Privacy policy.
When you send me an inquiry or an email, you trust me with a little personal data. Here’s what it is, what I use it for, how long I keep it and what your rights are. Short and straightforward.
01Who handles your data
The data controller is me:
Jiří Jaroslav Kratochvíl – JJK studio
Company ID (IČO) 07902778
Kollárova 285/9, 697 01 Kyjov, Czech Republic
For anything to do with your data, write to the same address.
02What data I process
Only what you send me yourself through the inquiry form or by email:
- your name,
- your email address,
- your company or brand name, if you give it,
- the content of your message and the type of work you chose,
- any other details you write or send me by email (a phone number or project materials, for example).
03What I use it for
To reply to your inquiry, clarify the brief and prepare a quote. If we agree to work together, I use it to communicate about the project and to invoice it.
I don’t sell your data to anyone, and I don’t use it for advertising or newsletters.
04Legal basis
Processing is necessary for steps you yourself requested before entering into a contract (Article 6(1)(b) GDPR). That’s why the form doesn’t ask for consent – without this data I simply couldn’t reply to you.
If we work together, I process the data to perform the contract and to meet my legal obligations (accounting and tax rules, for example).
05How long I keep it
- An inquiry that doesn’t lead to work: while it’s being handled, and no longer than 2 years after our last contact. Then I delete the data.
- If we work together: for as long as we work together, and after that only as long as the law requires – typically invoicing records.
06Who else has access
I don’t sell or pass on your data for anyone else’s purposes. Technically, though, it passes through two services the website and email can’t run without. Both process it only on my instructions, as so-called processors:
- Cloudflare, Inc. – website hosting.
- Google Ireland Limited (Google Workspace) – processing of inquiries from the form, and the [email protected] mailbox where they arrive and from which I reply.
Transfers outside the EU: both companies belong to groups based in the USA, so data may also be processed outside the European Union. Such transfers are covered by their certification under the EU–US Data Privacy Framework and by standard contractual clauses approved by the European Commission.
07Cookies and tracking
The site uses no cookies, has no analytics or advertising tools and doesn’t track how you move around it. Fonts and all libraries load directly from this site, so nothing goes to other companies even when the page loads.
Your browser stores just two small things for convenience: an unfinished inquiry (so it isn’t lost if you close the panel by accident – it’s deleted once sent) and which track you last played. Both stay on your device and are never sent anywhere. You can delete them at any time in your browser settings.
08Your rights
You can write to me at any time to:
- ask what data I hold about you and get a copy,
- have it corrected or completed,
- request its erasure or restriction of processing,
- object to the processing,
- ask for your data in a machine-readable format.
I’ll reply without undue delay, within one month at the latest. If you feel I’m not handling your data properly, you can contact the Czech supervisory authority, the Office for Personal Data Protection, or the supervisory authority in your own country.
09Changes to this policy
If something changes – the hosting or the way the form is sent, for example – I’ll update this page and the date at the top.