Privacy

Privacy Policy

Effective from 4 October 2026 for the website radoslavhylak.com and the communication that follows from it. This is an English translation of the Czech policy; in case of any discrepancy, the Czech version prevails.

I value the trust you place in me when you share your contact details. This page explains what data I process, why, how long I keep it, who I share it with and what rights you have. I follow Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll., on personal data processing.

1. Who processes your data

I have not appointed a data protection officer, because the law does not require me to. For anything concerning your data, please contact me directly.

2. What data I process, why and for how long

Enquiry form and contact

When you fill in the form on the website, e-mail me or call, I process the data you give me: your name, e-mail, optionally your company name and phone number, the content of your message and your answers in the form (what you need help with, when you want to start, an indicative budget). Together with the form, the address of the page you sent it from and the time of sending are also stored.

• Purpose: handling your enquiry, preparing a proposal and versions of a marketing plan, communicating about a possible collaboration.
• Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Retention: for the duration of our discussions about a collaboration. If no collaboration follows, I delete the data no later than 12 months after our last communication.

Collaboration

If we agree to work together, I process the data needed to perform the contract and issue invoices: name, company, company ID, billing address, contact details and the content of our communication.

• Purpose and legal basis: performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations, in particular accounting and tax obligations (Art. 6(1)(c) GDPR).
• Retention: for the duration of the collaboration and afterwards for the period required by law for keeping accounting and tax records.

Visiting the website

The website stores no cookies or other identifiers on your device and uses no third-party analytics or marketing tools. Fonts, images and videos are served directly from this website. Links to Instagram and partner websites are ordinary links; data is passed to them only when you click and move to their pages.

When a page loads, the hosting provider processes the technical data needed to deliver the content and protect the website against attacks: IP address, browser and device type, time of the request and the page requested. The legal basis is my legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR); these records are kept for a short time.

Should I introduce visitor analytics or other tools requiring consent in the future, I will update this policy and ask for your consent before they go live.

Work samples

Photographs and videos in the work samples are published by agreement with clients and with the consent of the people shown. If you appear in one of them and would like it removed, please write to me.

3. Who I share data with

I do not sell your data or pass it to third parties for their own marketing. To process it, I use the following service providers (processors), who process it only on my instructions:

Cloudflare and Google may also process data outside the European Economic Area, mainly in the United States. The transfer relies on the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework, under which both providers are certified, and on the standard contractual clauses contained in their data processing terms.

I may also disclose data to public authorities where the law requires me to.

4. How the data is protected

The website communicates exclusively over an encrypted connection (HTTPS). A form enquiry is processed directly at the hosting provider and delivered to my mailbox, which only I can access and which is protected by multi-factor authentication. I process the data myself and give no one else access, with the exception of the processors listed above. No automated decision-making or profiling takes place.

5. Your rights

In connection with the processing of your personal data you have the right:

• to access the data I process about you and to information about that processing,
• to rectification of inaccurate data and completion of incomplete data,
• to erasure of data that is no longer needed for the purpose I collected it for, unless a legal obligation prevents it,
• to restriction of processing,
• to data portability of the data you provided to me, in a machine-readable format,
• to object to processing based on legitimate interest,
• to lodge a complaint with the supervisory authority, the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

You can exercise your rights by e-mail at radoslav.hylak@gmail.com. I will reply without undue delay and at the latest within one month. To avoid releasing data to an unauthorised person, I may ask you to verify your identity before handling your request.

6. Changes to this policy

I may update this policy, for example when I change a service provider or add new features to the website. The current version is always available at this address and is marked with its effective date.