA
Some providers of technical or analytics services operate internationally.
In connection with the use of Google or Microsoft services, personal data may therefore, in certain circumstances, also be processed outside the European Economic Area.
In such cases, data is transferred using mechanisms permitted by the GDPR and used by the relevant provider, for example on the basis of an adequacy decision or standard contractual clauses.
11. DATA RETENTION
Personal data is retained only for as long as necessary for the purpose for which it was collected.
Enquiry data is retained for as long as necessary to:
- handle the enquiry;
- prepare a proposal;
- conduct related communications;
- protect legal claims, where applicable.
If a contract is subsequently concluded, the relevant data may continue to be retained for as long as necessary to perform the contract and thereafter to the extent required by law or necessary to protect legal claims.
Analytics data is retained in accordance with the current configuration of Google Analytics 4 and Microsoft Clarity, and only for a period proportionate to its analytics purpose.
Once the purpose no longer applies, the data is deleted or anonymised, unless further retention is required by law.
12. PERSONAL DATA SECURITY
The Controller takes appropriate technical and organisational measures to protect personal data against:
- unauthorised access;
- loss;
- misuse;
- unauthorised disclosure;
- alteration or destruction.
Only individuals or providers who need access for the relevant purpose have access to personal data.
13. REQUIREMENT TO PROVIDE DATA
Providing personal data through a contact or project form is not a statutory requirement.
However, without the information marked as required, it may not be possible to:
- respond to your enquiry;
- prepare a proposal;
- contact you;
- or begin working together.
14. YOUR RIGHTS
To the extent provided by the GDPR, you have, in particular, the right to:
- access your personal data;
- request the rectification of inaccurate data;
- request the erasure of personal data;
- request the restriction of processing;
- object to processing based on legitimate interests;
- request data portability, where the legal conditions are met;
- withdraw your consent at any time.
To exercise your rights, you can contact the Controller at:
hello@ivanmedvedev.cz
Where necessary, the Controller may request proportionate verification of the identity of the person exercising a right.
15. RIGHT TO LODGE A COMPLAINT
If you believe that your personal data is being processed in breach of applicable law, you have the right to lodge a complaint with a supervisory authority.
The supervisory authority in the Czech Republic is:
Úřad pro ochranu osobních údajů Pplk. Sochora 27 170 00 Praha 7 Czech Republic
Website: uoou.gov.cz
16. AUTOMATED DECISION-MAKING
When processing personal data through this website, the Controller does not carry out automated individual decision-making that produces legal effects concerning a visitor or similarly significantly affects them.
17. CHANGES TO THIS PRIVACY POLICY
The Controller may update this Privacy Policy, particularly if there are changes to:
- the technologies used;
- analytics tools;
- the way personal data is processed;
- legal requirements.
The current version is always published on this page.
18. CONTACT
If you have any questions about the processing of personal data, you can contact:
Ivan Medvedev hello@ivanmedvedev.cz
This Privacy Policy takes effect on 1 September 2026.