Privacy policy

Effective from September 2026

This document describes what personal data we process, why, how long we keep it and what rights you have. It follows the GDPR.

Who processes the data

The controller is NKZ s.r.o., company number 19707550, registered at Kurzova 2222/16, 155 00 Prague 13, Czech Republic, with an office at Plynárenská 1, 602 00 Brno. For data protection matters write to ahoj@nkz.dev. We reply within two business days.

What data and why

We process data to the extent needed for a specific purpose. We do not use it to sell databases or for ad targeting, and we do not send marketing you did not ask for. The individual purposes, legal bases and retention periods are described below.

Answering an enquiryName, e-mail, optionally phone, the chosen topics and the text of your message. We process it on the basis of the consent you give by ticking the box in the form, and only to handle the enquiry. You can withdraw consent at any time. The enquiry reaches us by e-mail; the site does not store it in a database of its own. We keep it for two years from the last contact.

A booked callIf you book a call through the link on our contact page, you enter your name, e-mail and a time slot directly in the booking tool. We process them for steps taken before entering into a contract and keep them for two years from the last contact.

Performing a contractBilling details, company number, VAT number and the content of the job. We process them to perform the contract, and for tax documents under a legal obligation. We keep them for ten years under the Czech accounting act.

Traffic measurementAggregate data about visits: which page you opened, which site you came from, your country and the type of device and browser. We use Vercel Web Analytics, which stores no cookies or anything else in your browser and does not track you across sites. It tells visits apart by an identifier that, according to Vercel's documentation, is valid for one day only. We see totals, not individual people. The legal basis is our legitimate interest in knowing which parts of the site help people.

Running and securing the siteIP address and technical details of the request in server logs. For the same reason the server briefly holds the IP address in memory after a form is submitted, so one sender cannot flood the form; it is dropped after ten minutes. We process this in our legitimate interest in the availability and security of the site. Logs are deleted according to the hosting provider's settings, within days.

What the site does not do

The site stores no cookies in your browser, not even technical ones. That is why you will not find a consent banner here; there would be nothing to consent to.

We run no advertising tools and we do not track you across sites. Fonts are served from our own server, so loading them sends your IP address nowhere.

The map on the contact page

The map does not load on its own. Until you click it, nothing goes to Google. Clicking loads the map from Google Maps, which sends Google your IP address and browser details. The address is on the page without the map too.

The calculator

What you pick in the calculator stays in your browser. It is kept in storage that empties when you close the tab, and nothing is sent to the server. If you move from the calculator to the contact form, the summary is filled into the message and reaches us only with the form that you send.

Who receives the data

We pass data only to processors that provide a specific service for us, and only as far as they need it:

VercelRunning the site, the server side of the form and traffic measurement.

ResendDelivering the enquiry to our inbox.

CalendlyBooking a call, if you arrange one.

FakturoidIssuing and keeping tax documents.

Transfers outside the European Union

Vercel, Resend and Calendly are US companies and part of the processing may take place outside the European Union. Processing at each of them is governed by its data processing agreement and the transfer relies on the European Commission's standard contractual clauses. We will provide the wording on request.

Your rights

At any time you can ask for access to your data and a copy of it, for a correction of anything wrong, for erasure, for a restriction of processing or for the data in a machine-readable format. You can object to processing based on legitimate interest and withdraw consent at any time.

Write to ahoj@nkz.dev. We handle requests within one month, usually sooner.

Complaints

If you feel we handle your data badly, tell us first. If our answer is not enough, you can turn to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.

We will update this document whenever the processing changes. We will send you an older version on request.