Personal Data Processing & Privacy Policy
This document outlines how Jan Sebastián Kostlán collects, processes, and protects your personal data in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR).
1. Data Controller Identity
The data controller responsible for processing personal data on this website is:
2. What Data Is Processed and Legal Basis
We collect and process only the minimum necessary data voluntarily submitted by you via the inquiry/contact form:
- Identification & contact data: First name, last name, email address, phone number.
- Collaboration specifications: Selected field of interest (web, game development, mobile app) and your message text.
- Legal basis & purpose: Processing is based on Art. 6(1)(b) GDPR (steps prior to entering into a contract) and legitimate interest to respond to your inquiry.
- Retention period: Data is retained only for the duration of communication and negotiation, for a maximum of 12 months unless a business agreement is established.
3. Your Rights as a Data Subject
According to the GDPR, you have guaranteed rights that you can exercise at any time:
Right of Access (Art. 15)
Request confirmation of whether and what data is being processed about you.
Right to Rectification (Art. 16)
Request inaccurate or incomplete information to be corrected immediately.
Right to Erasure (Art. 17)
Request permanent deletion of your data ("Right to be Forgotten").
Right to Object (Art. 21)
Object to processing based on legitimate interest or direct communications.
You also have the right to file a complaint with the supervisory authority: Office for Personal Data Protection (Úřad pro ochranu osobních údajů – ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, website: www.uoou.gov.cz.
4. Security and Data Protection Measures
Your data is secured through industry-standard encryption protocols (HTTPS/TLS) during transmission and stored in protected databases with restricted access. Personal data is never sold, leased, or transferred to third parties for commercial or marketing purposes.
Need to exercise your rights or have a question?
Reach out directly by email — response typically within 24 hours.