Privacy policy

Effective from October 2026

This document describes what personal data we process, why, how long we keep it and what rights you have. It follows the GDPR.

Who processes the data

The controller is NKZ s.r.o., company number 19707550, registered at Kurzova 2222/16, 155 00 Prague 13, Czech Republic, with an office at Plynárenská 1, 602 00 Brno. For data protection matters write to ahoj@nkz.dev. We reply within two business days.

What data and why

We process data to the extent needed for a specific purpose. We do not sell it and we do not send marketing you did not ask for. Ad measurement runs only with your consent. The individual purposes, legal bases and retention periods are described below.

Answering an enquiryName, e-mail, optionally phone, the chosen topics and the text of your message. We process it on the basis of the consent you give by ticking the box in the form, and only to handle the enquiry. You can withdraw consent at any time. The enquiry reaches us by e-mail; the site does not store it in a database of its own. We keep it for two years from the last contact.

A booked callIf you book a call through the link on our contact page, you enter your name, e-mail and a time slot directly in the booking tool. We process them for steps taken before entering into a contract and keep them for two years from the last contact.

Performing a contractBilling details, company number, VAT number and the content of the job. We process them to perform the contract, and for tax documents under a legal obligation. We keep them for ten years under the Czech accounting act.

Traffic measurementAggregate data about visits: which page you opened, which site you came from, your country and the type of device and browser. We use Vercel Web Analytics, which stores no cookies or anything else in your browser and does not track you across sites. It tells visits apart by an identifier that, according to Vercel's documentation, is valid for one day only. We see totals, not individual people. The legal basis is our legitimate interest in knowing which parts of the site help people.

Ad measurement (Meta Pixel)Only if you tap Accept in the banner. Meta Pixel then sends Meta which pages you opened, that you sent an enquiry (without its content) or tapped the e-mail, phone or call booking, together with your IP address, browser details and an identifier from the _fbp cookie, or _fbc when you arrive from an ad. The cookies last 90 days. The purpose is to learn whether our Facebook and Instagram ads bring people who then get in touch, and to show ads to people who already know the site. The legal basis is your consent. You can withdraw it at any time with the Cookie settings link in the footer; that also deletes the cookies.

Running and securing the siteIP address and technical details of the request in server logs. For the same reason the server briefly holds the IP address in memory after a form is submitted, so one sender cannot flood the form; it is dropped after ten minutes. We process this in our legitimate interest in the availability and security of the site. Logs are deleted according to the hosting provider's settings, within days.

Cookies and consent

Without your consent the site stores no cookies in your browser, not even technical ones, and calls no third-party servers. The consent banner covers Meta Pixel only. Declining is as easy as accepting and the site works the same.

We remember your choice in browser storage (localStorage). It is not a cookie and is not sent to the server. You can change it at any time with the Cookie settings link in the footer.

Fonts are served from our own server, so loading them sends your IP address nowhere.

The map on the contact page

The map does not load on its own. Until you click it, nothing goes to Google. Clicking loads the map from Google Maps, which sends Google your IP address and browser details. The address is on the page without the map too.

The calculator

What you pick in the calculator stays in your browser. It is kept in storage that empties when you close the tab, and nothing is sent to the server. If you move from the calculator to the contact form, the summary is filled into the message and reaches us only with the form that you send.

Who receives the data

We pass data only to processors that provide a specific service for us, and only as far as they need it, and, with your consent, to Meta:

VercelRunning the site, the server side of the form and traffic measurement.

ResendDelivering the enquiry to our inbox.

CalendlyBooking a call, if you arrange one.

Meta Platforms IrelandAd measurement through Meta Pixel, only with your consent. For collecting the data on the site and passing it on we are joint controllers with Meta; further processing is governed by Meta's policy (facebook.com/privacy/policy).

FakturoidIssuing and keeping tax documents.

Transfers outside the European Union

Vercel, Resend and Calendly are US companies and part of the processing may take place outside the European Union. Processing at each of them is governed by its data processing agreement and the transfer relies on the European Commission's standard contractual clauses. We will provide the wording on request.

Meta Platforms Ireland may transfer Meta Pixel data to its parent Meta Platforms, Inc. in the USA, which is certified under the EU-US Data Privacy Framework.

Your rights

At any time you can ask for access to your data and a copy of it, for a correction of anything wrong, for erasure, for a restriction of processing or for the data in a machine-readable format. You can object to processing based on legitimate interest and withdraw consent at any time.

Write to ahoj@nkz.dev. We handle requests within one month, usually sooner.

Complaints

If you feel we handle your data badly, tell us first. If our answer is not enough, you can turn to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7.

We will update this document whenever the processing changes. We will send you an older version on request.