Privacy notice
Information under Art. 13 GDPR. The GDPR applies directly across the whole EU. As a provider established in Czechia I am also subject to Czech law (Act No. 110/2019 Coll., Act No. 127/2005 Coll.).
1 · Controller
Alexander Seipel
Jeseniova 2829/20, 130 00 Prague, Czech Republic
Email: alex@seipel.me
I am not required to appoint a data protection officer (Art. 37 GDPR). I handle all data protection matters myself.
2 · The short version
This website is a purely informational page about my services. It uses no cookies, no tracking and no analytics. It embeds nothing from third-party servers, and the fonts are served from this site too. Visiting the page therefore opens no connection to Google or to anybody else. There is no automated decision-making and no profiling.
3 · Hosting and server logs
This site is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel is my processor. The basis is its data processing addendum under Art. 28 GDPR (vercel.com/legal/dpa).
When the site is requested, Vercel automatically processes technically necessary data: IP address, date and time of access, file requested, volume transferred, browser identification. That data keeps the site secure and available and defends it against attacks. Vercel runs DDoS mitigation by default. The legal basis is my legitimate interest in undisturbed operation (Art. 6(1)(f) GDPR).
Retention: in my Vercel account these access logs stay visible for one hour, the limit of the Hobby plan I use. I do not analyse them and do not combine them with other data. Beyond that hour Vercel keeps log data only as far as the security and operation of its platform require. It then deletes the data under its own retention policy (vercel.com/legal/privacy-policy).
The site consists entirely of files generated ahead of time: no database, no forms, no server-side logic. Vercel serves it from a global content delivery network, so your request reaches the nearest location. For visits from Europe that is almost always one inside the EU.
4 · Local storage in your browser
The site remembers your choice of colour scheme (light or dark) in your browser’s localStorage. This value never leaves your browser, contains no personal data, and serves only the presentation you asked for. It is therefore strictly necessary for the service you requested, so no consent is required for it. The governing provision is Section 89(3) of the Czech Electronic Communications Act, Act No. 127/2005 Coll., which implements Art. 5(3) of the ePrivacy Directive. You can delete the value at any time in your browser settings.
5 · Contact by email
If you write to me, I process what you send: address, content and time. I use it to answer your enquiry and to begin a possible engagement (Art. 6(1)(b) GDPR for pre-contractual steps, otherwise (f)). Providing it is voluntary. Without it I cannot answer you.
I delete the data as soon as that purpose no longer needs it and no statutory retention period stands in the way. For business records that period is normally ten years under Czech tax and accounting law.
The route a message takes: alex@seipel.me is a forwarding address. Porkbun LLC, 11575 SW Pacific Hwy PMB 40649, Tigard, OR 97223, USA, receives the message and forwards it. I then read and keep it in my mailbox at Google (for users in the EEA: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Transport is encrypted as far as your email provider supports it. There is no end-to-end encryption.
6 · Recipients
I do not sell your data and do not pass it on for advertising. Three service providers are involved:
- Vercel Inc., Covina, CA, USA. Hosting and delivery of the site (processor)
- Porkbun LLC, Tigard, OR, USA. Domain registration, DNS and email forwarding
- Google Ireland Limited, Dublin, Ireland. Mailbox for my email
Beyond them, I disclose data only where the law obliges me to.
7 · Transfers to the United States
Vercel and Porkbun are based in the United States, and Google processes email there in part as well. For Vercel and Google an adequacy decision of the European Commission applies: both are certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR, dataprivacyframework.gov). Porkbun names the European Commission’s standard contractual clauses as its safeguard for such transfers (Art. 46(2)(c) GDPR). It has appointed DataRep as its representative in the EU.
Even with these safeguards, access by US authorities cannot be ruled out entirely, and the legal remedies against it fall short of the European ones. If you would rather avoid that, you can also reach me by post at the address given in the imprint.
8 · External links
This website links to external sites, among them impflotse.de and LinkedIn. Data reaches the operator of such a site only when you click the link. From that point their privacy notice applies.
9 · Your rights
- Access to the data stored about you (Art. 15 GDPR)
- Rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on Art. 6(1)(f), on grounds relating to your particular situation (Art. 21 GDPR)
- Complaint to a data protection supervisory authority. The one competent for me is the Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz. You may also turn to the authority where you live.
An informal email to alex@seipel.me is enough for any of these rights.